last executing test programs: 18.856163265s ago: executing program 4 (id=10): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000000c0)={{0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905ad0aff03f70709090587", @ANYBLOB="e2"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000740)={{0x4, 0x0, 0xc, 0x5, 'syz1\x00', 0xb}, 0x3, 0x30, 0x3, 0xffffffffffffffff, 0x4, 0x6, 'syz1\x00', &(0x7f0000000040)=['(}\x00', '\x00', '&[.][,-\\*]8@-,-\x00', '/dev/ttynull\x00'], 0x21}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000240)={0x80, 0x983, 0x7, 0x0, 0xe, "d4050411adef244915ba67de72f22b96c239e9", 0x3ff, 0x7}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r3) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000380)={0x20, 0x15, 0x71, "27cbc93327c4af8be3ca1010588c0477e4fb9e57868bc03193e37e836ea0dcb2b791c653340c1d720575b2be56c585993b3307301a12ec92de5ca77e6527c159caaf912b5681f0dd3114866b8ccf61ef650e6ba4868f3f423b22655118058f45649647fbd6d7a1a4b81a6f04cf0b10c54c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1e}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="030000754c1a3b182892b0d6a1b8b0f2cda846598d5a2686f31d98e3114490b353b28d9928ea0d57e85bfda4f6fdbddc5b2fd99d6850a8f6e3acbf3014609d300616c76eba7ead14e112544d2a2c34bd7f40d20252484520fc7f8e60d8e6d648474aeada430c4ffaddc376d534033849b95b4321deab010ff7"], 0x79) 16.965881992s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000040)='net/netstat\x00') read$eventfd(r3, &(0x7f0000000280), 0x8) 15.685849946s ago: executing program 4 (id=16): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x2, 0x2000}, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x1, &(0x7f0000000140), 0x5) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240)=0xfff) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa3e, &(0x7f0000000940)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 14.656291833s ago: executing program 4 (id=21): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) read(r0, &(0x7f0000000940)=""/1040, 0x410) 14.340774794s ago: executing program 4 (id=25): openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x1d, &(0x7f0000000680)=[{0x3c, '\x00', @data=0x4, 0x5}, {0x32, '\x00', @data=0xfffffffb, 0xfffffffa}]}) 11.90137988s ago: executing program 4 (id=27): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) 10.403505303s ago: executing program 1 (id=34): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 10.273949577s ago: executing program 1 (id=35): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1}, 0x20000000) writev(r0, &(0x7f00000003c0), 0x100000000000022d) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = gettid() prlimit64(r3, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) read(r4, &(0x7f0000000940)=""/1040, 0x410) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) pipe(&(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, &(0x7f0000000140)) 9.282494003s ago: executing program 1 (id=38): openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x1d, &(0x7f0000000680)=[{0x3c, '\x00', @data=0x4, 0x5}, {0x32, '\x00', @data=0xfffffffb, 0xfffffffa}]}) 7.09090302s ago: executing program 0 (id=41): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7.09067357s ago: executing program 1 (id=42): ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x2, 0x1, 0x11}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r3}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) setresgid(0x0, 0x0, 0xffffffffffffffff) 6.888134997s ago: executing program 4 (id=44): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000040)='net/netstat\x00') read$eventfd(r3, &(0x7f0000000280), 0x8) 6.878852547s ago: executing program 0 (id=45): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.874389728s ago: executing program 2 (id=46): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f0000000180)) 6.689626043s ago: executing program 2 (id=47): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x3) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103900, 0x0) 6.592066617s ago: executing program 3 (id=48): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1}, 0x20000000) writev(r0, &(0x7f00000003c0), 0x100000000000022d) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = gettid() prlimit64(r3, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) read(r4, &(0x7f0000000940)=""/1040, 0x410) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) pipe(&(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, &(0x7f0000000140)) 6.410268064s ago: executing program 0 (id=49): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) r2 = mq_open(&(0x7f00000002c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x850\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xa4\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96n\x17|\xc9xR\\0\xd5\x8c=J\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd3\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xa7\x14t\x9feN*\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0xd8, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mq_getsetattr(r2, 0x0, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r4 = socket(0xa, 0x3, 0x87) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) 5.637147251s ago: executing program 3 (id=50): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4, 0x20000000) 5.187296787s ago: executing program 2 (id=51): syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="00f3200000be550020080000198c3b790000c19e57fc247c52a1695a251b480e31f9126b9b0b247df0690ca7d757194d0335d8e8a065e069e1290c00100000000000988309e751e0eec20f776e335f669773c3b365c1c646f538814dafe16dda497973e4fd"], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='secu'], 0x0, 0x0, 0x2) 4.008085878s ago: executing program 3 (id=52): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r3, r4, 0x0) 3.822877215s ago: executing program 1 (id=53): openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x1d, &(0x7f0000000680)=[{0x3c, '\x00', @data=0x4, 0x5}, {0x32, '\x00', @data=0xfffffffb, 0xfffffffa}]}) 3.809151015s ago: executing program 2 (id=54): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) 3.65934359s ago: executing program 0 (id=55): socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x582, &(0x7f0000005a80)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) 2.940138916s ago: executing program 3 (id=56): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000201050000000000000000000200000853e54f24f208b2c00ed9d9dea6fd48e200ccd38ecae5477ca405a85fc78f1ee9c1857be11b6bc55df0816856d923964cb2bbbbface52b5596d83390d8501f4b6632ae61f71b79c3137375230e21857b0646e86babf90661901a56c40c89b63d2ed1af7e9"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 2.930449306s ago: executing program 2 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bind$rxrpc(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.318370723s ago: executing program 2 (id=58): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) 1.231944336s ago: executing program 3 (id=59): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020400000a0000000000000002000000030006000000000002008000ac141405000000000000000002000100000000000000000000000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x4) 1.132578959s ago: executing program 3 (id=60): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22a441, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xfffffeb1) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38004d367ea6da6e3991d656630000", @ANYRESDEC, @ANYBLOB="01000000000000000000010000002400018008000700", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}}, 0x2400404e) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042000102000007c8b26bbb884b6b"], 0x14}}, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettfilter={0x4c, 0x2e, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x5}, {0xffff, 0xd}, {0x7, 0x9}}, [{0x8, 0xb, 0xa05}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xffffffff}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) sendmmsg(r7, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000002700)="ed3dddc95dddc9ed", 0x8}], 0x1}}], 0x1, 0x8000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.041796883s ago: executing program 0 (id=61): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0xfff) 0s ago: executing program 0 (id=62): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x100, 0x140) ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f00000003c0)={0x9, 0x0, r0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfdef) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) inotify_init1(0x0) unshare(0x400) preadv(0xffffffffffffffff, 0x0, 0x0, 0xebc, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x288, "f9ab7c3dc1890132b154b281c1a0b7fd12285b513206ee063787faa4d7c8f914", 0x34324142}) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f0000002500)=ANY=[], 0x1, 0x1f9, &(0x7f0000000180)="$eJzslU+L00AYxp+ZxEkqfgIvHlxwL6ZJquJlYb3syYPgongQDG52WTfrym4OtiDST+Ddmwc/hlCvfgipgihIvagnDyOTmTTTf7SNhxZ8f9DJk8z0nXfeYZ4BQRD/LZ8//e7LX1tffQAXsAHPfP/mAOBac2v8R//Hi/e3d+6/evj2g9cPGqPRvKXndwH0bjnIzbuUUtr9G+a5C17qc3a/D4bA6EfguGd0CoYHRj+x9IkaHwT7h1kaPD7J9pQIVROpJlZNC8CfMg2V36DLsGflx6zVnrU7R0mWpadzhCrUvDGzxPTK9b4P8/OBLSs/e78C6GzDqn6IwBEZ3QLDXaNvwitro0tirf+iW8V3rPiT6QrUWmQlvgCovuzXjjMidneAyS6hpqoVEGAL7/0aC72VR/rB3LrVWF8B91/jqNok6hRJD5g3WJ2SenNh3CCEOWGL/P3dth5bfiktdLk0tmd0iVrOhaF/yjcMVyx/0lbyurgsmvnxs+ZZu3P18Dg5SA/Sp3HcuhFeC8PrcbMwIt1OM0BHx28U/nS+it+Y7peA4ALPkzw/jXQrjKchLt7jMcd9KTUYdDk2L+t7R7mpGIv7E0A5KTM/XjyV2nRmJkQQBLFCLoHB+Jx0S2Fuk2GHlPGdFedJEARBEARBEARBEER9/gYAAP//xLdXmg==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r5, 0xe0ffff, 0x19, 0x3) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 62.893719][ T4175] cgroup: Unknown subsys name 'net' [ 63.007370][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.468885][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.055092][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 66.074913][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.102771][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 66.130635][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.244281][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.266036][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.273489][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.283211][ T4200] device bridge_slave_0 entered promiscuous mode [ 66.314041][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.321563][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.329765][ T4200] device bridge_slave_1 entered promiscuous mode [ 66.355708][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.363037][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.371653][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.399898][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.407356][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.416753][ T4197] device bridge_slave_0 entered promiscuous mode [ 66.430770][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.438135][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.446537][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.464544][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.471776][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.479864][ T4197] device bridge_slave_1 entered promiscuous mode [ 66.503421][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.518355][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.535209][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.542440][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.550487][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.576005][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.583292][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.591858][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.608439][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.634667][ T4200] team0: Port device team_slave_0 added [ 66.649166][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.660125][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.678316][ T4200] team0: Port device team_slave_1 added [ 66.691749][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.715086][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.722513][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.730422][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.746927][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.754519][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.762847][ T4193] device bridge_slave_1 entered promiscuous mode [ 66.772321][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.798390][ T4188] team0: Port device team_slave_0 added [ 66.819610][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.826910][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.853228][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.867270][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.879293][ T4197] team0: Port device team_slave_0 added [ 66.886984][ T4188] team0: Port device team_slave_1 added [ 66.900210][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.907519][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.934356][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.954657][ T4197] team0: Port device team_slave_1 added [ 66.976132][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.987864][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.005606][ T4187] team0: Port device team_slave_0 added [ 67.047090][ T4187] team0: Port device team_slave_1 added [ 67.068721][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.075890][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.102334][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.124351][ T4193] team0: Port device team_slave_0 added [ 67.130744][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.137978][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.164050][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.182390][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.189396][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.215429][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.235310][ T4193] team0: Port device team_slave_1 added [ 67.242416][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.249401][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.275602][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.287468][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.294545][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.320978][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.337995][ T4200] device hsr_slave_0 entered promiscuous mode [ 67.345280][ T4200] device hsr_slave_1 entered promiscuous mode [ 67.367468][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.374647][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.401061][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.434544][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.441761][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.467941][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.495136][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.502188][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.528486][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.574240][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.581223][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.588413][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.596432][ T4188] Cannot create hsr debugfs directory [ 67.609934][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.617637][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.624575][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.632530][ T4187] Cannot create hsr debugfs directory [ 67.633163][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 67.685750][ T4197] device hsr_slave_0 entered promiscuous mode [ 67.693129][ T4197] device hsr_slave_1 entered promiscuous mode [ 67.699960][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.707819][ T4197] Cannot create hsr debugfs directory [ 67.730935][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 67.750940][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 67.757171][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 67.763349][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 67.782645][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.789606][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.796631][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.804375][ T4193] Cannot create hsr debugfs directory [ 68.102438][ T4200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.118730][ T4200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.128745][ T4200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.145459][ T4200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.168590][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.193201][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.203490][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.224073][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.292383][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.311614][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.322214][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.337779][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.392391][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.431801][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.449269][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.460063][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.472293][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.497613][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.516744][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.527912][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.567792][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.575937][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.586318][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.596077][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.603471][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.613207][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.625214][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.633824][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.641019][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.673575][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.686941][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.696053][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.705987][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.714497][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.727717][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.754171][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.763287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.773833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.783736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.792579][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.799665][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.808777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.817632][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.830665][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.852284][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.871545][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.882363][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.892433][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.902447][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.909549][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.918161][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.926317][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.934428][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.943484][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.953174][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.962125][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.970732][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.979628][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.990052][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.025803][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.034777][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.044540][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.051685][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.059681][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.069623][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.080539][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.087760][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.096128][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.105588][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.114596][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.123229][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.132607][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.142191][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.160981][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.182498][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.193896][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.204420][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.215748][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.235076][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.253308][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.262899][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.273571][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.284843][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.294245][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.303242][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.312687][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.321884][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.332360][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.345837][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.356168][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.365269][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.382797][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.407055][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.427457][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.451100][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.466125][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.504558][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.522645][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.537685][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.577905][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.594546][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.609839][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.617034][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.633892][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.647578][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.659636][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.666806][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.681330][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.709550][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.716685][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 69.739987][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.749857][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.763431][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.791782][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 69.798466][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 69.813135][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.823321][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.834565][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 69.844816][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.856694][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.864810][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 69.873837][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.885549][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.894998][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.904567][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.917763][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.926974][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.942018][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.950404][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.993834][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.005940][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.014998][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.026432][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.035404][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.042582][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.052881][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.062266][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.070733][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.077858][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.086152][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.096852][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.107327][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.115672][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.126434][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.139159][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.153737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.163965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.173386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.210665][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.255970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.266450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.277637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.285709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.293922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.303525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.313016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.324064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.332769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.341764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.358287][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.370109][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.390235][ T4200] device veth0_vlan entered promiscuous mode [ 70.399968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.410556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.427344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.440806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.480299][ T4200] device veth1_vlan entered promiscuous mode [ 70.507299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.517355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.525738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.534801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.546344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.581029][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.589406][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.601641][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.626123][ T4188] device veth0_vlan entered promiscuous mode [ 70.658444][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.670106][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.679813][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.697435][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.707819][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.721390][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.729649][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.738367][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.747478][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.757178][ T4187] device veth0_vlan entered promiscuous mode [ 70.775017][ T4187] device veth1_vlan entered promiscuous mode [ 70.807525][ T4200] device veth0_macvtap entered promiscuous mode [ 70.823984][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.832511][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.840806][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.849883][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.858957][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.867117][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.876800][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.904294][ T4187] device veth0_macvtap entered promiscuous mode [ 70.914479][ T4188] device veth1_vlan entered promiscuous mode [ 70.933979][ T4200] device veth1_macvtap entered promiscuous mode [ 70.948581][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.957448][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.969788][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.978258][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.987785][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.002908][ T4187] device veth1_macvtap entered promiscuous mode [ 71.028701][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.037788][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.070528][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.092046][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.102054][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.114737][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.126789][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.135934][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.152862][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.171985][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.180751][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.190012][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.200275][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.209272][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.218413][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.227987][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.245552][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.257890][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.267842][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.276982][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.304314][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.318850][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.347269][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.363326][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.381704][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.390811][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.398877][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.402920][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.412888][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.431775][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.440691][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.456918][ T4188] device veth0_macvtap entered promiscuous mode [ 71.468568][ T4197] device veth0_vlan entered promiscuous mode [ 71.480323][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.489627][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.517585][ T4197] device veth1_vlan entered promiscuous mode [ 71.526577][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.537792][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.547773][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.558277][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.568353][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.581920][ T4188] device veth1_macvtap entered promiscuous mode [ 71.608761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.623640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.633065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.710991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.727195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.740329][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.751344][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.762569][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.773376][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.785130][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.793184][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 71.807245][ T4197] device veth0_macvtap entered promiscuous mode [ 71.828301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.838805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.848629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.858686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.868250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.878152][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 71.880694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.892098][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 71.898228][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 71.905890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.916493][ T4193] device veth0_vlan entered promiscuous mode [ 71.925596][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.936261][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.946559][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.959278][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.963171][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 71.975033][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.990586][ T4197] device veth1_macvtap entered promiscuous mode [ 72.012643][ T587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.020797][ T587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.030321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.041705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.054875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.066286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.078599][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.088270][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.097336][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106345][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.125657][ T4193] device veth1_vlan entered promiscuous mode [ 72.141494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.196393][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.207613][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.219142][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.231149][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.241740][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.255839][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.269598][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.287267][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.296162][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.310926][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.322096][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.331487][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.342501][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.355141][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.366234][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.376399][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.387437][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.397577][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.408575][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.421694][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.433046][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.441954][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.450667][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.460058][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.479441][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.488732][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.499812][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.509552][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.539683][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.547604][ T4193] device veth0_macvtap entered promiscuous mode [ 72.562554][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.606528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.620057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.631643][ T4193] device veth1_macvtap entered promiscuous mode [ 72.660051][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.684509][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.704639][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.716391][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.758072][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.768835][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.783482][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.794847][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.805493][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.816281][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.826760][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.837925][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.851792][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.863741][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.883771][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.896297][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.898183][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.913379][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.927238][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.951397][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.963702][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.998827][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.023350][ T4267] loop0: detected capacity change from 0 to 64 [ 73.034144][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.045149][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.061882][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.077348][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.099173][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.125473][ T4267] Trying to free block not in datazone [ 73.144491][ T4267] attempt to access beyond end of device [ 73.144491][ T4267] loop0: rw=0, want=1026, limit=64 [ 73.165919][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.182774][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.195787][ T4267] Buffer I/O error on dev loop0, logical block 512, async page read [ 73.200484][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.226642][ T4267] attempt to access beyond end of device [ 73.226642][ T4267] loop0: rw=0, want=113154, limit=64 [ 73.244091][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.276990][ T4267] Buffer I/O error on dev loop0, logical block 56576, async page read [ 73.301817][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.334232][ T4271] attempt to access beyond end of device [ 73.334232][ T4271] loop0: rw=0, want=1026, limit=64 [ 73.347895][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.357019][ T4271] Buffer I/O error on dev loop0, logical block 512, async page read [ 73.373096][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.385986][ T4270] vivid-002: ================= START STATUS ================= [ 73.395237][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.405022][ T4270] vivid-002: Radio HW Seek Mode: Bounded [ 73.405279][ T4271] attempt to access beyond end of device [ 73.405279][ T4271] loop0: rw=0, want=113154, limit=64 [ 73.413829][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.436464][ T4270] vivid-002: Radio Programmable HW Seek: false [ 73.446602][ T4270] vivid-002: RDS Rx I/O Mode: Block I/O [ 73.454229][ T4270] vivid-002: Generate RBDS Instead of RDS: false [ 73.466411][ T4270] vivid-002: RDS Reception: true [ 73.482026][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.513869][ T587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.531052][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.539741][ T587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.579343][ T4271] Buffer I/O error on dev loop0, logical block 56576, async page read [ 73.597607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.607861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.665933][ T4273] attempt to access beyond end of device [ 73.665933][ T4273] loop0: rw=0, want=1026, limit=64 [ 73.694755][ T1479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.710585][ T1479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.726063][ T4273] Buffer I/O error on dev loop0, logical block 512, async page read [ 73.772290][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.810372][ T4270] [ 73.815501][ T4270] vivid-002: RDS Program Type: 0 inactive [ 73.825315][ T4270] vivid-002: RDS PS Name: inactive [ 73.830677][ T4270] vivid-002: RDS Radio Text: inactive [ 73.840388][ T4270] vivid-002: RDS Traffic Announcement: false inactive [ 73.845008][ T4273] attempt to access beyond end of device [ 73.845008][ T4273] loop0: rw=0, want=113154, limit=64 [ 73.866528][ T4273] Buffer I/O error on dev loop0, logical block 56576, async page read [ 73.876249][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 73.918018][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.959646][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.975394][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 75.636952][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 76.151880][ T4270] vivid-002: RDS Traffic Program: false inactive [ 76.158818][ T4270] vivid-002: RDS Music: false inactive [ 76.164767][ T4270] vivid-002: ================== END STATUS ================== [ 76.200826][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 76.278926][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 76.344908][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.557940][ T4290] loop3: detected capacity change from 0 to 512 [ 76.702331][ T4290] EXT4-fs (loop3): Test dummy encryption mode enabled [ 76.784275][ T4290] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.854029][ T4290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.885755][ T4299] Zero length message leads to an empty skb [ 77.097275][ T4290] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.115203][ T4290] EXT4-fs (loop3): 1 truncate cleaned up [ 77.843869][ T4290] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 77.872057][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.884469][ T4307] loop0: detected capacity change from 0 to 8 [ 77.990999][ T4228] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.271440][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 78.726397][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 78.790633][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.826529][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 78.840212][ T7] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 78.855985][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.881576][ T4229] Bluetooth: hci4: command 0x0405 tx timeout [ 78.902039][ T4297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.917049][ T4297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.978495][ T7] pl2303 3-1:1.0: pl2303 converter detected [ 79.005934][ T7] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 79.061959][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.070713][ T4317] loop0: detected capacity change from 0 to 128 [ 79.083801][ T4228] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 79.129101][ T4228] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 79.157644][ T4317] EXT4-fs (loop0): Unrecognized mount option "measure" or missing value [ 79.218477][ T4319] loop3: detected capacity change from 0 to 4096 [ 79.369499][ T4297] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 79.431268][ T4297] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 79.440247][ T4323] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.457021][ T4319] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 79.468374][ T4297] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 79.487437][ T4319] NILFS (loop3): mounting fs with errors [ 79.536159][ T4325] capability: warning: `syz.0.12' uses 32-bit capabilities (legacy support in use) [ 79.593205][ T4297] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 79.776824][ T4297] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 79.959330][ T23] usb 3-1: USB disconnect, device number 2 [ 80.090613][ T23] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 80.099163][ T4228] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 80.110241][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 80.118872][ T4228] usb 5-1: Product: syz [ 80.123230][ T4228] usb 5-1: Manufacturer: syz [ 80.127859][ T4228] usb 5-1: SerialNumber: syz [ 80.144387][ T4228] usb 5-1: config 0 descriptor?? [ 80.162169][ T23] pl2303 3-1:1.0: device disconnected [ 80.171002][ T4228] usb 5-1: can't set config #0, error -71 [ 80.180201][ T4228] usb 5-1: USB disconnect, device number 2 [ 80.456985][ T4335] loop4: detected capacity change from 0 to 1764 [ 81.310018][ T4347] program syz.3.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.360912][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 82.370920][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 82.380878][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 82.390883][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 82.400894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 82.410879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 82.420885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.430887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.440890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.450883][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 83.897676][ T4362] loop0: detected capacity change from 0 to 1024 [ 83.970159][ T4362] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 84.051102][ T4369] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 84.077985][ T4369] CIFS mount error: No usable UNC path provided in device string! [ 84.077985][ T4369] [ 84.088680][ T4369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 84.424678][ T4362] hfsplus: failed to load root directory [ 85.393603][ T4381] ======================================================= [ 85.393603][ T4381] WARNING: The mand mount option has been deprecated and [ 85.393603][ T4381] and is ignored by this kernel. Remove the mand [ 85.393603][ T4381] option from the mount to silence this warning. [ 85.393603][ T4381] ======================================================= [ 85.467691][ T4381] overlayfs: failed to clone lowerpath [ 86.873093][ T4406] Cannot find set identified by id 0 to match [ 87.421341][ T1108] cfg80211: failed to load regulatory.db [ 88.693768][ T4404] loop2: detected capacity change from 0 to 512 [ 88.742302][ T4404] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 88.802018][ T4234] kernel write not supported for file /sg0 (pid: 4234 comm: kworker/1:7) [ 88.864024][ T4415] loop3: detected capacity change from 0 to 64 [ 88.964658][ T4415] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 88.966538][ T4419] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.407708][ T4442] loop3: detected capacity change from 0 to 512 [ 90.507551][ T4442] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.50: invalid block [ 90.637936][ T4442] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.50: couldn't read orphan inode 11 (err -117) [ 90.666010][ T4446] loop2: detected capacity change from 0 to 24 [ 91.518742][ T4442] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.631899][ T4446] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 91.724747][ T4446] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 91.821740][ T4446] romfs: read error for inode 0x70040 [ 92.836426][ T4458] loop0: detected capacity change from 0 to 1024 [ 92.913024][ T4461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 92.951871][ T4458] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.543565][ T4458] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 94.550807][ T4458] CacheFiles: File cache on loop0 registered [ 94.589677][ T4456] CacheFiles: File cache on loop0 unregistering [ 94.629856][ T4456] FS-Cache: Withdrawing cache "CacheFiles" [ 94.885321][ T4473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 95.819069][ T4478] loop0: detected capacity change from 0 to 16 [ 95.858468][ T4478] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.871256][ C1] ================================================================== [ 95.879614][ C1] BUG: KASAN: use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 95.888712][ C1] Read of size 1 at addr ffff88807dd95010 by task udevd/4177 [ 95.896123][ C1] [ 95.898514][ C1] CPU: 1 PID: 4177 Comm: udevd Not tainted syzkaller #0 [ 95.905548][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.915658][ C1] Call Trace: [ 95.918969][ C1] [ 95.921843][ C1] dump_stack_lvl+0x188/0x250 [ 95.926594][ C1] ? show_regs_print_info+0x20/0x20 [ 95.931981][ C1] ? load_image+0x410/0x410 [ 95.936525][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 95.942064][ C1] print_address_description+0x60/0x2d0 [ 95.947656][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 95.954294][ C1] kasan_report+0xdf/0x130 [ 95.958750][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 95.965377][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 95.971836][ C1] llc_conn_state_process+0x506/0x12b0 [ 95.977341][ C1] llc_conn_tmr_common_cb+0x336/0x7e0 [ 95.982756][ C1] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 95.987999][ C1] call_timer_fn+0x17b/0x540 [ 95.992627][ C1] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 95.997859][ C1] ? __run_timers+0x810/0x810 [ 96.002589][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 96.007853][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 96.013105][ C1] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 96.018439][ C1] __run_timers+0x56c/0x810 [ 96.023150][ C1] ? detach_timer+0x2b0/0x2b0 [ 96.027872][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.034170][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 96.039084][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 96.045367][ C1] run_timer_softirq+0x63/0xf0 [ 96.050168][ C1] handle_softirqs+0x336/0x830 [ 96.054985][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 96.059885][ C1] ? do_softirq+0x210/0x210 [ 96.064428][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 96.069590][ C1] __irq_exit_rcu+0x13b/0x230 [ 96.074319][ C1] ? irq_exit_rcu+0x20/0x20 [ 96.078876][ C1] irq_exit_rcu+0x5/0x20 [ 96.083162][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 96.088841][ C1] [ 96.091805][ C1] [ 96.094779][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 96.100815][ C1] RIP: 0010:from_kuid_munged+0x7e/0x6e0 [ 96.106397][ C1] Code: b8 f1 f1 f1 f1 f8 f8 f3 f3 4b 89 44 25 00 e8 19 1e 04 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9b 04 00 00 45 8b 3e 06 00 00 00 44 89 fe e8 55 21 04 00 49 83 ff 05 77 4e 31 ff 44 [ 96.126036][ C1] RSP: 0018:ffffc90002ddfb80 EFLAGS: 00000246 [ 96.132148][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888079c70000 [ 96.140151][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c1ccce0 [ 96.148150][ C1] RBP: ffffc90002ddfc10 R08: ffffc90002ddfcef R09: ffffc90002ddfc80 [ 96.156157][ C1] R10: dffffc0000000000 R11: fffff520005bbf9e R12: dffffc0000000000 [ 96.164162][ C1] R13: 1ffff920005bbf70 R14: ffffffff8c1ccce0 R15: 0000000000000001 [ 96.172312][ C1] ? from_kuid+0x690/0x690 [ 96.176802][ C1] cp_new_stat+0x1d6/0x540 [ 96.181362][ C1] ? cp_old_stat+0x670/0x670 [ 96.186175][ C1] ? vfs_fstatat+0x40/0x40 [ 96.190625][ C1] ? preempt_schedule_irq+0xe6/0x160 [ 96.195960][ C1] __x64_sys_newfstatat+0x187/0x200 [ 96.201214][ C1] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 96.206744][ C1] ? syscall_enter_from_user_mode+0x2a/0x70 [ 96.212728][ C1] do_syscall_64+0x4c/0xa0 [ 96.217213][ C1] ? clear_bhb_loop+0x30/0x80 [ 96.221928][ C1] ? clear_bhb_loop+0x30/0x80 [ 96.226657][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.232692][ C1] RIP: 0033:0x7f9c9fc01b0a [ 96.237145][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 96.256794][ C1] RSP: 002b:00007ffed30a8728 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 96.265260][ C1] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00007f9c9fc01b0a [ 96.273278][ C1] RDX: 00007ffed30a8730 RSI: 00007ffed30a8800 RDI: 00000000ffffff9c [ 96.281298][ C1] RBP: 00007ffed30a9840 R08: 0000000000000064 R09: 0000000000000000 [ 96.289309][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed30a9850 [ 96.297313][ C1] R13: 0000000000000000 R14: 0000000000000008 R15: 000055614ca25ba0 [ 96.305336][ C1] [ 96.308382][ C1] [ 96.310732][ C1] Allocated by task 4472: [ 96.315091][ C1] __kasan_kmalloc+0xaf/0xe0 [ 96.319723][ C1] llc_sap_open+0xda/0x330 [ 96.324179][ C1] llc_ui_autobind+0x1fa/0x4b0 [ 96.328987][ C1] llc_ui_connect+0x1c5/0xc70 [ 96.333696][ C1] __sys_connect+0x3cb/0x450 [ 96.338324][ C1] __x64_sys_connect+0x76/0x80 [ 96.343113][ C1] do_syscall_64+0x4c/0xa0 [ 96.347582][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.353533][ C1] [ 96.355878][ C1] Freed by task 4231: [ 96.359878][ C1] kasan_set_track+0x4b/0x70 [ 96.364503][ C1] kasan_set_free_info+0x1f/0x40 [ 96.369503][ C1] ____kasan_slab_free+0xd5/0x110 [ 96.374561][ C1] slab_free_freelist_hook+0xec/0x170 [ 96.379961][ C1] kmem_cache_free_bulk+0x38b/0x490 [ 96.385381][ C1] kfree_rcu_work+0x311/0x900 [ 96.390092][ C1] process_one_work+0x867/0xff0 [ 96.394974][ C1] worker_thread+0xad7/0x12a0 [ 96.399681][ C1] kthread+0x42e/0x520 [ 96.403780][ C1] ret_from_fork+0x1f/0x30 [ 96.408230][ C1] [ 96.410577][ C1] Last potentially related work creation: [ 96.416315][ C1] kasan_save_stack+0x35/0x60 [ 96.421026][ C1] kasan_record_aux_stack+0xb8/0x100 [ 96.426344][ C1] kvfree_call_rcu+0x105/0x7f0 [ 96.431142][ C1] llc_ui_release+0x212/0x450 [ 96.435962][ C1] sock_close+0xbf/0x210 [ 96.440245][ C1] __fput+0x212/0x8c0 [ 96.444266][ C1] task_work_run+0x125/0x1a0 [ 96.448936][ C1] get_signal+0x123e/0x12e0 [ 96.453563][ C1] arch_do_signal_or_restart+0xe6/0x12a0 [ 96.459235][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 96.464551][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 96.470125][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 96.475655][ C1] do_syscall_64+0x58/0xa0 [ 96.480114][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.486037][ C1] [ 96.488386][ C1] The buggy address belongs to the object at ffff88807dd95000 [ 96.488386][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 96.502474][ C1] The buggy address is located 16 bytes inside of [ 96.502474][ C1] 2048-byte region [ffff88807dd95000, ffff88807dd95800) [ 96.515872][ C1] The buggy address belongs to the page: [ 96.521540][ C1] page:ffffea0001f76400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd90 [ 96.531723][ C1] head:ffffea0001f76400 order:3 compound_mapcount:0 compound_pincount:0 [ 96.540071][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 96.548143][ C1] raw: 00fff00000010200 ffffea0005056000 0000000300000003 ffff888016c42000 [ 96.553938][ T4477] sched: RT throttling activated [ 96.562252][ C1] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 96.570850][ C1] page dumped because: kasan: bad access detected [ 96.577306][ C1] page_owner tracks the page as allocated [ 96.583041][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3946, ts 74799101024, free_ts 73902460137 [ 96.604083][ C1] get_page_from_freelist+0x24f6/0x2670 [ 96.609672][ C1] __alloc_pages+0x1ee/0x480 [ 96.614278][ C1] new_slab+0xc0/0x4b0 [ 96.618350][ C1] ___slab_alloc+0x807/0xdd0 [ 96.622962][ C1] __kmalloc_node_track_caller+0x13d/0x3a0 [ 96.628771][ C1] __alloc_skb+0x22c/0x750 [ 96.633230][ C1] mld_newpack+0x12f/0xba0 [ 96.637645][ C1] add_grec+0x1364/0x1840 [ 96.641974][ C1] mld_send_initial_cr+0x288/0x540 [ 96.647086][ C1] mld_dad_work+0x39/0x470 [ 96.651503][ C1] process_one_work+0x867/0xff0 [ 96.656358][ C1] worker_thread+0xad7/0x12a0 [ 96.661038][ C1] kthread+0x42e/0x520 [ 96.665114][ C1] ret_from_fork+0x1f/0x30 [ 96.669648][ C1] page last free stack trace: [ 96.674318][ C1] free_unref_page_prepare+0x637/0x6c0 [ 96.679779][ C1] free_unref_page+0x8f/0x2a0 [ 96.684503][ C1] __unfreeze_partials+0x188/0x1e0 [ 96.689638][ C1] put_cpu_partial+0x12d/0x190 [ 96.695128][ C1] qlist_free_all+0x35/0x90 [ 96.699640][ C1] kasan_quarantine_reduce+0x150/0x160 [ 96.705186][ C1] __kasan_slab_alloc+0x2f/0xc0 [ 96.710052][ C1] slab_post_alloc_hook+0x4c/0x380 [ 96.715167][ C1] __kmalloc+0x189/0x340 [ 96.719410][ C1] tomoyo_realpath_from_path+0xed/0x5e0 [ 96.724960][ C1] tomoyo_path2_perm+0x2a0/0x840 [ 96.729901][ C1] tomoyo_path_rename+0xfd/0x150 [ 96.734856][ C1] security_path_rename+0x1dc/0x280 [ 96.740069][ C1] do_renameat2+0x7cd/0xf70 [ 96.744591][ C1] __x64_sys_rename+0x82/0x90 [ 96.749267][ C1] do_syscall_64+0x4c/0xa0 [ 96.753691][ C1] [ 96.756013][ C1] Memory state around the buggy address: [ 96.761641][ C1] ffff88807dd94f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.769801][ C1] ffff88807dd94f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.778042][ C1] >ffff88807dd95000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.786120][ C1] ^ [ 96.790747][ C1] ffff88807dd95080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.798837][ C1] ffff88807dd95100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.806921][ C1] ================================================================== [ 96.814987][ C1] Disabling lock debugging due to kernel taint [ 96.821227][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.828477][ C1] CPU: 1 PID: 4177 Comm: udevd Tainted: G B syzkaller #0 [ 96.836837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.846915][ C1] Call Trace: [ 96.850224][ C1] [ 96.853097][ C1] dump_stack_lvl+0x188/0x250 [ 96.857929][ C1] ? show_regs_print_info+0x20/0x20 [ 96.863163][ C1] ? load_image+0x410/0x410 [ 96.867769][ C1] panic+0x2f8/0x850 [ 96.871710][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 96.876252][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 96.882181][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 96.888196][ C1] ? _raw_spin_unlock+0x40/0x40 [ 96.893163][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 96.899786][ C1] check_panic_on_warn+0x80/0xa0 [ 96.904759][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 96.911393][ C1] end_report+0x6d/0xf0 [ 96.915582][ C1] kasan_report+0x102/0x130 [ 96.920120][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 96.926738][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 96.933198][ C1] llc_conn_state_process+0x506/0x12b0 [ 96.938808][ C1] llc_conn_tmr_common_cb+0x336/0x7e0 [ 96.944215][ C1] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 96.949438][ C1] call_timer_fn+0x17b/0x540 [ 96.954034][ C1] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 96.959270][ C1] ? __run_timers+0x810/0x810 [ 96.963994][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 96.969201][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 96.974400][ C1] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 96.979600][ C1] __run_timers+0x56c/0x810 [ 96.984112][ C1] ? detach_timer+0x2b0/0x2b0 [ 96.988788][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.994823][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 96.999698][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 97.005943][ C1] run_timer_softirq+0x63/0xf0 [ 97.010713][ C1] handle_softirqs+0x336/0x830 [ 97.015598][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 97.020610][ C1] ? do_softirq+0x210/0x210 [ 97.025166][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 97.031119][ C1] __irq_exit_rcu+0x13b/0x230 [ 97.035846][ C1] ? irq_exit_rcu+0x20/0x20 [ 97.040370][ C1] irq_exit_rcu+0x5/0x20 [ 97.044618][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 97.050359][ C1] [ 97.053292][ C1] [ 97.056222][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 97.062207][ C1] RIP: 0010:from_kuid_munged+0x7e/0x6e0 [ 97.067778][ C1] Code: b8 f1 f1 f1 f1 f8 f8 f3 f3 4b 89 44 25 00 e8 19 1e 04 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9b 04 00 00 45 8b 3e 06 00 00 00 44 89 fe e8 55 21 04 00 49 83 ff 05 77 4e 31 ff 44 [ 97.087622][ C1] RSP: 0018:ffffc90002ddfb80 EFLAGS: 00000246 [ 97.093703][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888079c70000 [ 97.101707][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c1ccce0 [ 97.109686][ C1] RBP: ffffc90002ddfc10 R08: ffffc90002ddfcef R09: ffffc90002ddfc80 [ 97.117661][ C1] R10: dffffc0000000000 R11: fffff520005bbf9e R12: dffffc0000000000 [ 97.125638][ C1] R13: 1ffff920005bbf70 R14: ffffffff8c1ccce0 R15: 0000000000000001 [ 97.133648][ C1] ? from_kuid+0x690/0x690 [ 97.138080][ C1] cp_new_stat+0x1d6/0x540 [ 97.142510][ C1] ? cp_old_stat+0x670/0x670 [ 97.147110][ C1] ? vfs_fstatat+0x40/0x40 [ 97.151547][ C1] ? preempt_schedule_irq+0xe6/0x160 [ 97.156842][ C1] __x64_sys_newfstatat+0x187/0x200 [ 97.162057][ C1] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 97.167369][ C1] ? syscall_enter_from_user_mode+0x2a/0x70 [ 97.173270][ C1] do_syscall_64+0x4c/0xa0 [ 97.177867][ C1] ? clear_bhb_loop+0x30/0x80 [ 97.182656][ C1] ? clear_bhb_loop+0x30/0x80 [ 97.187387][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.193391][ C1] RIP: 0033:0x7f9c9fc01b0a [ 97.197822][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 97.217526][ C1] RSP: 002b:00007ffed30a8728 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 97.226238][ C1] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00007f9c9fc01b0a [ 97.234216][ C1] RDX: 00007ffed30a8730 RSI: 00007ffed30a8800 RDI: 00000000ffffff9c [ 97.242195][ C1] RBP: 00007ffed30a9840 R08: 0000000000000064 R09: 0000000000000000 [ 97.250178][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed30a9850 [ 97.258168][ C1] R13: 0000000000000000 R14: 0000000000000008 R15: 000055614ca25ba0 [ 97.266148][ C1] [ 97.269486][ C1] Kernel Offset: disabled [ 97.273831][ C1] Rebooting in 86400 seconds..