last executing test programs: 10m57.035721048s ago: executing program 2 (id=378): socket(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) r0 = getpid() rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x4, &(0x7f0000000600)={0x2c, 0x1, 0x5}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x40, 0x0, 0x1, 0x70bd2c, 0xfffffffc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x33}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}]}]}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 10m54.288013227s ago: executing program 2 (id=392): r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r7 = syz_pidfd_open(r0, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x2) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x31, &(0x7f0000001600), 0x4) write$P9_RFLUSH(r8, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) 10m53.0406841s ago: executing program 2 (id=397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m52.356245555s ago: executing program 2 (id=402): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000000)={&(0x7f0000000180), 0x0, 0xffffffa1}) 10m50.272311055s ago: executing program 2 (id=405): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f000000000000020003"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 10m49.03727539s ago: executing program 2 (id=408): r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r7 = syz_pidfd_open(r0, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x2) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x31, &(0x7f0000001600), 0x4) write$P9_RFLUSH(r8, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) 10m33.95602706s ago: executing program 32 (id=408): r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r7 = syz_pidfd_open(r0, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x2) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x31, &(0x7f0000001600), 0x4) write$P9_RFLUSH(r8, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) 10m11.973249867s ago: executing program 1 (id=513): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x1f4, 0x0, 0x0, 0x54}, 0x9c) 10m11.532906107s ago: executing program 1 (id=514): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303135322c696f636861727365743d69736f383835392d312c6769643d079934ad00cbd2f8113d955e8f4f7f8e2bb95e0c6f32910e50cf9c17dd7347b516900007b988f1a75b1ae5b6859275b18b8fc681f05495b39d62f7ad74dabf6efeda967c88b54940f6e96119aec969a18e15d82929ccb63d63da731c43b90c4ba094d45cee7ad4f7175b562bf1ecca815a9e4c44aa3ae2045ca489906829efe73b070000baa910ae3f5a1af8ab3a93c118823beaa5ddcc3cf2ec800535c88e200948286de1df80a48aa3", @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d3030303030303030303030303030fd30303030303030372c644b73636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x150d, &(0x7f0000003f80)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x3a, 0x25, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1c1) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0, 0x1000) lstat(&(0x7f0000001440)='./file0\x00', &(0x7f0000000600)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 10m9.852559661s ago: executing program 1 (id=521): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc", 0x13}], 0x1}, 0x0) 10m9.662138157s ago: executing program 1 (id=522): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000001}, 0x20000080) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r2, 0xbc7ae000) 10m8.731272097s ago: executing program 1 (id=525): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x10, 0x180a0, 0x0, 0x0, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x68, 0x0, 0x2d, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @end, @end, @end, @lsrr={0x83, 0x3, 0xe6}, @timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x0, [{@multicast2, 0x8}, {@empty, 0xffff3eeb}, {@private=0xa010100, 0x32bd}, {@private=0xa010101, 0x9}, {@local, 0x9}]}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001811", @ANYRES64, @ANYBLOB="0000000000000000b708f2010000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="fe8000000000000000000000000000bb0800000032"], 0xf8}, 0x1, 0x0, 0x0, 0x8894}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x250, 0x5, 0x7, 0x101, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x7}, [@typed={0x90, 0x107, 0x0, 0x0, @binary="3754cd23410a7fa524a395e2d29f792e94670942a5b14bf0dca4c20179a2424d967a3e334b476382091bdf74bc24e7c2a39e3bad2810f7f13aedf1e8370bfe0da0f14f8c4081ca616f19f54284a6e9245d834a8e897a7c294ef81b0f296fbe78a807d9acfaed41d962f462b25116b206ecea9d347a153bd37b6a15f5f225d5b41158958d897acd0fd19f5412"}, @generic="005b9df5e4bb213bba4ca7ba87abc9e3eb4c6c307c430031d0939a72b9a069a0fdc58fb97a9d1690fcca", @generic="80d9bee8460b2e498667cd4992ec03866ade779400f5f494ecfc1575af591b8e78763fba12da4d501da3d1e8f2d5a017cbc5e374a80a6ac88646ec4a9ecd7cf64f2c22f87d9fb3acb1519c12295aa9b20f58efa684856817069d77b3484ab8f07e423a8f61e9cbfcf71e7a9f111f139f4578c4f76b34294b25181261f7e8f4883e298e19265bceef8c7dc912a5f8d83fb7668bad27049986fd7c1a5805a7f05c1d48dfec0ff4fa9cb134dace60a6fe80e7fd05a7b7596852a6251be72efb6e3e103f216821be898b2c7233abc0", @generic="c11fe0278ac14b264e6648cc32d9e7b42b1f227f925a421053c27aa6129603f1c25eaeba38fb1c1809da92f9493d6bc73817ee7c99915b2dc502b1258444603cc0bedac0bfa70d4d428952ee4b5ed7f235a3809b90d53e4cab7415c6a5897237572f031b3362ce6e42b9d246ff846147e8bae76d7c03e49111a76a2e42", @generic="4bf7d2538e05b9f82a78fc7ae5c1bb83f25185a5a518177618bb145fb6b6c92a1e99a54fcd5d63e8fbe4c56a2ce311d8d9891fc387476d4b"]}, 0x250}, 0x1, 0x0, 0x0, 0x8}, 0x24040081) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000002400)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f00000003c0)="$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") setxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) lchown(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2e0, 0x138, 0xa0, 0x2e0, 0x138, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x72, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e22}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffffff, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xc, 0x3}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @empty}}}, {{@ip={@rand_addr=0x64010102, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001d0001002dbd7001efdbdf0000000000", @ANYRES32=r6, @ANYBLOB="0200240108000a00000000000a0001"], 0x64}}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e22, 0xb26, @empty, 0x10}, 0x80, 0x0, 0x0, 0x0, 0x4b0}}], 0x1, 0x8000) sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r10}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x8005) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000001800010026bd7000fddbdf2502140000fc02ff02000a00000800050000000000ac20a85423ba3f44a9cd731bfe443776adacfa0e8490096fd2a316d00eabf89c0aa9a779d47e0d6b8de40ffc4458b1d54b68"], 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x83992ac82ebf580e) 10m6.252437915s ago: executing program 1 (id=535): r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r7 = syz_pidfd_open(r0, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x2) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x31, &(0x7f0000001600), 0x4) write$P9_RFLUSH(r8, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) 9m59.94441082s ago: executing program 0 (id=547): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000001}, 0x20000080) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r4, 0xbc7ae000) 9m59.535816385s ago: executing program 0 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473", 0xe, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$FUSE(r2, &(0x7f0000003f00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000480), 0x8000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@noxattr}], [{@fowner_lt={'fowner<', r3}}, {@uid_eq}, {@smackfsdef={'smackfsdef', 0x3d, '\t(/^:$}}'}}, {@fsname={'fsname', 0x3d, 'smaps\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}}) 9m59.288687s ago: executing program 0 (id=551): syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) socket$netlink(0x10, 0x3, 0xc) syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 9m57.390548925s ago: executing program 0 (id=556): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) 9m54.686349712s ago: executing program 0 (id=560): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000001}, 0x20000080) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r4, 0xbc7ae000) 9m54.497362138s ago: executing program 0 (id=562): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fspick(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) r3 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x2e, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x6, 0x8, 0x5, 0x2]}, &(0x7f0000000180)=0x54) 9m51.161644369s ago: executing program 33 (id=535): r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r7 = syz_pidfd_open(r0, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x2) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x31, &(0x7f0000001600), 0x4) write$P9_RFLUSH(r8, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) 9m39.335049372s ago: executing program 34 (id=562): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fspick(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) r3 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x2e, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x6, 0x8, 0x5, 0x2]}, &(0x7f0000000180)=0x54) 8m32.810320038s ago: executing program 3 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r0, 0x12) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m32.569817834s ago: executing program 3 (id=780): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f000000000000020003"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) syz_io_uring_setup(0x599e, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040014) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 8m27.042121576s ago: executing program 3 (id=793): socket$netlink(0x10, 0x3, 0xc) syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 8m25.795623608s ago: executing program 3 (id=798): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40045b17, 0x0) 8m22.677061149s ago: executing program 3 (id=808): socket$netlink(0x10, 0x3, 0xc) syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 8m20.588577958s ago: executing program 3 (id=813): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000100)={0x24, &(0x7f0000000140)=[{0x31, '\x00', @buffer={"fecd1c86a4b825f4d8443e5e5147af7a5c376884927c1e7e2e7e86497b1d7c32", 0x20}, 0x5}]}) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) close_range(r1, 0xffffffffffffffff, 0x0) 8m4.96874746s ago: executing program 35 (id=813): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000100)={0x24, &(0x7f0000000140)=[{0x31, '\x00', @buffer={"fecd1c86a4b825f4d8443e5e5147af7a5c376884927c1e7e2e7e86497b1d7c32", 0x20}, 0x5}]}) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) close_range(r1, 0xffffffffffffffff, 0x0) 6m41.384460624s ago: executing program 5 (id=1103): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r1, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 6m40.463233316s ago: executing program 5 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_emit_ethernet(0x44, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xb, 0xf, 0x0, {0x5, 0x4, 0x3, 0x1f, 0x5df, 0x68, 0x3, 0xf5, 0x84, 0x0, @multicast1, @empty}, "7ada1f382d21"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) 6m38.89562548s ago: executing program 5 (id=1108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 6m33.936307875s ago: executing program 5 (id=1120): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_emit_ethernet(0x44, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xb, 0xf, 0x0, {0x5, 0x4, 0x3, 0x1f, 0x5df, 0x68, 0x3, 0xf5, 0x84, 0x0, @multicast1, @empty}, "7ada1f382d21"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) 6m32.097399919s ago: executing program 5 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000", 0x2}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r0, 0x12) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6m30.904374652s ago: executing program 5 (id=1129): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000200)=@chain) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006c00), 0x3, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008054) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 6m14.147001115s ago: executing program 36 (id=1129): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000200)=@chain) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006c00), 0x3, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008054) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 8.183456643s ago: executing program 7 (id=2900): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r7, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 8.073964383s ago: executing program 9 (id=2902): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x448340, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f00000000c0)={0x7}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120141014813442024040075ee8e28e1e703002f1ebaf96901020301090224000200000000000000070296d100020d000609"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r3, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x2400c080) 7.1800302s ago: executing program 8 (id=2903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000820}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 7.114661438s ago: executing program 7 (id=2904): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socket$inet(0x2, 0x1, 0xffffff80) 6.966523801s ago: executing program 8 (id=2906): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)={0x10, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x5a062f9b58595bb3}, 0x20000000) syz_open_dev$evdev(0x0, 0x2, 0x842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) socket$inet(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) 6.875173904s ago: executing program 4 (id=2907): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80000, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8, @ANYRES16], 0x14) 5.798414578s ago: executing program 8 (id=2908): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x44049) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 5.734788246s ago: executing program 6 (id=2909): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) 5.688203417s ago: executing program 4 (id=2910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000800000003125ce882cbf490d908f1523f000000000000", 0x2e}, {0x0}, {0x0}], 0x3}, 0x4005) 4.76648184s ago: executing program 6 (id=2911): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)={0x10, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x5a062f9b58595bb3}, 0x20000000) syz_open_dev$evdev(0x0, 0x2, 0x842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x312d000, 0x800, 0xffff, 0x3}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) socket$inet(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) 4.696948437s ago: executing program 8 (id=2912): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000), 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x4004811) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004071) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/20, 0xc, 0x722, 0x0, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r6, 0x29, 0x1f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x44, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x6, 0x4, "0100", "9f664322f034ae6ed6e9672b82ada4ed697aa44295f7a2737b23dae2603b25f1a80b4d3f092bd48ea0a2f226f03dbf45fbf8"}}}}}, &(0x7f0000000040)={0x0, 0x4, [0xf61, 0x5c4, 0x16c, 0x5ee]}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f00000002c0), 0x4) 4.555485071s ago: executing program 8 (id=2913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r9, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x4011) 4.502751481s ago: executing program 6 (id=2914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r7, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 4.303575305s ago: executing program 4 (id=2915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 3.6161659s ago: executing program 7 (id=2916): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.492780908s ago: executing program 6 (id=2917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000820}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 3.470311723s ago: executing program 8 (id=2918): syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @empty, [], "df7b1a88946650c3"}}}}}}}, 0x0) 3.408290332s ago: executing program 9 (id=2919): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)={0x10, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x5a062f9b58595bb3}, 0x20000000) syz_open_dev$evdev(0x0, 0x2, 0x842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) socket$inet(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) 1.764885542s ago: executing program 4 (id=2920): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80000, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8, @ANYRES16], 0x14) 1.762833512s ago: executing program 6 (id=2921): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xa0a, 0x458}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 1.739655588s ago: executing program 7 (id=2922): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000780)={0xa, 0x4e20, 0xaf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000000000280000000000000029000000050000002c02020100000000fe8000000000000000000000000000bb"], 0x58}, 0x0) 1.69803415s ago: executing program 9 (id=2923): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x44049) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 1.578578478s ago: executing program 7 (id=2924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000), 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x4004811) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004071) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x722, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r6, 0x29, 0x1f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x44, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x6, 0x4, "0100", "9f664322f034ae6ed6e9672b82ada4ed697aa44295f7a2737b23dae2603b25f1a80b4d3f092bd48ea0a2f226f03dbf45fbf8"}}}}}, &(0x7f0000000040)={0x0, 0x4, [0xf61, 0x5c4, 0x16c, 0x5ee]}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f00000002c0), 0x4) 1.549749733s ago: executing program 9 (id=2925): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)={0x10, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x5a062f9b58595bb3}, 0x20000000) syz_open_dev$evdev(0x0, 0x2, 0x842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x312d000, 0x800, 0xffff, 0x3}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) socket$inet(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) 1.15123144s ago: executing program 6 (id=2926): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socket$inet(0x2, 0x1, 0xffffff80) 980.257739ms ago: executing program 9 (id=2927): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2e, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14083, 0x2c01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x5e, 0x4880) 979.376789ms ago: executing program 4 (id=2928): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r7, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 801.150146ms ago: executing program 9 (id=2929): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x448340, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f00000000c0)={0x7}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r3, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x2400c080) 583.83µs ago: executing program 7 (id=2930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 54.909303][ T4171] cgroup: Unknown subsys name 'net' [ 55.046563][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.468227][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.915140][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 57.949959][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 57.978168][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 58.002319][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.053956][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 58.118693][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.125990][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.134323][ T4197] device bridge_slave_0 entered promiscuous mode [ 58.174348][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.182191][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.189957][ T4197] device bridge_slave_1 entered promiscuous mode [ 58.200718][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.207823][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.215817][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.228624][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.235866][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.243975][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.258312][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.265590][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.273574][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.285230][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.292500][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.300214][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.338807][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.346207][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.354394][ T4190] device bridge_slave_0 entered promiscuous mode [ 58.364488][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.387634][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.401323][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.410509][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.418314][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.426379][ T4190] device bridge_slave_1 entered promiscuous mode [ 58.435547][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.446251][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.464124][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.510008][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.517201][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.525773][ T4184] device bridge_slave_0 entered promiscuous mode [ 58.543905][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.562094][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.573410][ T4197] team0: Port device team_slave_0 added [ 58.588919][ T4189] team0: Port device team_slave_0 added [ 58.600122][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.607300][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.615729][ T4184] device bridge_slave_1 entered promiscuous mode [ 58.625250][ T4185] team0: Port device team_slave_0 added [ 58.632345][ T4197] team0: Port device team_slave_1 added [ 58.639183][ T4185] team0: Port device team_slave_1 added [ 58.646505][ T4189] team0: Port device team_slave_1 added [ 58.654745][ T4190] team0: Port device team_slave_0 added [ 58.685597][ T4190] team0: Port device team_slave_1 added [ 58.720285][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.727278][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.753538][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.767183][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.777064][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.784211][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.810423][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.822173][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.829132][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.855269][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.868584][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.875600][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.901549][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.919758][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.927013][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.953088][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.965853][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.975768][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.982796][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.008847][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.030754][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.037724][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.064041][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.079485][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.086927][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.113233][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.176237][ T4189] device hsr_slave_0 entered promiscuous mode [ 59.183042][ T4189] device hsr_slave_1 entered promiscuous mode [ 59.211974][ T4184] team0: Port device team_slave_0 added [ 59.233094][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.239865][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.246647][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.254611][ T4185] Cannot create hsr debugfs directory [ 59.268511][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.275200][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.281830][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.289373][ T4190] Cannot create hsr debugfs directory [ 59.296040][ T4184] team0: Port device team_slave_1 added [ 59.305442][ T4197] device hsr_slave_0 entered promiscuous mode [ 59.312442][ T4197] device hsr_slave_1 entered promiscuous mode [ 59.319144][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.326912][ T4197] Cannot create hsr debugfs directory [ 59.374971][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.382419][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.408555][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.426847][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.434125][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.460194][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.574872][ T4184] device hsr_slave_0 entered promiscuous mode [ 59.581922][ T4184] device hsr_slave_1 entered promiscuous mode [ 59.588464][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.596111][ T4184] Cannot create hsr debugfs directory [ 59.631638][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 59.631638][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 59.632927][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 59.638444][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 59.668432][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 59.802415][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.816492][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.827669][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.843755][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.893702][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.904781][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.914454][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.926573][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.985214][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.011746][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.021531][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.031503][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.047117][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.097513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.110209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.128165][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.149236][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.158714][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.168217][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.177267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.186285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.196054][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.203397][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.212535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.222802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.231815][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.238915][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.247029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.274993][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.286616][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.295156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.328306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.338112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.348277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.364271][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.384423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.392588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.403144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.412340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.419968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.436456][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.447430][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.466662][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.476633][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.485709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.494477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.504228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.513459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.522672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.544094][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.578110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.588504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.600945][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.608029][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.626572][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.634266][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.652172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.660148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.672841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.681587][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.688663][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.702343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.710495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.749811][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.774480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.783881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.822546][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.831886][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.840496][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.849542][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.858460][ T3055] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.865851][ T3055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.873973][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.883591][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.892256][ T3055] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.899321][ T3055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.907165][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.916406][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.925498][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.934792][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.945706][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.953900][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.964066][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.975279][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.984726][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.004731][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.030158][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.037983][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.047610][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.056752][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.065552][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.074086][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.087062][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.095630][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.104394][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.112866][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.124219][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.135864][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.148045][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.164627][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.174584][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.185442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.194353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.230390][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.240161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.259902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.269581][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.276692][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.291325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.299976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.314793][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.321905][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.331656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.340264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.349613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.359846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.369312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.378339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.387368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.395718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.426730][ T4189] device veth0_vlan entered promiscuous mode [ 61.444648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.464349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.499980][ T4189] device veth1_vlan entered promiscuous mode [ 61.515626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.526136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.537474][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.549582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.567078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.577114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.585779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.596980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.605445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.622643][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.646555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.661674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.669157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.683963][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.707265][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.721380][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 61.731301][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.735943][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 61.745334][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.754290][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.762868][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.767705][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 61.780949][ T4189] device veth0_macvtap entered promiscuous mode [ 61.790534][ T4189] device veth1_macvtap entered promiscuous mode [ 61.797596][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 61.804266][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 61.818328][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.852237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.861589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.869612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.879689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.890193][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.897293][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.906562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.915695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.924608][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.931707][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.942114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.959467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.971646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.983496][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.994843][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.014800][ T4197] device veth0_vlan entered promiscuous mode [ 62.036055][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.051705][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.060431][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.074629][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.086104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.095623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.104891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.115415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.124729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.134386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.143147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.152151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.161140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.169842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.180308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.188321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.202484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.211913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.219339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.244026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.253114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.278270][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.289161][ T4197] device veth1_vlan entered promiscuous mode [ 62.302135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.310418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.339340][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.353058][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.362517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.369929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.377865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.386909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.415914][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.466490][ T4197] device veth0_macvtap entered promiscuous mode [ 62.476135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.489934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.500290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.513406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.524498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.548598][ T4185] device veth0_vlan entered promiscuous mode [ 62.562141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.576763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.585777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.601810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.610494][ T4197] device veth1_macvtap entered promiscuous mode [ 62.663074][ T4185] device veth1_vlan entered promiscuous mode [ 62.676587][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.690471][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.709593][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.718215][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.722908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.734241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.743507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.755847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.764806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.774409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.782868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.791923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.816129][ T4190] device veth0_vlan entered promiscuous mode [ 62.825535][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.838730][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.850015][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.860215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.868640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.876586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.884590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.893308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.903416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.911234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.938972][ T4185] device veth0_macvtap entered promiscuous mode [ 62.951173][ T4190] device veth1_vlan entered promiscuous mode [ 62.959947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.970297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.979869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.991625][ T4185] device veth1_macvtap entered promiscuous mode [ 62.999818][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.014066][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.025713][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.037927][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.061097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.082882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.096791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.105138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.114363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.127077][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.138165][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.147794][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.158025][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.185106][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.197997][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.208768][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.221085][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.234701][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.247704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.257137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.273099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.286928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.312251][ T4190] device veth0_macvtap entered promiscuous mode [ 63.322674][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.339852][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.355989][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.367205][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.384729][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.431261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.439408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.475365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.487574][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.497161][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.506562][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.516151][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.538741][ T4190] device veth1_macvtap entered promiscuous mode [ 63.551257][ T4265] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 63.619756][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.640396][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.650503][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.663141][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.674233][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.684895][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.697350][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.728721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.744006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.769849][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.787257][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.798178][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.802144][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 63.818081][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.825643][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 63.828030][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.871223][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 63.879882][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 63.886034][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.897835][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.908328][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 63.933843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.947291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.959941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.974652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.988140][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.997370][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.011956][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.024743][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.079477][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.101790][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.145188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.153868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.162533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.178340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.186705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.210868][ T4184] device veth0_vlan entered promiscuous mode [ 64.250209][ T4184] device veth1_vlan entered promiscuous mode [ 64.268144][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.269425][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.285058][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.305693][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.314055][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.331489][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.342311][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.378837][ T3055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.397956][ T3055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.413331][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.456589][ T4270] loop1: detected capacity change from 0 to 32768 [ 64.483330][ T4184] device veth0_macvtap entered promiscuous mode [ 64.485260][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.497987][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.510008][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.523929][ T4270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.7 (4270) [ 64.538160][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.547577][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.556786][ T4184] device veth1_macvtap entered promiscuous mode [ 64.570915][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.579591][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.597054][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.611938][ T4270] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 64.631433][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.639966][ T4270] BTRFS info (device loop1): setting nodatasum [ 64.658229][ T4270] BTRFS info (device loop1): force zlib compression, level 3 [ 64.675306][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.687854][ T4270] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 64.718352][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.729372][ T4270] BTRFS info (device loop1): use lzo compression, level 0 [ 64.750098][ T4270] BTRFS info (device loop1): turning on flush-on-commit [ 64.758173][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.770761][ T4270] BTRFS info (device loop1): enabling auto defrag [ 64.777242][ T4270] BTRFS info (device loop1): max_inline at 4096 [ 64.787190][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.799217][ T4270] BTRFS info (device loop1): using free space tree [ 64.806064][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.816514][ T4270] BTRFS info (device loop1): has skinny extents [ 64.823088][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.841600][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.855700][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.867478][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.886148][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.923106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.947534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.017051][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.054811][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.080578][ T4270] BTRFS info (device loop1): enabling ssd optimizations [ 65.112266][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.141044][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.170932][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.195955][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.227550][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.277594][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.341818][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.458305][ T4273] device syzkaller0 entered promiscuous mode [ 65.531735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.561656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.614258][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.634561][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.647489][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.670837][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.875518][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 65.889860][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 65.950575][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.961534][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 65.968169][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 65.980638][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.996675][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.001396][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 66.046958][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.060499][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.069266][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.212538][ T4307] loop0: detected capacity change from 0 to 32768 [ 66.239407][ T4307] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4307) [ 66.391355][ T4300] loop2: detected capacity change from 0 to 32768 [ 66.481207][ T4300] ======================================================= [ 66.481207][ T4300] WARNING: The mand mount option has been deprecated and [ 66.481207][ T4300] and is ignored by this kernel. Remove the mand [ 66.481207][ T4300] option from the mount to silence this warning. [ 66.481207][ T4300] ======================================================= [ 66.616540][ T4291] ODEBUG: Out of memory. ODEBUG disabled [ 66.655000][ T4313] tipc: Started in network mode [ 66.659910][ T4313] tipc: Node identity 0e187548449e, cluster identity 4711 [ 66.673511][ T4313] tipc: Enabled bearer , priority 0 [ 66.818267][ T4313] device syzkaller0 entered promiscuous mode [ 66.867881][ T4312] tipc: Resetting bearer [ 66.895044][ T4307] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 66.914502][ T4291] syz.2.3 (4291): drop_caches: 2 [ 66.941139][ T4307] BTRFS info (device loop0): force clearing of disk cache [ 66.956597][ T4307] BTRFS info (device loop0): metadata ratio 0 [ 66.975045][ T4312] tipc: Disabling bearer [ 66.981036][ T4307] BTRFS info (device loop0): enabling ssd optimizations [ 66.988686][ T4307] BTRFS info (device loop0): using spread ssd allocation scheme [ 66.997375][ T4307] BTRFS info (device loop0): using free space tree [ 67.006646][ T4307] BTRFS info (device loop0): has skinny extents [ 67.026374][ T4300] JBD2: Ignoring recovery information on journal [ 67.075815][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.083427][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.124664][ T4300] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 67.126715][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.143936][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.286589][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 67.306726][ T4307] BTRFS info (device loop0): clearing free space tree [ 67.320592][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 67.339711][ T4307] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.369219][ T4307] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 67.425969][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 67.439735][ T4307] BTRFS info (device loop0): creating free space tree [ 67.456632][ T4307] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.466981][ T4307] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 67.735360][ T4202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop0 scanned by udevd (4202) [ 67.960176][ T4372] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.133498][ T4376] device syzkaller0 entered promiscuous mode [ 68.452218][ T4386] device syzkaller0 entered promiscuous mode [ 68.558453][ T4365] loop2: detected capacity change from 0 to 32768 [ 68.584435][ T4365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.12 (4365) [ 68.626185][ T4365] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 68.649088][ T4365] BTRFS info (device loop2): setting nodatasum [ 68.663165][ T4365] BTRFS info (device loop2): force zlib compression, level 3 [ 68.680398][ T4365] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 68.700344][ T4365] BTRFS info (device loop2): use lzo compression, level 0 [ 68.714265][ T4365] BTRFS info (device loop2): turning on flush-on-commit [ 68.729113][ T4365] BTRFS info (device loop2): enabling auto defrag [ 68.736653][ T4391] syz.4.23 uses obsolete (PF_INET,SOCK_PACKET) [ 68.750999][ T4365] BTRFS info (device loop2): max_inline at 4096 [ 68.764050][ T4365] BTRFS info (device loop2): using free space tree [ 68.777420][ T4365] BTRFS info (device loop2): has skinny extents [ 69.013445][ T4365] BTRFS info (device loop2): enabling ssd optimizations [ 69.535815][ T4426] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 69.762250][ T4442] loop0: detected capacity change from 0 to 256 [ 69.815492][ T4442] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 70.113300][ T4420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.777303][ T4481] netlink: 'syz.4.45': attribute type 10 has an invalid length. [ 70.875056][ T4481] team0: Port device dummy0 added [ 70.996002][ T4481] syz.4.45 (4481) used greatest stack depth: 20912 bytes left [ 71.244028][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.251448][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.839350][ T4511] netlink: 'syz.1.51': attribute type 29 has an invalid length. [ 71.983565][ T4511] netlink: 'syz.1.51': attribute type 29 has an invalid length. [ 72.031908][ T4515] netlink: 'syz.1.51': attribute type 29 has an invalid length. [ 72.371907][ T4530] device syzkaller0 entered promiscuous mode [ 72.480686][ T4535] device syzkaller0 entered promiscuous mode [ 72.946834][ T4560] loop2: detected capacity change from 0 to 512 [ 73.146645][ T4560] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 73.167639][ T4560] block device autoloading is deprecated and will be removed. [ 73.175593][ T4560] EXT4-fs (loop2): external journal has bad superblock [ 73.514510][ T4583] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.539465][ T4578] loop0: detected capacity change from 0 to 1024 [ 73.712307][ T4578] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 73.833609][ T4601] device bridge_slave_1 left promiscuous mode [ 73.914973][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.972249][ T4605] Zero length message leads to an empty skb [ 74.112100][ T4601] device bridge_slave_0 left promiscuous mode [ 74.165983][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.181750][ T4578] capability: warning: `syz.0.68' uses deprecated v2 capabilities in a way that may be insecure [ 74.270156][ T4624] loop1: detected capacity change from 0 to 256 [ 74.360313][ T4624] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 74.476437][ T4619] device syzkaller0 entered promiscuous mode [ 74.598897][ T4636] device syzkaller0 left promiscuous mode [ 74.677432][ T4640] loop2: detected capacity change from 0 to 512 [ 74.770021][ T4645] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.021003][ T4640] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 75.030009][ T4640] EXT4-fs (loop2): external journal has bad superblock [ 75.641838][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.940810][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 76.081032][ T4232] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 76.102027][ T4232] usb 2-1: config 0 has no interface number 0 [ 76.137277][ T4705] process 'syz.0.101' launched '/dev/fd/3' with NULL argv: empty string added [ 76.320970][ T4232] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 76.330145][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.370811][ T4232] usb 2-1: Product: syz [ 76.388657][ T4232] usb 2-1: Manufacturer: syz [ 76.405620][ T4232] usb 2-1: SerialNumber: syz [ 76.455517][ T4232] usb 2-1: config 0 descriptor?? [ 76.533123][ T4232] hub 2-1:0.132: bad descriptor, ignoring hub [ 76.548627][ T4232] hub: probe of 2-1:0.132 failed with error -5 [ 76.598060][ T4232] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input5 [ 77.063070][ T4733] device syzkaller0 entered promiscuous mode [ 77.963501][ T1107] usb 2-1: USB disconnect, device number 2 [ 77.970755][ T4238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.340965][ T4238] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 78.349411][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.385811][ T4768] loop3: detected capacity change from 0 to 1024 [ 78.411662][ T4762] block device autoloading is deprecated and will be removed. [ 78.431016][ T4765] block device autoloading is deprecated and will be removed. [ 78.471108][ T4768] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 78.550983][ T4238] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 78.622091][ T4238] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 78.630129][ T4238] usb 5-1: Manufacturer: syz [ 78.701397][ T4238] usb 5-1: config 0 descriptor?? [ 78.798539][ T4781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.805968][ T4781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.890816][ T4781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.898192][ T4781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.906967][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.914076][ T4781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.921855][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.938361][ T4238] rc_core: IR keymap rc-hauppauge not found [ 78.948014][ T4238] Registered IR keymap rc-empty [ 78.977470][ T4238] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 79.006311][ T4238] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 79.017039][ T4781] team0: Port device bridge0 added [ 79.086653][ T4238] usb 5-1: USB disconnect, device number 2 [ 79.168958][ T4785] device syzkaller0 entered promiscuous mode [ 81.980349][ T7] cfg80211: failed to load regulatory.db [ 82.096594][ T4822] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.134'. [ 82.703696][ T4268] Bluetooth: hci2: command 0x0401 tx timeout [ 83.137043][ T4822] syz.2.134 (4822) used greatest stack depth: 17904 bytes left [ 83.239219][ T4843] device syzkaller0 entered promiscuous mode [ 83.566975][ T4238] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.685649][ T4854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.143'. [ 83.850684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.860690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.870679][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.880674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.889715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.898717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.907709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.916779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 83.925749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 84.015743][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 84.048557][ T4858] loop2: detected capacity change from 0 to 8 [ 84.170942][ T4238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.308424][ T4238] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.490948][ T4238] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 84.505543][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.549192][ T4238] usb 1-1: Product: syz [ 84.560992][ T4238] usb 1-1: Manufacturer: syz [ 84.570734][ T4238] usb 1-1: SerialNumber: syz [ 84.604995][ T4238] usb 1-1: config 0 descriptor?? [ 84.854215][ T7] usb 1-1: USB disconnect, device number 2 [ 85.240821][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.267365][ T4880] device syzkaller0 entered promiscuous mode [ 85.325251][ T4884] loop3: detected capacity change from 0 to 1024 [ 85.356375][ T4884] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 85.500762][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 85.569673][ T4891] netlink: 14 bytes leftover after parsing attributes in process `syz.4.155'. [ 85.721983][ T4231] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 85.740812][ T4231] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.752879][ T4231] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.013299][ T4231] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 87.027091][ T4231] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.038705][ T4231] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.050263][ T4891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.099238][ T4891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.126160][ T4891] bond0 (unregistering): Released all slaves [ 87.202907][ T4231] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 87.227545][ T4231] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.253537][ T4231] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.500873][ T4231] usb 2-1: string descriptor 0 read error: -22 [ 87.539072][ T4231] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.575669][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.645607][ T4231] adutux 2-1:168.0: interrupt endpoints not found [ 88.235676][ T13] usb 2-1: USB disconnect, device number 3 [ 88.343185][ T4920] loop4: detected capacity change from 0 to 256 [ 88.379459][ T4922] device syzkaller0 entered promiscuous mode [ 88.401377][ T4920] exfat: Deprecated parameter 'namecase' [ 88.407582][ T4920] exfat: Deprecated parameter 'namecase' [ 88.628606][ T4920] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 90.015507][ T4950] device syzkaller0 entered promiscuous mode [ 92.160828][ T4979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.221279][ T4983] netlink: 'syz.0.183': attribute type 33 has an invalid length. [ 92.229081][ T4983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.183'. [ 92.571496][ T4979] infiniband syz0: set active [ 92.629217][ T4979] infiniband syz0: added bond0 [ 92.905675][ T4979] RDS/IB: syz0: added [ 92.917437][ T4979] smc: adding ib device syz0 with port count 1 [ 92.944401][ T4979] smc: ib device syz0 port 1 has pnetid [ 93.494005][ T5004] team0: Port device team_slave_0 removed [ 93.914161][ T5021] device syzkaller0 entered promiscuous mode [ 95.437045][ T5024] sched: RT throttling activated [ 98.037707][ T4196] Bluetooth: unknown link type 40 [ 99.039759][ T5073] autofs4:pid:5073:autofs_fill_super: called with bogus options [ 100.165998][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 101.443890][ T5091] binder: 5088:5091 ioctl c0306201 200000000040 returned -14 [ 102.757195][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 102.846059][ T5112] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 102.879246][ T5112] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 103.995326][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 104.110770][ T4238] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.125395][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 104.136320][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 104.147320][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 104.160950][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 104.371838][ T4238] usb 1-1: Using ep0 maxpacket: 16 [ 104.490922][ T4238] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 104.590849][ T4356] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.299363][ T4238] usb 1-1: config 0 has no interface number 0 [ 105.437996][ T5136] loop1: detected capacity change from 0 to 256 [ 105.470906][ T4238] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 105.480018][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.494413][ T5136] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 105.506733][ T4356] usb 4-1: Using ep0 maxpacket: 8 [ 105.560831][ T4238] usb 1-1: Product: syz [ 105.565137][ T4238] usb 1-1: Manufacturer: syz [ 105.569749][ T4238] usb 1-1: SerialNumber: syz [ 105.615484][ T4238] usb 1-1: config 0 descriptor?? [ 105.633619][ T4356] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 105.653570][ T4356] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 105.691566][ T4238] hub 1-1:0.132: bad descriptor, ignoring hub [ 105.697818][ T4238] hub: probe of 1-1:0.132 failed with error -5 [ 105.723104][ T4356] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.751680][ T4238] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input8 [ 105.756187][ T4356] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 105.800767][ T4356] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 105.850827][ T4356] usb 4-1: config 168 interface 0 has no altsetting 0 [ 105.937034][ T5125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.228'. [ 105.980948][ T4356] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 106.848742][ T4356] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 106.860352][ T4356] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 106.872411][ T4356] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 106.884211][ T4356] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 106.897988][ T4356] usb 4-1: config 168 interface 0 has no altsetting 0 [ 106.982699][ T21] usb 1-1: USB disconnect, device number 3 [ 107.001036][ T4356] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 107.015363][ T4356] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 107.077472][ T4356] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.119503][ T4356] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 107.154675][ T4356] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 107.243977][ T4356] usb 4-1: config 168 interface 0 has no altsetting 0 [ 107.350776][ T4356] usb 4-1: string descriptor 0 read error: -71 [ 107.357069][ T4356] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.428352][ T4356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.500939][ T4356] usb 4-1: can't set config #168, error -71 [ 107.530860][ T4356] usb 4-1: USB disconnect, device number 2 [ 109.088230][ T5177] loop1: detected capacity change from 0 to 8 [ 109.326098][ T5184] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 111.239657][ T4356] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.480717][ T4356] usb 2-1: Using ep0 maxpacket: 8 [ 111.593455][ T5226] loop3: detected capacity change from 0 to 256 [ 111.600932][ T4356] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 111.616437][ T4356] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 111.691918][ T5226] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 111.712529][ T4356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.733941][ T4356] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 111.749079][ T4356] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 111.763064][ T4356] usb 2-1: config 168 interface 0 has no altsetting 0 [ 111.841220][ T4356] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 111.863424][ T4356] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 111.905350][ T4356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.924460][ T4356] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 111.938539][ T4356] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 111.956398][ T4356] usb 2-1: config 168 interface 0 has no altsetting 0 [ 112.042551][ T4356] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 112.051363][ T4356] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 112.064822][ T4356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.076674][ T4356] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 112.092301][ T4356] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 112.106002][ T4356] usb 2-1: config 168 interface 0 has no altsetting 0 [ 112.130985][ T5234] input: syz1 as /devices/virtual/input/input10 [ 112.351554][ T5211] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 112.410822][ T4356] usb 2-1: string descriptor 0 read error: -22 [ 112.431997][ T4356] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.443033][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.506556][ T4356] adutux 2-1:168.0: interrupt endpoints not found [ 112.795039][ T4356] usb 2-1: USB disconnect, device number 4 [ 114.800431][ T5260] loop4: detected capacity change from 0 to 256 [ 114.862904][ T5260] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 115.358745][ T5267] loop3: detected capacity change from 0 to 1024 [ 115.450715][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.619721][ T5267] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 116.530730][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 116.671218][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.683619][ T21] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.994642][ T21] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 117.003857][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.015836][ T21] usb 3-1: Product: syz [ 117.029254][ T21] usb 3-1: Manufacturer: syz [ 117.038734][ T21] usb 3-1: SerialNumber: syz [ 117.049366][ T21] r8152-cfgselector 3-1: config 0 descriptor?? [ 117.810809][ T21] r8152-cfgselector 3-1: Unknown version 0x0000 [ 117.828171][ T21] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 117.950115][ T5302] device syzkaller0 entered promiscuous mode [ 117.981188][ T5302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.282'. [ 118.250503][ T5269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.926943][ T5326] netlink: 48 bytes leftover after parsing attributes in process `syz.1.291'. [ 120.110973][ T13] Bluetooth: hci3: command 0x042e tx timeout [ 122.986356][ T5372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 123.201173][ T5335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.332518][ T5376] xt_connbytes: Forcing CT accounting to be enabled [ 123.366154][ T5376] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 123.694899][ T5376] binder: 5374:5376 unknown command 1074553619 [ 123.701789][ T5376] binder: 5374:5376 ioctl c0306201 200000000540 returned -22 [ 125.824678][ T5398] netlink: 'syz.0.309': attribute type 32 has an invalid length. [ 132.712596][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.719051][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.898646][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.906703][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.284263][ T5483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.984479][ T5478] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.998350][ T5478] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.007611][ T5478] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.020815][ T5478] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.550884][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.946131][ T5555] netlink: 'syz.2.350': attribute type 3 has an invalid length. [ 137.952885][ T23] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 137.964897][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 138.293391][ T23] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 138.336631][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.375147][ T23] usb 1-1: Product: syz [ 138.395418][ T23] usb 1-1: Manufacturer: syz [ 138.417798][ T23] usb 1-1: SerialNumber: syz [ 138.433387][ T23] usb 1-1: config 0 descriptor?? [ 138.492576][ T23] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 138.716134][ T5561] md: could not open device unknown-block(0,0). [ 138.735089][ T5561] md: md_import_device returned -6 [ 139.677460][ T4361] usb 1-1: USB disconnect, device number 4 [ 142.554793][ T5605] device syzkaller0 entered promiscuous mode [ 142.980486][ T5609] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.989716][ T5609] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.727797][ T5643] loop3: detected capacity change from 0 to 512 [ 146.469189][ T5643] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 146.478250][ T5643] EXT4-fs (loop3): external journal has bad superblock [ 146.915570][ T5650] input: syz1 as /devices/virtual/input/input11 [ 146.922059][ T5513] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.278550][ T5513] usb 3-1: Using ep0 maxpacket: 8 [ 147.650824][ T5513] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 147.853783][ T5513] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.927963][ T5513] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.989440][ T5513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.070091][ T5513] usbtmc 3-1:16.0: bulk endpoints not found [ 148.606758][ T4233] usb 3-1: USB disconnect, device number 3 [ 150.465338][ T5705] netlink: 'syz.4.395': attribute type 3 has an invalid length. [ 152.762199][ T4356] Bluetooth: hci3: command 0x042e tx timeout [ 156.054282][ T5755] ksmbd: Unknown IPC event: 11, ignore. [ 156.740766][ T4356] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.420686][ T4356] usb 4-1: Using ep0 maxpacket: 16 [ 158.251964][ T5773] loop4: detected capacity change from 0 to 256 [ 158.260880][ T4356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.275444][ T4356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.287809][ T4356] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 158.297206][ T4356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.307339][ T4356] usb 4-1: config 0 descriptor?? [ 158.395514][ T5773] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 158.459228][ T5773] 9pnet: Insufficient options for proto=fd [ 158.600754][ T4357] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.331061][ T4357] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.431099][ T4356] usbhid 4-1:0.0: can't add hid device: -71 [ 159.626512][ T4356] usbhid: probe of 4-1:0.0 failed with error -71 [ 159.690352][ T4357] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 160.016438][ T4356] usb 4-1: USB disconnect, device number 3 [ 160.210973][ T4357] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.220158][ T4357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.348461][ T4357] usb 1-1: Product: syz [ 160.357198][ T4357] usb 1-1: Manufacturer: syz [ 160.380734][ T4357] usb 1-1: SerialNumber: syz [ 160.419250][ T5797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.424'. [ 161.115773][ T5775] udc-core: couldn't find an available UDC or it's busy [ 161.170730][ T5775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 161.252785][ T4357] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 162.038684][ T4357] usb 1-1: USB disconnect, device number 5 [ 162.387669][ T5809] device syzkaller0 entered promiscuous mode [ 162.669183][ T5816] device syzkaller0 left promiscuous mode [ 163.160256][ T5822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.431'. [ 167.503698][ T5853] loop1: detected capacity change from 0 to 256 [ 167.546977][ T5853] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 167.702357][ T5853] 9pnet: Insufficient options for proto=fd [ 167.815027][ T5855] device syzkaller0 entered promiscuous mode [ 170.201156][ T5886] device syzkaller0 left promiscuous mode [ 170.863647][ T5904] loop1: detected capacity change from 0 to 1024 [ 170.961325][ T5904] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 172.942068][ T4361] Bluetooth: hci5: command 0x0409 tx timeout [ 174.348061][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 174.990800][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 175.793564][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.800799][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.808904][ T5901] device bridge_slave_0 entered promiscuous mode [ 175.817868][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.082588][ T5972] loop4: detected capacity change from 0 to 512 [ 176.143562][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.911075][ T5974] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 177.058465][ T5972] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 177.067619][ T5972] EXT4-fs (loop4): external journal has bad superblock [ 177.139554][ T5901] device bridge_slave_1 entered promiscuous mode [ 177.311955][ T4309] Bluetooth: hci5: command 0x040f tx timeout [ 177.327367][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.457470][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.692807][ T5901] team0: Port device team_slave_0 added [ 177.977073][ T5982] device syzkaller0 entered promiscuous mode [ 177.988796][ T5901] team0: Port device team_slave_1 added [ 178.266025][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.296525][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.401128][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.483375][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.490400][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.516451][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.557415][ T5988] loop4: detected capacity change from 0 to 256 [ 178.570866][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.649085][ T5988] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 178.779086][ T5988] 9pnet: Insufficient options for proto=fd [ 178.805741][ T5901] device hsr_slave_0 entered promiscuous mode [ 178.856975][ T5901] device hsr_slave_1 entered promiscuous mode [ 178.871288][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.878874][ T5901] Cannot create hsr debugfs directory [ 179.525600][ T4361] Bluetooth: hci5: command 0x0419 tx timeout [ 181.002691][ T4361] Bluetooth: hci3: command 0x0406 tx timeout [ 181.008916][ T4361] Bluetooth: hci2: command 0x0406 tx timeout [ 181.126784][ T5901] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.217417][ T6007] loop4: detected capacity change from 0 to 512 [ 181.965900][ T5901] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.995471][ T6007] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 182.004373][ T6007] EXT4-fs (loop4): external journal has bad superblock [ 182.039115][ T5901] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.068883][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 182.116707][ T5901] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.601965][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.664178][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.728252][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.764411][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.812365][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.882541][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.936275][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.943541][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.210270][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.247245][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.278126][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.285324][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.402008][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.410512][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.423006][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.432963][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.470140][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.518937][ T5901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.982611][ T5901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.110225][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.118843][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.186583][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.228334][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.301186][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.328421][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.364898][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.470751][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.984093][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.001446][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.013672][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.625455][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.358931][ T5901] device veth0_vlan entered promiscuous mode [ 188.386227][ T5901] device veth1_vlan entered promiscuous mode [ 188.460197][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.499604][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.544775][ T6062] loop4: detected capacity change from 0 to 256 [ 188.591373][ T6062] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 188.609491][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.677997][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.695335][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.703537][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.711900][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.719710][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.734375][ T5901] device veth0_macvtap entered promiscuous mode [ 188.774562][ T6062] 9pnet: Insufficient options for proto=fd [ 188.813126][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.832385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.843740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.852919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.866700][ T5901] device veth1_macvtap entered promiscuous mode [ 188.911924][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.099394][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.162461][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.209408][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.221006][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.567587][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.962247][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.972404][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.983233][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.012811][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.036015][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.151135][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.180875][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.241485][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.299472][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.325177][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.356501][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.390928][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.425316][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.458873][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.491201][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.524673][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.561338][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.588768][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.630118][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.706165][ T5901] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.726089][ T5901] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.753784][ T5901] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.781320][ T5901] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.134159][ T5461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.162668][ T5461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.200450][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.287209][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.311960][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.351723][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.595278][ T6101] binder: 6096:6101 ioctl 4018620d 0 returned -22 [ 192.411909][ T6106] loop1: detected capacity change from 0 to 256 [ 192.543568][ T6114] loop5: detected capacity change from 0 to 256 [ 192.649525][ T6106] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 192.685328][ T6114] exfat: Deprecated parameter 'namecase' [ 192.691703][ T6114] exfat: Deprecated parameter 'namecase' [ 192.735429][ T6114] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 193.313191][ T6106] 9pnet: Insufficient options for proto=fd [ 194.125201][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.507104][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.838005][ T6147] loop1: detected capacity change from 0 to 1024 [ 195.010583][ T6147] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 196.271108][ T6174] loop5: detected capacity change from 0 to 256 [ 196.363685][ T6174] exfat: Deprecated parameter 'namecase' [ 196.369804][ T6174] exfat: Deprecated parameter 'namecase' [ 196.405935][ T6174] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 197.077850][ T144] device hsr_slave_0 left promiscuous mode [ 197.127911][ T144] device hsr_slave_1 left promiscuous mode [ 197.309118][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.701637][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.626894][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.634526][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.672833][ T144] device bridge_slave_1 left promiscuous mode [ 198.684342][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.724812][ T144] device bridge_slave_0 left promiscuous mode [ 198.761461][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.819374][ T144] device veth1_macvtap left promiscuous mode [ 198.839994][ T144] device veth0_macvtap left promiscuous mode [ 198.859348][ T144] device veth1_vlan left promiscuous mode [ 198.869082][ T144] device veth0_vlan left promiscuous mode [ 199.516884][ T144] team0 (unregistering): Port device team_slave_1 removed [ 199.558496][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.589820][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.771512][ T144] team0 (unregistering): Port device bridge0 removed [ 199.807138][ T144] bond0 (unregistering): Released all slaves [ 202.021568][ T6244] loop0: detected capacity change from 0 to 256 [ 202.842043][ T6244] exfat: Deprecated parameter 'namecase' [ 202.847824][ T6244] exfat: Deprecated parameter 'namecase' [ 202.881741][ T6244] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 203.139823][ T6251] loop3: detected capacity change from 0 to 512 [ 203.732005][ T6251] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 203.740949][ T6251] EXT4-fs (loop3): external journal has bad superblock [ 206.488492][ T6293] netlink: 40 bytes leftover after parsing attributes in process `syz.5.555'. [ 208.023526][ T6307] loop5: detected capacity change from 0 to 512 [ 208.762972][ T6307] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 208.772201][ T6307] EXT4-fs (loop5): external journal has bad superblock [ 211.557859][ T6349] device syzkaller0 entered promiscuous mode [ 213.467266][ T6378] overlayfs: overlapping lowerdir path [ 214.318901][ T6385] loop3: detected capacity change from 0 to 512 [ 215.036425][ T6385] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 215.045775][ T6385] EXT4-fs (loop3): external journal has bad superblock [ 216.515578][ T6392] CIFS: iocharset name too long [ 216.756283][ T6414] device syzkaller0 entered promiscuous mode [ 216.892366][ T6388] chnl_net:caif_netlink_parms(): no params data found [ 217.642790][ T4357] Bluetooth: hci1: command 0x0409 tx timeout [ 217.947480][ T6437] overlayfs: overlapping lowerdir path [ 218.767496][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.785174][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.834591][ T6388] device bridge_slave_0 entered promiscuous mode [ 218.889576][ T6446] loop5: detected capacity change from 0 to 512 [ 219.608518][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.630875][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.649212][ T6388] device bridge_slave_1 entered promiscuous mode [ 219.711507][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 219.738181][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.761726][ T6446] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 219.770735][ T6446] EXT4-fs (loop5): external journal has bad superblock [ 220.368445][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.774085][ T6388] team0: Port device team_slave_0 added [ 220.850261][ T6388] team0: Port device team_slave_1 added [ 220.906443][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.103391][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.129510][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.750784][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.790957][ T4361] Bluetooth: hci1: command 0x040f tx timeout [ 221.797903][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.844214][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.901586][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.469553][ T6496] overlayfs: overlapping lowerdir path [ 222.784576][ T6388] device hsr_slave_0 entered promiscuous mode [ 222.837585][ T6388] device hsr_slave_1 entered promiscuous mode [ 222.856734][ T6388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.869406][ T6388] Cannot create hsr debugfs directory [ 223.571084][ T6388] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 223.805270][ T6388] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 223.870787][ T4361] Bluetooth: hci1: command 0x0419 tx timeout [ 224.074424][ T6388] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.208398][ T6388] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.234044][ T146] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 224.387641][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.425156][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.465513][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.498144][ T6388] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.525960][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.545093][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.593226][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.600460][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.678303][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.697594][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.734037][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.759463][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.766878][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.816927][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.843118][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.420508][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.474796][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.571188][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.579392][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.588392][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.598746][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.607529][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.616240][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.624892][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.691257][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.992273][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 227.173481][ T6549] overlayfs: overlapping lowerdir path [ 227.293928][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.305397][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.319925][ T6529] device bridge_slave_0 entered promiscuous mode [ 227.346977][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.423539][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.477812][ T6529] device bridge_slave_1 entered promiscuous mode [ 227.539052][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.550892][ T4309] Bluetooth: hci2: command 0x0409 tx timeout [ 227.617889][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.646435][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.722325][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.732065][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.827679][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.861920][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.885730][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 227.980357][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.041400][ T6529] team0: Port device team_slave_0 added [ 228.052794][ T6529] team0: Port device team_slave_1 added [ 228.090825][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.166006][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.180708][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.207420][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.236566][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.243697][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.269859][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.883315][ T6529] device hsr_slave_0 entered promiscuous mode [ 229.033944][ T6529] device hsr_slave_1 entered promiscuous mode [ 229.124454][ T6529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.197905][ T6529] Cannot create hsr debugfs directory [ 229.383990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.430011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.631042][ T4357] Bluetooth: hci2: command 0x041b tx timeout [ 229.768769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.786427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.820329][ T6388] device veth0_vlan entered promiscuous mode [ 229.836463][ T6590] device syzkaller0 entered promiscuous mode [ 230.607550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.618496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.210148][ T6388] device veth1_vlan entered promiscuous mode [ 231.500329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.509539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.584244][ T6618] overlayfs: overlapping lowerdir path [ 231.818732][ T4309] Bluetooth: hci2: command 0x040f tx timeout [ 231.980541][ T6388] device veth0_macvtap entered promiscuous mode [ 232.061585][ T6388] device veth1_macvtap entered promiscuous mode [ 232.178995][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.303954][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.314278][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.325749][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.339613][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.351049][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.375245][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.161389][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.198965][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.260685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.268937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.292788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.305057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.319535][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.330470][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.341939][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.355296][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.365344][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.376862][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.387211][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.397874][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.420741][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 233.505080][ T6641] loop5: detected capacity change from 0 to 512 [ 234.181474][ T4309] Bluetooth: hci2: command 0x0419 tx timeout [ 234.202284][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.210751][ T6529] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 234.234300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.245975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.258007][ T6529] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 234.274919][ T6641] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 234.284138][ T6641] EXT4-fs (loop5): external journal has bad superblock [ 234.330704][ T6529] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 234.375654][ T6388] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.399243][ T6388] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.417040][ T6388] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.427115][ T6388] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.536123][ T7] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 234.559163][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.593518][ T6529] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 234.635579][ T7] usb 4-1: config 0 has no interface number 0 [ 234.655866][ T7] usb 4-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.120726][ T7] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 235.129789][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.177230][ T7] usb 4-1: Product: syz [ 235.210276][ T7] usb 4-1: Manufacturer: syz [ 235.232079][ T7] usb 4-1: SerialNumber: syz [ 235.262813][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.282896][ T7] usb 4-1: config 0 descriptor?? [ 235.325605][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.335869][ T7] asix: probe of 4-1:0.251 failed with error -22 [ 235.380290][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.416109][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.427459][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.489750][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.530277][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.729548][ T155] device hsr_slave_0 left promiscuous mode [ 236.123945][ T155] device hsr_slave_1 left promiscuous mode [ 236.153344][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.180903][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.199047][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.245622][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.291499][ T155] device bridge_slave_1 left promiscuous mode [ 236.334937][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.451645][ T5513] usb 4-1: USB disconnect, device number 4 [ 236.465969][ T155] device bridge_slave_0 left promiscuous mode [ 236.482535][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.574808][ T155] device veth1_macvtap left promiscuous mode [ 236.619699][ T155] device veth0_macvtap left promiscuous mode [ 236.647089][ T155] device veth1_vlan left promiscuous mode [ 236.695532][ T155] device veth0_vlan left promiscuous mode [ 237.049597][ T155] team0 (unregistering): Port device team_slave_1 removed [ 237.079674][ T155] team0 (unregistering): Port device team_slave_0 removed [ 237.115525][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.149800][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.274665][ T155] bond0 (unregistering): Released all slaves [ 237.364588][ T6676] device syzkaller0 entered promiscuous mode [ 237.393969][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 237.741236][ T6695] xt_connbytes: Forcing CT accounting to be enabled [ 237.750393][ T6695] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 237.999990][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.019008][ T6694] binder: 6693:6694 unknown command 1074553619 [ 238.025324][ T6694] binder: 6693:6694 ioctl c0306201 200000000540 returned -22 [ 238.095054][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.103925][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.142186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.187468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.213067][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.220333][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.241256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.263245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.289154][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.296290][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.184777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.208938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.218749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.228505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.255766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.264685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.273849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.293739][ T6529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.304220][ T6529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.443014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.889206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.028294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.061365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.652263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.692204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.149733][ T6733] overlayfs: failed to resolve './file1/file0': -2 [ 241.919526][ T6739] overlayfs: workdir and upperdir must be separate subtrees [ 241.979006][ T6741] loop6: detected capacity change from 0 to 1024 [ 242.068110][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.093811][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.144305][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.211416][ T6741] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 243.402378][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.453594][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.472912][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.483393][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.500442][ T6529] device veth0_vlan entered promiscuous mode [ 243.507440][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.516003][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.541151][ T6529] device veth1_vlan entered promiscuous mode [ 243.567949][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.580128][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.593041][ T6529] device veth0_macvtap entered promiscuous mode [ 243.603386][ T6529] device veth1_macvtap entered promiscuous mode [ 243.624284][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.635770][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.646849][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.670171][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.694826][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.706172][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.718735][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.729328][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.742138][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.749970][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.797502][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.861545][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.936875][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.030349][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.065607][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.085589][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.188874][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.206619][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.288297][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.470703][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.510433][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.551900][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.731096][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.750121][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.783423][ T6529] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.810640][ T6529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.830919][ T6529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.864910][ T6529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.086803][ T6824] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.216249][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.226244][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.272514][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.295670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.317327][ T6830] overlayfs: failed to resolve './file1/file0': -2 [ 245.452048][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.728391][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.399005][ T6846] loop3: detected capacity change from 0 to 1024 [ 246.461248][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 246.482029][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 246.617558][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 246.627396][ T6846] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 247.590470][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 247.605681][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 249.142251][ T6893] loop7: detected capacity change from 0 to 512 [ 249.954089][ T6893] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 249.963796][ T6893] EXT4-fs (loop7): external journal has bad superblock [ 250.226465][ T6908] device syzkaller0 left promiscuous mode [ 252.836224][ T6929] loop7: detected capacity change from 0 to 1024 [ 253.376997][ T6929] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 253.435363][ T6947] device syzkaller0 entered promiscuous mode [ 253.689881][ T6946] device syzkaller0 entered promiscuous mode [ 254.086533][ T6958] loop4: detected capacity change from 0 to 512 [ 254.955475][ T6958] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 254.964525][ T6958] EXT4-fs (loop4): external journal has bad superblock [ 256.054567][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.060938][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.623442][ T6986] loop4: detected capacity change from 0 to 8 [ 258.615720][ T4309] Bluetooth: hci4: command 0x0406 tx timeout [ 258.679516][ T6990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.136723][ T7012] trusted_key: encrypted_key: insufficient parameters specified [ 261.975025][ T7015] xt_connbytes: Forcing CT accounting to be enabled [ 261.983472][ T7015] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 262.529588][ T7026] loop6: detected capacity change from 0 to 512 [ 263.845183][ T7026] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 263.854370][ T7026] EXT4-fs (loop6): external journal has bad superblock [ 264.870926][ T7045] loop5: detected capacity change from 0 to 8 [ 265.226245][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 265.278108][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 265.302357][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 265.529960][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 266.988968][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 267.223625][ T7087] loop6: detected capacity change from 0 to 512 [ 267.451695][ T7087] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 267.477577][ T7083] device syzkaller0 entered promiscuous mode [ 267.516304][ T7087] EXT4-fs (loop6): external journal has bad superblock [ 268.079408][ T7103] device syzkaller0 entered promiscuous mode [ 270.988168][ T7155] device syzkaller0 entered promiscuous mode [ 273.121376][ T7197] block device autoloading is deprecated and will be removed. [ 273.213594][ T7190] md: could not open device unknown-block(0,0). [ 273.219925][ T7190] md: md_import_device returned -6 [ 275.305617][ T7240] device syzkaller0 entered promiscuous mode [ 276.027312][ T7192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.013602][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 278.099122][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 278.306233][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 278.482053][ T7320] loop7: detected capacity change from 0 to 512 [ 279.153933][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 279.175325][ T7320] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 279.184876][ T7320] EXT4-fs (loop7): external journal has bad superblock [ 279.256171][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 279.360777][ T7322] device syzkaller0 entered promiscuous mode [ 282.354888][ T7389] loop5: detected capacity change from 0 to 512 [ 283.006160][ T7389] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 283.015476][ T7389] EXT4-fs (loop5): external journal has bad superblock [ 284.248658][ T7405] device syzkaller0 entered promiscuous mode [ 290.588565][ T7483] device syzkaller0 entered promiscuous mode [ 290.804445][ T7503] loop6: detected capacity change from 0 to 1024 [ 290.836027][ T7504] device syzkaller0 left promiscuous mode [ 290.981660][ T7503] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 291.253032][ T7526] loop4: detected capacity change from 0 to 512 [ 293.187583][ T7526] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 293.196673][ T7526] EXT4-fs (loop4): external journal has bad superblock [ 293.470939][ T1107] Bluetooth: hci5: command 0x0406 tx timeout [ 294.360771][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.787'. [ 294.436907][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.787'. [ 294.557710][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.787'. [ 294.620822][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.787'. [ 294.732165][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.787'. [ 298.000763][ T4309] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 298.041117][ T7608] device syzkaller0 entered promiscuous mode [ 298.441950][ T4309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.462811][ T4309] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 299.510817][ T4309] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.470743][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.481942][ T4309] usb 4-1: Product: syz [ 300.486440][ T4309] usb 4-1: Manufacturer: syz [ 300.491808][ T4309] usb 4-1: SerialNumber: syz [ 300.761934][ T4309] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 300.811426][ T4309] usb 4-1: USB disconnect, device number 5 [ 303.249289][ T7663] device syzkaller0 entered promiscuous mode [ 306.454514][ T7700] loop5: detected capacity change from 0 to 1024 [ 307.000968][ T7700] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 307.298699][ T6735] device hsr_slave_0 left promiscuous mode [ 307.362080][ T6735] device hsr_slave_1 left promiscuous mode [ 307.388651][ T6735] device bridge_slave_1 left promiscuous mode [ 307.425053][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.473503][ T6735] device bridge_slave_0 left promiscuous mode [ 307.479774][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.796929][ T6735] team0 (unregistering): Port device team_slave_1 removed [ 307.825692][ T6735] team0 (unregistering): Port device team_slave_0 removed [ 307.849178][ T6735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.875006][ T6735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.020402][ T6735] bond0 (unregistering): Released all slaves [ 312.835354][ T7795] loop7: detected capacity change from 0 to 1024 [ 314.061267][ T7795] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 316.512720][ T7839] binder: 7837:7839 unknown command 1074553619 [ 316.518996][ T7839] binder: 7837:7839 ioctl c0306201 200000000540 returned -22 [ 316.996081][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.002524][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.934258][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 324.306050][ T7958] loop5: detected capacity change from 0 to 256 [ 324.314676][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 325.012776][ T7958] exfat: Deprecated parameter 'namecase' [ 325.018629][ T7958] exfat: Deprecated parameter 'namecase' [ 325.043135][ T7958] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 325.143680][ T7901] chnl_net:caif_netlink_parms(): no params data found [ 325.653007][ T7974] xt_connbytes: Forcing CT accounting to be enabled [ 325.663998][ T7974] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 325.995996][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.032785][ T7974] binder: 7966:7974 unknown command 1074553619 [ 326.060751][ T7974] binder: 7966:7974 ioctl c0306201 200000000540 returned -22 [ 326.130746][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.138893][ T7901] device bridge_slave_0 entered promiscuous mode [ 326.201133][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.235333][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.261814][ T7901] device bridge_slave_1 entered promiscuous mode [ 326.649691][ T5512] Bluetooth: hci3: command 0x040f tx timeout [ 328.783628][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.340875][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz.7.883'. [ 329.610884][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.050845][ T5512] Bluetooth: hci3: command 0x0419 tx timeout [ 330.495041][ T8008] loop7: detected capacity change from 0 to 256 [ 330.571680][ T7901] team0: Port device team_slave_0 added [ 330.720889][ T7901] team0: Port device team_slave_1 added [ 330.769940][ T8008] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 330.896805][ T8020] loop4: detected capacity change from 0 to 256 [ 331.648505][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.662306][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.711242][ T8020] exfat: Deprecated parameter 'namecase' [ 331.717183][ T8020] exfat: Deprecated parameter 'namecase' [ 331.766730][ T8020] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 331.788851][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.946305][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.965420][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.997724][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.615333][ T8045] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 334.893929][ T8046] binder: 8041:8046 unknown command 1074553619 [ 334.901337][ T8046] binder: 8041:8046 ioctl c0306201 200000000540 returned -22 [ 335.048931][ T7901] device hsr_slave_0 entered promiscuous mode [ 335.056235][ T7901] device hsr_slave_1 entered promiscuous mode [ 335.098101][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.135634][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.242430][ T8069] loop4: detected capacity change from 0 to 256 [ 337.025889][ T8069] exfat: Deprecated parameter 'namecase' [ 337.032307][ T8069] exfat: Deprecated parameter 'namecase' [ 337.053749][ T8069] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 337.277346][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.922362][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.082865][ T8091] loop7: detected capacity change from 0 to 256 [ 338.217855][ T8091] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 339.135344][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.907'. [ 340.176556][ T5512] Bluetooth: hci1: command 0x0406 tx timeout [ 340.410111][ T155] tipc: Left network mode [ 340.442761][ T7901] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 340.453579][ T7901] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 340.464681][ T7901] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 340.523512][ T7901] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 340.788216][ T8116] device syzkaller0 entered promiscuous mode [ 340.914461][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.359415][ T8138] loop4: detected capacity change from 0 to 512 [ 341.497694][ T8138] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 341.507555][ T8138] EXT4-fs (loop4): external journal has bad superblock [ 342.292345][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.305049][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.429378][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.523162][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.583703][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.679744][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.687180][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.328433][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.499679][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.527108][ T8167] loop4: detected capacity change from 0 to 256 [ 343.549900][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.557070][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.643597][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.674888][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.6.918'. [ 343.781350][ T8167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 343.955522][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.002951][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.888246][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.899517][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.908583][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.918676][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.942410][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.090824][ T7901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.113474][ T7901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.143065][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 345.210467][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.746765][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.521883][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.600075][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.985666][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.011671][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.392536][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.929711][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.940372][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.972508][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.988419][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.002130][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.010204][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.028571][ T155] rdma_rxe: ignoring netdev event = 26 for bond0 [ 349.036044][ T155] rdma_rxe: ignoring netdev event = 21 for bond0 [ 349.047606][ T155] device hsr_slave_0 left promiscuous mode [ 349.061074][ T155] device hsr_slave_1 left promiscuous mode [ 349.067571][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.076070][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.086214][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.096073][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.108855][ T155] rdma_rxe: ignoring netdev event = 10 for bond0 [ 349.117460][ T155] device veth1_macvtap left promiscuous mode [ 349.126586][ T155] device veth0_macvtap left promiscuous mode [ 349.134362][ T155] device veth1_vlan left promiscuous mode [ 349.140147][ T155] device veth0_vlan left promiscuous mode [ 349.239986][ T155] infiniband syz0: set down [ 349.259567][ T155] bond2 (unregistering): Released all slaves [ 349.294173][ T155] bond1 (unregistering): Released all slaves [ 349.507895][ T8215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.948039][ T8276] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 350.368586][ T4310] Bluetooth: hci2: command 0x0406 tx timeout [ 350.410695][ T155] team0 (unregistering): Port device team_slave_1 removed [ 350.459717][ T8277] binder: 8275:8277 unknown command 1074553619 [ 350.466891][ T8277] binder: 8275:8277 ioctl c0306201 200000000540 returned -22 [ 350.489301][ T155] team0 (unregistering): Port device team_slave_0 removed [ 350.535587][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.544547][ T155] rdma_rxe: ignoring netdev event = 12 for bond0 [ 350.563007][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.572590][ T155] rdma_rxe: ignoring netdev event = 8 for bond0 [ 350.580458][ T155] rdma_rxe: ignoring netdev event = 18 for bond0 [ 350.648359][ T155] rdma_rxe: ignoring netdev event = 12 for bond0 [ 350.969587][ T155] bond0 (unregistering): Released all slaves [ 350.978373][ T4306] smc: removing ib device syz0 [ 351.001005][ T7901] device veth0_vlan entered promiscuous mode [ 351.014397][ T4232] bond0 speed is unknown, defaulting to 1000 [ 351.038905][ T7] infiniband syz0: ib_query_port failed (-19) [ 351.099077][ T7901] device veth1_vlan entered promiscuous mode [ 351.385458][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.444600][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.637737][ T7901] device veth0_macvtap entered promiscuous mode [ 351.962372][ T7901] device veth1_macvtap entered promiscuous mode [ 352.236298][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.298198][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 352.370101][ T8339] loop6: detected capacity change from 0 to 256 [ 352.398783][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.423904][ T8339] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf89ad240, utbl_chksum : 0xe619d30d) [ 352.592256][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.610296][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.625316][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.635256][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.646064][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.656689][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.667284][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.679756][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.715190][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 352.796321][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.176438][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.220779][ T8344] xt_connbytes: Forcing CT accounting to be enabled [ 353.268647][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.304252][ T8344] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 353.354406][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.365651][ T8351] binder: 8343:8351 unknown command 1074553619 [ 353.378410][ T8351] binder: 8343:8351 ioctl c0306201 200000000540 returned -22 [ 353.390476][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.436171][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.473118][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.493155][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.546681][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.581614][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.624254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.643475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.686983][ T7901] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.707152][ T7901] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.717706][ T7901] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.736635][ T7901] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.809544][ T8363] device syzkaller0 entered promiscuous mode [ 354.073828][ T6735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.206605][ T6735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.668644][ T6840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.211163][ T6744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.250634][ T8373] netlink: 104 bytes leftover after parsing attributes in process `syz.4.963'. [ 355.278316][ T6744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.384721][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.063168][ T8429] device syzkaller0 entered promiscuous mode [ 358.244728][ T8457] loop5: detected capacity change from 0 to 1024 [ 358.383042][ T8457] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 358.408234][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.465172][ T8453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.290506][ T8508] device syzkaller0 entered promiscuous mode [ 367.224708][ T8590] device syzkaller0 entered promiscuous mode [ 368.110431][ T8553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.684106][ T8609] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1013'. [ 373.504201][ T8655] device syzkaller0 entered promiscuous mode [ 378.109705][ T8738] loop8: detected capacity change from 0 to 8 [ 378.158562][ T8742] device syzkaller0 entered promiscuous mode [ 378.309201][ T8753] loop4: detected capacity change from 0 to 512 [ 378.922683][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.932386][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.462283][ T8753] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 379.471297][ T8753] EXT4-fs (loop4): external journal has bad superblock [ 380.733958][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1049'. [ 381.354281][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1051'. [ 384.891684][ T8810] loop7: detected capacity change from 0 to 8 [ 385.144363][ T8833] loop6: detected capacity change from 0 to 512 [ 385.912169][ T8833] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 385.922081][ T8833] EXT4-fs (loop6): external journal has bad superblock [ 387.505086][ T8834] device syzkaller0 entered promiscuous mode [ 387.747018][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1065'. [ 388.074601][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1066'. [ 391.092739][ T8879] loop7: detected capacity change from 0 to 8 [ 391.469005][ T8892] device syzkaller0 entered promiscuous mode [ 394.028671][ T8930] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1081'. [ 394.412816][ T8876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.873953][ T8938] loop5: detected capacity change from 0 to 8 [ 395.727153][ T8943] device syzkaller1 entered promiscuous mode [ 396.494818][ T8951] device syzkaller0 entered promiscuous mode [ 396.857601][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1090'. [ 400.243636][ T8991] device syzkaller0 entered promiscuous mode [ 400.916590][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1096'. [ 401.141698][ T9005] loop7: detected capacity change from 0 to 8 [ 402.935378][ T9013] device syzkaller0 entered promiscuous mode [ 403.011460][ T9028] netlink: 'syz.7.1104': attribute type 29 has an invalid length. [ 403.100329][ T9028] netlink: 'syz.7.1104': attribute type 29 has an invalid length. [ 403.119466][ T9032] netlink: 'syz.7.1104': attribute type 29 has an invalid length. [ 404.708145][ T9057] device syzkaller0 entered promiscuous mode [ 405.516235][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1110'. [ 409.211554][ T9074] netlink: 'syz.7.1111': attribute type 13 has an invalid length. [ 409.261310][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1115'. [ 410.763466][ T9106] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 410.917151][ T9111] binder: 9095:9111 unknown command 1074553619 [ 410.923735][ T9111] binder: 9095:9111 ioctl c0306201 200000000540 returned -22 [ 412.481838][ T9124] loop4: detected capacity change from 0 to 1024 [ 412.772899][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1128'. [ 413.451339][ T9124] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 413.672214][ T9151] device syzkaller0 entered promiscuous mode [ 414.183379][ T9162] device syzkaller0 entered promiscuous mode [ 417.982478][ T9191] xt_connbytes: Forcing CT accounting to be enabled [ 417.989200][ T9191] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 418.115681][ T9192] binder: 9190:9192 unknown command 1074553619 [ 418.151176][ T9192] binder: 9190:9192 ioctl c0306201 200000000540 returned -22 [ 421.857483][ T9226] device syzkaller0 entered promiscuous mode [ 425.234824][ T9261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1149'. [ 429.599439][ T9287] device syzkaller0 entered promiscuous mode [ 432.693729][ T9317] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1161'. [ 432.840605][ T4233] Bluetooth: hci4: command 0x0409 tx timeout [ 433.930789][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1165'. [ 433.992437][ T9307] chnl_net:caif_netlink_parms(): no params data found [ 434.196558][ T9307] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.212362][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.230620][ T9307] device bridge_slave_0 entered promiscuous mode [ 434.238916][ T9307] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.246392][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.254545][ T9307] device bridge_slave_1 entered promiscuous mode [ 434.285821][ T9307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.302638][ T9307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.500211][ T9307] team0: Port device team_slave_0 added [ 434.593040][ T9307] team0: Port device team_slave_1 added [ 434.765617][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.830964][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.920795][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 434.992905][ T9307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.059038][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.111846][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.472592][ T9307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.592382][ T9307] device hsr_slave_0 entered promiscuous mode [ 436.599248][ T9307] device hsr_slave_1 entered promiscuous mode [ 436.618963][ T9307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.000734][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 437.345345][ T9307] Cannot create hsr debugfs directory [ 439.338409][ T9307] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 439.551767][ T4357] Bluetooth: hci4: command 0x0419 tx timeout [ 439.757064][ T9307] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 439.832237][ T9307] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 439.877344][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.885012][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.368105][ T9307] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 440.392317][ T9409] loop8: detected capacity change from 0 to 512 [ 441.358898][ T9307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.467835][ T9307] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.581788][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.592588][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.643543][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.677821][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.853032][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.860244][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.695577][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 442.809217][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 442.847788][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.033350][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.163684][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.170852][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.373213][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 443.658412][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 443.698769][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 444.573648][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 444.683910][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.794424][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 444.954905][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.104372][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.247799][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.391532][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.494447][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.504837][ T9307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.610074][ T9464] device syzkaller0 entered promiscuous mode [ 446.015898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.036013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.102554][ T9307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.665552][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 447.686593][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.729404][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.744043][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.773970][ T9307] device veth0_vlan entered promiscuous mode [ 447.787792][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.819107][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.852034][ T9307] device veth1_vlan entered promiscuous mode [ 447.984708][ T9543] sctp: failed to load transform for md5: -4 [ 448.003171][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.022216][ T9537] sctp: failed to load transform for md5: -4 [ 448.035356][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 448.072511][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 448.153924][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.181304][ T9307] device veth0_macvtap entered promiscuous mode [ 448.207132][ T9307] device veth1_macvtap entered promiscuous mode [ 448.272870][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.326457][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.393772][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.429736][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.479849][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.528110][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.561050][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.590542][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.611169][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.659390][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.694202][ T9307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.744043][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 448.799931][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 448.816305][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.835529][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.860249][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.924999][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.098510][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.148902][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.205537][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.226245][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.247100][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.269342][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.289360][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.310077][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.340883][ T9307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.364553][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.384132][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.445829][ T9307] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.488068][ T9307] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.528702][ T9307] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.549568][ T9307] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.582898][ T9599] loop6: detected capacity change from 0 to 7 [ 449.765949][ T4202] Dev loop6: unable to read RDB block 7 [ 449.948073][ T4202] loop6: unable to read partition table [ 450.195548][ T4202] loop6: partition table beyond EOD, truncated [ 450.400038][ T9599] Dev loop6: unable to read RDB block 7 [ 450.437734][ T9599] loop6: unable to read partition table [ 450.477614][ T9599] loop6: partition table beyond EOD, truncated [ 450.536295][ T9599] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 450.740901][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.788529][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.854852][ T9621] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 452.140231][ T9625] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 452.256045][ T9626] binder: 9623:9626 unknown command 1074553619 [ 452.262637][ T9626] binder: 9623:9626 ioctl c0306201 200000000540 returned -22 [ 452.302087][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.685396][ T3055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.710048][ T3055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.787158][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.341301][ T9665] loop9: detected capacity change from 0 to 1024 [ 455.172725][ T9665] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 456.397892][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.405303][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.293491][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.405194][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.044725][ T9694] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.053884][ T9694] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.063776][ T9694] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.073197][ T9694] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.367766][ T9721] xt_hashlimit: size too large, truncated to 1048576 [ 458.800634][ T4228] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 459.206960][ T4228] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 459.221442][ T4228] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 459.258584][ T4228] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 459.270388][ T4228] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 459.288040][ T4228] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 459.411072][ T4228] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 459.426699][ T4228] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 459.436599][ T4228] usb 9-1: Product: syz [ 459.446189][ T4228] usb 9-1: Manufacturer: syz [ 459.486119][ T9701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.506364][ T4228] cdc_wdm 9-1:1.0: skipping garbage [ 459.513165][ T4228] cdc_wdm 9-1:1.0: skipping garbage [ 459.543147][ T4228] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 460.124232][ T4238] usb 9-1: USB disconnect, device number 2 [ 460.559900][ T9773] loop6: detected capacity change from 0 to 1024 [ 460.807375][ T9773] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 460.883933][ T9780] device syzkaller0 left promiscuous mode [ 461.292594][ T9791] loop4: detected capacity change from 0 to 256 [ 461.673703][ T9791] exfat: Deprecated parameter 'namecase' [ 461.679835][ T9791] exfat: Deprecated parameter 'namecase' [ 461.786274][ T9791] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 463.866216][ T9834] binder: 9824:9834 ioctl c0306201 0 returned -14 [ 464.431896][ T9843] binder: 9840:9843 unknown command 1074553619 [ 464.438436][ T9843] binder: 9840:9843 ioctl c0306201 200000000540 returned -22 [ 464.761272][ T9845] device syzkaller0 entered promiscuous mode [ 467.610040][ T9907] device syzkaller0 entered promiscuous mode [ 467.862885][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.