last executing test programs: 9.685919426s ago: executing program 3 (id=190): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.524378811s ago: executing program 3 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.020059784s ago: executing program 3 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x818}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0xd3, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x10}]}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x200000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000000040)=""/17, 0x11, 0x1) r5 = getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) r6 = getpgid(r5) syz_open_procfs(r6, &(0x7f0000000000)='fd/4\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x0, 0x4e22, 0x2, 0x2, 0xa0, 0x80}, {0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff, 0x1}}}, 0xb8}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="61050103030082"], 0x10e6) 7.006014182s ago: executing program 0 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5.813077267s ago: executing program 3 (id=206): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5.410004756s ago: executing program 0 (id=208): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.209602356s ago: executing program 3 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) 5.034576284s ago: executing program 2 (id=212): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x33, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3e, 0x2006, 0x8, 0x0, 0x5}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/173, 0xad) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r6, 0xffffff7f00000000, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 4.011883762s ago: executing program 1 (id=214): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 3.890953638s ago: executing program 2 (id=215): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES64=0x0, @ANYRESOCT=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$eJzs289qE1EUB+CT2Na0LpKFK3Ex4MZVaPoEBqkgBgQlCwVBsQ1IRwIWArow2bnwIfRx3OqTuCwiXEmmf5Iai5Q2A+n3bXKYub9w7pDkMIF5efvt3k5/v/ei9y1qlUpU76UUB5VoRDWOjAIAWCYHKcWXiEjXR7H+NdKvVCi7LwDg8ozn/8/xwD+c/yY/ACy/p8+eP2p3OttPsqwWkX8adAfd4rU43+7Fm8hjNzajHr8j0rGifvCws72ZTTTicz48zA8H3Wuz+VbUozE/3yry2Wx+NTam81tRj5vz81tz82tx985Uvhn1+PE6+pHHToyzJ/mPrSy7/7hzKn9jsg4AAACWQTM7Nvf+vdn81/ki36789/8Dp+6vV+LWSrl7B4Crav/9h71Xeb77bqHF2tSRiBidsfj7RtHo4jrMzhk/uqSLvpgXV6zHxb/zapS/r+Up+tXzx1NKw/Hn8+zFtYiYFOX9JgGLcfLtnzlcL60hAAAAAAAAAAAAAADgL4t4dKnsPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9fwJAAD//xQYkLQ=") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x28011, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r2, 0xfa}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r2, 0x8001}, 0x8) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{}]}, 0x1, 0x142, &(0x7f0000000240)="$eJzszTFLAnEYx/Hfv7O0MBJ0sCALGpLEPE9MCBwslITsqJCgSdCLAs1ICMcK2hp6ATdUQtPha6hosTwIex1CQ9BYPHccOURD8/MZnoPv/+G5sJnOAj4AkGis1mtHx1qjoVVmt9RCbjtljC7D5gbg+Xm3Y+ae5j4N/1mfPhV4gdTeQVVbLNertJaxehgeIEpdBmDvjlHbpBZ32py1t0NN+aUlnOaaopZ27t180b15alnnHoCPph5pG88b3U4+unA3LeEiH5kBhH+wh7RLJTfZ8gYlFLWnWwBipam/xTrR11jb6JndwrpaUM2Eoiwl5LgsJ3vqSzefPL2Ca817Qr8Ru4P3RhAMuYpWPweEDgijqfcfxDiAx+tPtTbhDgB4P/QB4q+Xcik43CoFfEOQwhBgjDHGGGOMMcb+6TsAAP//i5BpfA==") 3.792083962s ago: executing program 1 (id=216): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000003feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000620a00fe000000007133000000000000b5030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220"], 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x818}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0xd3, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x10}]}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x200000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000000040)=""/17, 0x11, 0x1) r5 = getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) r6 = getpgid(r5) syz_open_procfs(r6, &(0x7f0000000000)='fd/4\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x0, 0x4e22, 0x2, 0x2, 0xa0, 0x80}, {0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff, 0x1}}}, 0xb8}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="61050103030082"], 0x10e6) 3.517385065s ago: executing program 0 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='usbip-vudc.0', 0xc) 3.462501318s ago: executing program 4 (id=218): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f0000000240)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3d, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x19}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 3.349819403s ago: executing program 0 (id=219): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) dup2(r1, 0x3) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='127.0.0.1', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='51', 0x2) 3.316931925s ago: executing program 4 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYBLOB="d323af6398d3b2b874d0760a23d467e0d7c5d5634e8c9dd180fb63defedeadbb6af1511ca99e46c631ff309fa72029dcdfd71bd42701db94658176f5a257c6555a5f53e4a1353909ef82738bc1dbe41abf0cabc79f71f86de9e642004bf455d93677ffb0377cd64bd841c62781cfdccc2d82b0f667f567e9689ce23dbfe5d99b53b81f0d8529449c6aa6da4d27ec95856e4dcff1b7d5202f8c2bb424425714694f46b3e5f20f4527ab00cf9097f9e8cdf49586734ba8c6d6986ec2357061559834bbd34aba8fb625343ee6168ecb4cd70cb1130d456c1af6966385b23f5818ed588294ca4eec3a202de54a93df5ed982fcd5cc626b39fe94cc39382532f603d712e78e440f9b19400d72d35034a30eff3a778ab8fdbbef8c31de21aa1428aa62b36e244ce07f49fef3272a0d819de933f6a9ed3ec053b0cdf3e77fd4178be01fc60c792d678b12b21546cd78876bbb78882c4296f7e0c3ee18c418a3a839ecaf6f52a42d66255790f1530fda7e2373f0108a06c5f0c83a6038ec2376a3043c34d5c4e23c45d10c4bec371f9b29012870cf4447bfb4d88425354677df9421caf2027ab2195d0604c4c8bdc0e1d8c551686cb44e487fa7ed9587120b5fc4c693d1b2f043026526e9aa5e98e31c206e69d1d871917a7d7e83653e5fd145f9d03e64f96b92ca83032072d8a7b53088d9a545a554cde2d383012f2b4bc74eaa3e630d944d58f0eb79a291493fa05dc69be36b144e5c5e4dc85463d4b6a4ada2f8b123b9d0f9120c4a7c3c8f1ab81af58836b0abfa63da805d27e1759d331fb5e8cdcdedf88a5446103ba1de1f3cddaebcb1583d0350c2967f63b00641adc704e9648f9c3790da6aa99838be8fce3c780f19c47444b6f3ba03f7d78b54310db92bdedde162a6af64368e6b60698bca97cde01c0bf198093d216571cd632cc1f2ef5682d02329e9f5eee174a7a9d239ba793c89fead42518b5574edab0bbe0cd62e9e88df6b6485c456f2c6d64e3a8c2ea093c15462e6abf7cc0f524740d6a302fa09bd89f77f16a4c11aed0c19acf8318e56adb2c95c499fa432ac9e8cccf7879d43f58c5839bff218aaac2ffadb5f47920b57a31ac0a499b2503b000b7410be1c341726e89916ee03ed88a2bacc3379efd0bed4cdde3e7f264112a014ccf7720d768f3240c4b1c7ba7e54c6c031127e8e6bc9a2b95bf58d45a507db17446fd4b293c33fcc475f5eafc07022da92e16b12e99e0626f08d965a35ca16df3ae3642271cc33999197720402eaffb661b2aba25fd486cea0660215048253df3da35577eca728851e009550d37ab89bdbb42cae68dfaf13ba20c9b9dcfa38c04c7a72a728abdca2daa877e3e66541bbe63c2f491faf13e631554efeb72bb2fac5de916bd56885369f2c7c0418fc8a66dcffa52a6bd902d1b733ee28e7503484f8411afc80582864e3b950a369fb6a5e6da5bdd906afa9daa1b967e0ae32bf3b5aa025da64be47e61c25ca825cafd3e428957e28ed0c89b762169472692ce874ffc504b853ca29669761429f991aba554555d117521be3ff239835c8eaaa9f8e0edb51e19cff17fba9466f30d6ee477b740a0ab71da8119c2a9527b2139426c78834da1c35a26eff38fcd81296c5e4cff92f6c9bd21dc6967312f499e5788833d5179b78704ccd1123e7773eb7e2a18fbdec5f06d02aaa7848b57ff801dabc6662df9e903d04173fed24c961f29b8a07fcc58a8b6b9df0939595ac6ebb72ba72c89f680e260011b995958cdd6a17943ec45cab7287e0591e40dc4de176e65fb727cfeffbad3cfc2bbaad22d09d8ef907beb2ba56867f066ab66e0fc4911407286b44d45c61e51b0e6065105aa68581f9c88940b99cb9212e9114f2dad5a4f0aa872a8f88e5770308cd06d7af5f7645946d31545a66069386b03706754c37a7874dccf2150cdf741dbf15b1e0751aa57bed556e5c383f1ad89f42f9c06bd6fabb8c33263fcf4391aab21999143bb54ff3fa0124abda0a704c3eb8231a2536dab0c76c3ce32b055d8b483bcc73eeab38b94653a5064213052806b02c1c4692f9e6ff929ef3ca0ff6f2d8a664406823b44e48cef2872e442b07cd847eff2c087ac4eb61e7fb589f36812a0899af59ba281c247342c7e3adcfb22098ab905fbef7d1e11ad49819b066781ed52d215c2e813b6b547d58db5c4fb74b8466ffcad54f4581315ae3016221e1122e52f629d2d0ed649a8df30b74cb4c64af64c785597f46d759f4152121f0c05b0e190ad75f0acca92c55fb62e749bb3bbb2fbfff94fa3dd6872dd5b38e6a764000da6f71b696152c0aa6f8c5b6b915d627f65f123455ff1c1330d31b802637fd6ac5556f3fba22510b5b144b58faf3c0478b024123294fb8feb97875047007ae8157bd34e08c1f0699838ffe0e0481247d03b61d8e39469597344106590faf6f76e1030b8d0e6ef10a49bc9cdbac2187ff5878d58feb3c8322ea282a9d446404a69715c410d874f358fcba191f35aa941fa17e27e2edfe33c0ecb314b0bef29a98d76273014eb5be4121a4c3c329ae2d9ece2efb1894e41b0ae4bb5cf29c3ddb14e5589a54dd4c0b0bbdc680f2f6b776bf9c0d68e444988dcda9b4f41d2e61e2f18ccfdf199844a383cb7bf67b3f309da8ef8ff13717329b992803375f1203685e8bcd4df89bb8f091deb354baf921e550c46c8478de0159006707dee0c41a7be6819ce4942e1d885ccccc8c3cafb84bf0459bfa5fe9424de093418c4f60c7fa98f7eb7886b897800d59207e088b213eb4f6a3f4db67daecf8ae906e732bc497d55d78d1c20a279b04f36d812031aef268364cda05499aa1184919ff2d865e3b2014942e2582e53ea8cdc5329ae9831c28c0bc4c9fc19fe12f3b27c077aa7ee56093902a5f9c3351d9c72fc61ad9c5a3c6b51df46ce84d485d34ebb4b9b5015492de3751b067dcb20e92130087fa69c15a1411611519c8adf2071565b77420bf0f6ef5c79000690ccf948c61c4cf4ffa8d81ec8dd7eb7a5e771be42b5cf35d06caca4cbd7272828619f1045f86165e87cf5d56a39d3e1de94b74e016759b0c4f3746ee3f5465439ce6f4737caa2d29cae0ae07f664da05767d72eeed7dfc0ac665fb1cfb042b936fa3dbf629d50a9c832a57f68073c48e1eaee20daee97ecb21192467598bf093e492f17346288902eb8d3570ad26c2263accd80feea8572f19b8bea68b95289aa5fd2d9471fa2046a6c62355b758743be4f82042caa3a2980473e5f59dd9bfc73864be3a36c4f8cefce917b01e64a532ca861bcd88d6c9483c85cac0ab03dbd9579119d0c760db3d00ad0ab3c63cedeaff9d36bcb045ecfe0f586fd92239890c20aaad20349b610840618e95d8b58f342af983a83d20b76ae7d1f0f4eedc8daabb801bdea8550a21fbd4f8c66452578e8d6ad54ef6fcc3f2726d28f7ab80e94929a611f5d20c2d11cbeb44aed284edf210469ae890ab0c0f1a57af8d218ea87d8942f8696a2dad99b3b6f4ec531237c72c98a613553bd972fa0ff7a5ee1c2cb51ffc6137c7a80a631be586a8df388c49944c9ad0540b4204e86d2a1a04db434a830798654b9d61a3205e53b80575d7767b393fb9e3d1c21bdf9db29cdc6feff5483d189f4b55c4e04cfa17dad004b3abc0e7f52cad62898fa45a61e873298b4136bef49deeba85bcb172d1a4c6f49d7df1a0aa18fd4dbe165e144139d949222c93cc6369579ac80827d015bc78e3d96a3c5bd26d98df194769d3f1b8f474e9e10df1284ac316e55b309cefe561d629d507f06ccf985e565fb3da0b4a76cc2e099c1f7dd5d6f065854c877f890cc449973c31bc76ac462dec2039e10c3fd3eefac2a5d2fcac60fa069d9c443d650c0807f5a52624c65d8bb4647d02b15fc694bde11e9c06996b99614157669b422d39150094dd78ad62b45a9b62d4c5fd447b293088bf177b81340de59674217edfe1bac8f6f586e248a828081b7a4ebd3108471a572f688fee6e45463794320fa1fe0ea42b4ac788ca20e5fa71617065c198983eb25b3b543664751ddacb0f0f354fc60d0fcde34546ea9e7570195d3aef8f437b1e341c121e9465dd816af8914e840624b30f2d0cf932cc7c0cc5b29537ab12cffb95093290ae16308184101c9aa6b36828beb1208d5f21e0fb5d9ae83db0806720c1332f739b560cbe8ed28764b62ea7d3db2e1bc2ef75ddbc60a2c396d16a42ea52f0120e4e6d4daecebac1ce0718f3454d101c64cae2d88d913219f2b7c4871083cf79d17e86885c436704b6542228b66c92035d5d0ccf6a4f111c2c7663bc1189af84da738046df10a64aea378c6fca7050c287914f64952495af275d6afcc05f5fb390e25bdefc08ce60f4f935dfc16a85a4696068543edc824e3b561d0a06621170932d3ccb801a41a9f10b2ce4d882af46973b4de248f4cfeb5380d3cda6741980a7e90bfcc9291fd211650a7cbad818edd43a74028f1d47688044cd443d535a82d1da7fc793e696b648e36bfac427436cbc205270926af839a8dbdd725cc5ad6ca5491194b2a0238f85baa1211239bf81ee89f96b4df7671ba9914afb0a3c33c8e3ca1745f278d8859d010dc61457eacf2b56b8413f67c32eaaaf14091b8f112602bffb7ec872f20943c8beb4f3e01c2dcf30326194a6ba3332c0f141a68c428368e2aa944ef35cd665c3b394788836f6b2c694b928ec507a38e4f93142c71db1bd8e2eeba8d389a2b82e520f23e526bd3f4446d9e1ae6794f5b2da537bc803f03ecaa2c0bbd91fb0885156b1e77e0f7324eec99ea0461786241b3bb4a4f0fd317ba521e4576973afcc0e48c9c32c576229cff2267717e651db598061ac2368065b1a80ab97c22de8668ee8f98f05db24a2b7d4f029034c574ee0211d55007c7ad1313d2c3ca1792e896ee9ec40400bf35643bf81ae10da131ec935c0562e4cdd1554677bd54588b5a0b0b5fd0a37482cfab046230aa50e1030afd1085b1e8a7b7d428639c64f845dd45e173dc8ccaf9e86249ff7dc625a30b9c42fdf75271090c9263cf0ef662e1fea6067c41dd4a70573debf66f4f1b7f3a8cf069de7699a454420144388e2ae1f8150d83f7f52e3817c9f66bc7cdbed7c597db66393f35ff73cc6cda31d49b21ee817da91c00ecb614e4b9a0c10ccf54c26ec0e683b9703eae7a534a8af479002bdb18a0625f4b284c2cb09b608ec189a0c370a092922e0e74484aeef2f4578db4a103841cb31c7d167c46fbe881911693e8399ee5ba0756f52df83550a6aad3d637ac4fa9f054714b61e1485210b8cccae5c3c8f6059c0b2dc614088aacde3ec782845f0996e1c21188a57f6991cad09f96ef5f35065b919077977da0aa15b56f49ca996309f8a469bd0b318a3be892d39b1d17403753955e897b95297fff2e0ea5be5411935a8ff1ac29189e75682d7b0345b7100509c8ad08a23b2dfcd7654f4b5951af4d238c69bfd6154ab4b1058cf9659f3ce9079e640771e2e2f6fe430451831aa43b0202f276e276149d87ce5ded959801d03913443f8dfe8006ca35a10d98186f1718db5b17c5e5c9500c1c9e6b7e2cccd43a57012f1b6b28a928fd1c95f462eef4fe01f2b8b5d909d97d96e8d2564b309cf22059c0a852a97a8ca99ba9535816d6b149a5d1b7e239c21f1d1589e2f68ea9d36c3bad7026bee94bb59daf725ffbcb7bbe982cf88b89f911ebe45f98af2130175783c9836eeb8c6051398e16784f82c8a5cd1db6aa1de56f9aa3715b9ff96ad195b78d9fcefba1cec129c239d11b40e688f99", @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fcntl$notify(r4, 0x402, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, r1, 0x402, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2000095) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000001700)=0x0, &(0x7f0000001740)=0x4) sendmsg$nl_route_sched(r5, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8, 0xb}, {0xd, 0x8}, {0xd}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xace}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$phonet(0x23, 0x2, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) 3.20046281s ago: executing program 0 (id=221): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x33, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3e, 0x2006, 0x8, 0x0, 0x5}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/173, 0xad) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r8, 0xffffff7f00000000, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) 2.499516543s ago: executing program 2 (id=222): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f0000000240)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3d, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x19}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 2.288397262s ago: executing program 0 (id=223): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0x4090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x3, 0x810, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e38, 0x11000}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x20, 0x2400e044}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000000340), 0x40001ca, 0x20, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000000c0)=0xffff1888, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x14, 0x31, 0x3d, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) 2.247954895s ago: executing program 4 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x40, 0x200) kcmp(r0, r0, 0x4, r2, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4ef, &(0x7f00000016c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x63, 0x0, 0x3007, 0x5, 0x2, 0x80000000, 0x9, 0x1}) finit_module(r6, 0x0, 0x1) 2.239472175s ago: executing program 1 (id=225): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x33, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3e, 0x2006, 0x8, 0x0, 0x5}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/173, 0xad) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r8, 0xffffff7f00000000, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) 1.90658629s ago: executing program 2 (id=226): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r0, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1f4, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000000}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 1.128577397s ago: executing program 1 (id=227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) 911.493147ms ago: executing program 4 (id=228): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, 0x0, 0x400c804) 899.734947ms ago: executing program 2 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='usbip-vudc.0', 0xc) 784.419713ms ago: executing program 3 (id=230): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 784.133243ms ago: executing program 1 (id=231): socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 767.504464ms ago: executing program 4 (id=232): syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 754.474654ms ago: executing program 2 (id=233): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x33, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3e, 0x2006, 0x8, 0x0, 0x5}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/173, 0xad) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r8, 0xffffff7f00000000, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) 436.243229ms ago: executing program 4 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYBLOB="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", @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fcntl$notify(r4, 0x402, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, r1, 0x402, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2000095) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000001700)=0x0, &(0x7f0000001740)=0x4) sendmsg$nl_route_sched(r5, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8, 0xb}, {0xd, 0x8}, {0xd}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xace}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$phonet(0x23, 0x2, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) 0s ago: executing program 1 (id=235): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20000000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x4008000) unshare(0x2020400) unshare(0x400000c0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 68.313989][ T4173] cgroup: Unknown subsys name 'net' [ 68.462180][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.943511][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.750541][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.757493][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.033080][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 72.080008][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 72.189231][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 72.206291][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 72.219719][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 72.239973][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.247789][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.258093][ T4186] device bridge_slave_0 entered promiscuous mode [ 72.272251][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.279921][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.288692][ T4186] device bridge_slave_1 entered promiscuous mode [ 72.373613][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.394950][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.402221][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.410997][ T4194] device bridge_slave_0 entered promiscuous mode [ 72.430860][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.452356][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.459706][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.468410][ T4194] device bridge_slave_1 entered promiscuous mode [ 72.486861][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.494014][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.502144][ T4185] device bridge_slave_0 entered promiscuous mode [ 72.556254][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.563365][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.573064][ T4185] device bridge_slave_1 entered promiscuous mode [ 72.580443][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.587659][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.596608][ T4195] device bridge_slave_0 entered promiscuous mode [ 72.606020][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.625903][ T4186] team0: Port device team_slave_0 added [ 72.632035][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.639581][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.647925][ T4190] device bridge_slave_0 entered promiscuous mode [ 72.664314][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.673787][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.682322][ T4195] device bridge_slave_1 entered promiscuous mode [ 72.692108][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.702543][ T4186] team0: Port device team_slave_1 added [ 72.708775][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.716228][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.724133][ T4190] device bridge_slave_1 entered promiscuous mode [ 72.770506][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.789174][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.813907][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.821092][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.847626][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.861946][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.874124][ T4194] team0: Port device team_slave_0 added [ 72.882456][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.893980][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.904461][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.912297][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.938641][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.959528][ T4194] team0: Port device team_slave_1 added [ 72.972630][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.002989][ T4185] team0: Port device team_slave_0 added [ 73.019710][ T4195] team0: Port device team_slave_0 added [ 73.050876][ T4185] team0: Port device team_slave_1 added [ 73.080434][ T4195] team0: Port device team_slave_1 added [ 73.088558][ T4190] team0: Port device team_slave_0 added [ 73.101709][ T4190] team0: Port device team_slave_1 added [ 73.108703][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.116226][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.142643][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.158584][ T4186] device hsr_slave_0 entered promiscuous mode [ 73.166139][ T4186] device hsr_slave_1 entered promiscuous mode [ 73.205647][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.212692][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.239356][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.268505][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.276174][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.302387][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.315557][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.322654][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.348811][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.361264][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.368622][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.394830][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.415734][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.422834][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.449333][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.461300][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.469732][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.496279][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.508429][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.515849][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.542305][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.638396][ T4190] device hsr_slave_0 entered promiscuous mode [ 73.646701][ T4190] device hsr_slave_1 entered promiscuous mode [ 73.654824][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.663358][ T4190] Cannot create hsr debugfs directory [ 73.677317][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 73.693428][ T4194] device hsr_slave_0 entered promiscuous mode [ 73.701215][ T4194] device hsr_slave_1 entered promiscuous mode [ 73.708423][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.716381][ T4194] Cannot create hsr debugfs directory [ 73.745277][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 73.751570][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 73.755469][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 73.763812][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 73.780995][ T4195] device hsr_slave_0 entered promiscuous mode [ 73.788305][ T4195] device hsr_slave_1 entered promiscuous mode [ 73.795605][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.803200][ T4195] Cannot create hsr debugfs directory [ 73.812645][ T4185] device hsr_slave_0 entered promiscuous mode [ 73.820005][ T4185] device hsr_slave_1 entered promiscuous mode [ 73.828019][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.835827][ T4185] Cannot create hsr debugfs directory [ 74.127008][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.142009][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.163512][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.182913][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.228912][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.239830][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.268892][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.279333][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.356754][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.379448][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.390370][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.407834][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.464804][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.477256][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.493300][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.503644][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.527951][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.536873][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.548417][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.571066][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.582293][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.594803][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.605753][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.614950][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.622467][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.642062][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.666836][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.675577][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.684090][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.694939][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.704115][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.713196][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.720418][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.728602][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.738702][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.748678][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.759085][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.768366][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.807062][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.818141][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.827667][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.834790][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.842907][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.851934][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.861210][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.871130][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.880512][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.893831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.903460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.913503][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.920780][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.939141][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.960008][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.978016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.987663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.996545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.009159][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.023461][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.034061][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.051330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.107968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.119108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.129875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.140321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.149965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.158957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.195735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.207778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.217956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.230343][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.257810][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.310581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.320143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.339029][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.387291][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.395010][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.402668][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.417858][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.432005][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.440873][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.448233][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.458808][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.478574][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.493568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.511325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.522513][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.529736][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.571972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.603938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.618480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.628051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.637328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.646977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.656692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.682285][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.694138][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.711844][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.726607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.740865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.748528][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 75.761205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.770293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.786874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.801488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.810386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.827832][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 75.828773][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 75.841807][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.863253][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.876983][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 75.879096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.883359][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 75.927781][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.950680][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.987635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.002171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.020997][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.031665][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.047569][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.054721][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.069503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.078788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.087571][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.094847][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.102758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.114086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.153798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.163818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.175906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.184567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.194721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.203475][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.210681][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.219121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.229043][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.246159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.256498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.267521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.276797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.286882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.296195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.304881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.317200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.332678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.344027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.353890][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.361354][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.369756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.378996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.415376][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.429024][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.443471][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.454858][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.464967][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.473902][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.484001][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.492884][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.502228][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.510608][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.520076][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.559309][ T4186] device veth0_vlan entered promiscuous mode [ 76.570706][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.582900][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.594139][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.604072][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.613200][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.622719][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.633981][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.643157][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.652201][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.662178][ T4194] device veth0_vlan entered promiscuous mode [ 76.689713][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.697870][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.708821][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.721873][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.733745][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.753517][ T4194] device veth1_vlan entered promiscuous mode [ 76.772609][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.783927][ T4186] device veth1_vlan entered promiscuous mode [ 76.811596][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.820988][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.830172][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.840292][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.850111][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.905545][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.913745][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.926273][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.942752][ T4186] device veth0_macvtap entered promiscuous mode [ 76.960496][ T4195] device veth0_vlan entered promiscuous mode [ 76.970557][ T4194] device veth0_macvtap entered promiscuous mode [ 76.980953][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.990435][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.001595][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.016595][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.031460][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.048356][ T4186] device veth1_macvtap entered promiscuous mode [ 77.067997][ T4194] device veth1_macvtap entered promiscuous mode [ 77.091390][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.107601][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.118415][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.126931][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.134987][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.143493][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.151971][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.167609][ T4195] device veth1_vlan entered promiscuous mode [ 77.179089][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.219655][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.236397][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.247572][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.260742][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.275715][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.286048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.294363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.304630][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.313994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.322912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.336839][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.354816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.366259][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.375863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.383398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.396077][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.407184][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.420407][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.437996][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.448190][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.457975][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.467390][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.476672][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.491104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.500717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.513487][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.523749][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.533432][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.543427][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.574770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.584353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.593912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.605345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.615871][ T4195] device veth0_macvtap entered promiscuous mode [ 77.649597][ T4195] device veth1_macvtap entered promiscuous mode [ 77.671243][ T4185] device veth0_vlan entered promiscuous mode [ 77.716511][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.725844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.734165][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.742870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.752477][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.761465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.771733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.781086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.792017][ T4185] device veth1_vlan entered promiscuous mode [ 77.821449][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.833177][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 77.846785][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.856850][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.867461][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.880525][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.909259][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.920899][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 77.927922][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 77.934978][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.943534][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 77.947538][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.951035][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 77.967999][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.998506][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.009868][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.020133][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.030896][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.043070][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.069977][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.079740][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.089141][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.098792][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.111181][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.120996][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.134192][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.143280][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.153525][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.168084][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.177396][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.191454][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.199783][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.226773][ T4190] device veth0_vlan entered promiscuous mode [ 78.236995][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.252330][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.289290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.298134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.308544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.328694][ T4190] device veth1_vlan entered promiscuous mode [ 78.363548][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.372070][ T4185] device veth0_macvtap entered promiscuous mode [ 78.380039][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.422517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.422570][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.440973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.450648][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.454794][ T4185] device veth1_macvtap entered promiscuous mode [ 78.493300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.506200][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.514082][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.551732][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.567893][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.585718][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.602713][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.612980][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.624366][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.638137][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.663959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.672740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.682170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.691317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.702838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.716925][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.730220][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.740499][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.752449][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.762579][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.773719][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.785758][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.797048][ T4190] device veth0_macvtap entered promiscuous mode [ 78.820460][ T4190] device veth1_macvtap entered promiscuous mode [ 78.859533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.877056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.891242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.903219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.918800][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.923831][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.946451][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.948288][ T4272] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.971053][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.971091][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.989410][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.022116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.067376][ T4273] device syzkaller0 entered promiscuous mode [ 79.091252][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.119350][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.129701][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.140522][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.159205][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.177704][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.190149][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.201326][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.214272][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.244457][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.262090][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.394271][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.415081][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.435439][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.456934][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.495128][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.533451][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.554817][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.570679][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.583836][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.609220][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.628452][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.676468][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.725120][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.754478][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.780027][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.829603][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.872846][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.906373][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 79.948281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.987864][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 79.994241][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 80.010967][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 80.023662][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 80.052137][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.073848][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.152076][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.215966][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.256994][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.290726][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.359178][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.382983][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.403495][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.334111][ T4319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11'. [ 84.026794][ T4368] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 84.047552][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.055806][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.094667][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.102056][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.110189][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.117330][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.151024][ T4368] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.198589][ T4371] device syzkaller0 entered promiscuous mode [ 86.073875][ T4405] bridge0: port 3(netdevsim0) entered blocking state [ 86.143564][ T4405] bridge0: port 3(netdevsim0) entered disabled state [ 86.198960][ T4405] device netdevsim0 entered promiscuous mode [ 86.224920][ T4405] bridge0: port 3(netdevsim0) entered blocking state [ 86.232080][ T4405] bridge0: port 3(netdevsim0) entered forwarding state [ 86.262993][ T4414] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 86.354779][ T4414] bridge0: port 3(netdevsim0) entered disabled state [ 86.361863][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.369745][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.609903][ T4414] bridge0: port 3(netdevsim0) entered blocking state [ 86.616710][ T4414] bridge0: port 3(netdevsim0) entered forwarding state [ 86.623729][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.625165][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 86.631038][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.645144][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.647597][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.663049][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.665208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.868361][ T4414] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 87.113243][ T21] cfg80211: failed to load regulatory.db [ 87.172176][ T4427] netlink: 'syz.4.35': attribute type 10 has an invalid length. [ 87.246042][ T4427] bridge0: port 3(netdevsim0) entered disabled state [ 87.252935][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.260195][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.744567][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.815300][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.900310][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.950894][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.424818][ T4455] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 88.830522][ T4461] bridge0: port 3(netdevsim0) entered blocking state [ 88.837318][ T4461] bridge0: port 3(netdevsim0) entered disabled state [ 88.845283][ T4461] device netdevsim0 entered promiscuous mode [ 88.851809][ T4461] bridge0: port 3(netdevsim0) entered blocking state [ 88.855237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 88.858837][ T4461] bridge0: port 3(netdevsim0) entered forwarding state [ 88.867545][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 88.924345][ T4461] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 88.941830][ T4461] bridge0: port 3(netdevsim0) entered disabled state [ 88.948904][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.955249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 88.957510][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.977464][ T4461] bridge0: port 3(netdevsim0) entered blocking state [ 88.984264][ T4461] bridge0: port 3(netdevsim0) entered forwarding state [ 88.985157][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 88.991852][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.005128][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 89.007623][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.024092][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.031436][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.042800][ T4461] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 89.045139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 89.332258][ T4478] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 89.340904][ T4478] bridge0: port 3(netdevsim0) entered disabled state [ 89.347797][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.354983][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.789534][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 89.988050][ T4487] FAULT_INJECTION: forcing a failure. [ 89.988050][ T4487] name failslab, interval 1, probability 0, space 0, times 1 [ 89.988114][ T4487] CPU: 0 PID: 4487 Comm: syz.0.51 Not tainted syzkaller #0 [ 89.988136][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.988158][ T4487] Call Trace: [ 89.988165][ T4487] [ 89.988175][ T4487] dump_stack_lvl+0x188/0x250 [ 89.988214][ T4487] ? show_regs_print_info+0x20/0x20 [ 89.988237][ T4487] ? load_image+0x410/0x410 [ 89.988263][ T4487] ? __might_sleep+0xf0/0xf0 [ 89.988286][ T4487] ? __lock_acquire+0x7b50/0x7b50 [ 89.988319][ T4487] should_fail+0x383/0x4b0 [ 89.988348][ T4487] should_failslab+0x5/0x20 [ 89.988369][ T4487] slab_pre_alloc_hook+0x51/0xc0 [ 89.988395][ T4487] kmem_cache_alloc_trace+0x47/0x290 [ 89.988415][ T4487] ? device_create+0x13a/0x300 [ 89.988443][ T4487] device_create+0x13a/0x300 [ 89.988470][ T4487] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.988495][ T4487] ? _raw_spin_unlock+0x40/0x40 [ 89.988518][ T4487] ? root_device_unregister+0xf0/0xf0 [ 89.988539][ T4487] ? update_attr+0x550/0x730 [ 89.988568][ T4487] ? memcpy+0x3c/0x60 [ 89.988590][ T4487] ? is_console_locked+0x5/0x10 [ 89.988609][ T4487] ? csi_J+0x8d6/0xdb0 [ 89.988634][ T4487] vcs_make_sysfs+0x2e/0x80 [ 89.988654][ T4487] vc_allocate+0x5e4/0x700 [ 89.988701][ T4487] ? vc_cons_allocated+0x70/0x70 [ 89.988739][ T4487] con_install+0x9c/0x720 [ 89.988794][ T4487] ? show_tty_active+0x30/0x30 [ 89.988829][ T4487] tty_init_dev+0xbb/0x470 [ 89.988883][ T4487] tty_open+0x7e8/0xcd0 [ 89.988931][ T4487] ? __lock_acquire+0x7b50/0x7b50 [ 89.988969][ T4487] ? tty_compat_ioctl+0x570/0x570 [ 89.988998][ T4487] ? do_raw_spin_unlock+0x11d/0x230 [ 89.989026][ T4487] chrdev_open+0x585/0x5f0 [ 89.989054][ T4487] ? cd_forget+0x160/0x160 [ 89.989082][ T4487] ? fsnotify_perm+0x3a7/0x560 [ 89.989106][ T4487] ? cd_forget+0x160/0x160 [ 89.989128][ T4487] do_dentry_open+0x7f7/0xf90 [ 89.989149][ T4487] ? vfs_open+0x2b/0x80 [ 89.989173][ T4487] path_openat+0x2718/0x2fb0 [ 89.989216][ T4487] ? __kasan_slab_alloc+0xa9/0xc0 [ 89.989245][ T4487] ? do_filp_open+0x400/0x400 [ 89.989293][ T4487] do_filp_open+0x1df/0x400 [ 89.989320][ T4487] ? vfs_tmpfile+0x300/0x300 [ 89.989361][ T4487] ? _raw_spin_unlock+0x24/0x40 [ 89.989380][ T4487] ? alloc_fd+0x59e/0x650 [ 89.989406][ T4487] do_sys_openat2+0x14b/0x500 [ 89.989431][ T4487] ? __lock_acquire+0x7b50/0x7b50 [ 89.989455][ T4487] ? do_sys_open+0xe0/0xe0 [ 89.989473][ T4487] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.989500][ T4487] ? lock_chain_count+0x20/0x20 [ 89.989527][ T4487] __x64_sys_openat+0x135/0x160 [ 89.989551][ T4487] do_syscall_64+0x4c/0xa0 [ 89.989570][ T4487] ? clear_bhb_loop+0x30/0x80 [ 89.989590][ T4487] ? clear_bhb_loop+0x30/0x80 [ 89.989611][ T4487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.989643][ T4487] RIP: 0033:0x7ff296e1898e [ 89.989663][ T4487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.989681][ T4487] RSP: 002b:00007ff2950afb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.989704][ T4487] RAX: ffffffffffffffda RBX: 00007ff2950b06c0 RCX: 00007ff296e1898e [ 89.989728][ T4487] RDX: 0000000000000002 RSI: 00007ff2950afc00 RDI: ffffffffffffff9c [ 89.989743][ T4487] RBP: 00007ff296eef06b R08: 0000000000000000 R09: 0000000000000000 [ 89.989756][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.989768][ T4487] R13: 00007ff2970e0038 R14: 00007ff2970dffa0 R15: 00007ffe594c8468 [ 89.989798][ T4487] [ 90.726974][ T4498] device syzkaller0 entered promiscuous mode [ 90.875953][ T4507] CIFS: Attempting to mount \\127.0.0.1\share [ 90.879228][ T4507] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.924332][ T4508] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 90.934213][ T4509] netlink: 52 bytes leftover after parsing attributes in process `syz.4.56'. [ 91.253581][ T4507] CIFS: VFS: cifs_mount failed w/return code = -112 [ 91.472004][ T4519] binder: BINDER_SET_CONTEXT_MGR already set [ 91.472132][ T4519] binder: 4511:4519 ioctl 4018620d 200000000040 returned -16 [ 91.477123][ T4519] binder: 4511:4519 ioctl c0306201 0 returned -14 [ 91.480158][ T4519] binder: 4511:4519 ioctl c0306201 0 returned -14 [ 91.482342][ T4519] binder: 4511:4519 ioctl c0306201 0 returned -14 [ 92.195084][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 92.313702][ T4518] bridge0: port 3(netdevsim0) entered blocking state [ 92.313759][ T4518] bridge0: port 3(netdevsim0) entered disabled state [ 92.314891][ T4518] device netdevsim0 entered promiscuous mode [ 92.315278][ T4518] bridge0: port 3(netdevsim0) entered blocking state [ 92.315305][ T4518] bridge0: port 3(netdevsim0) entered forwarding state [ 92.325683][ T4518] netlink: 'syz.3.58': attribute type 10 has an invalid length. [ 92.327102][ T4518] bridge0: port 3(netdevsim0) entered disabled state [ 92.327214][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.327453][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.332034][ T4518] bridge0: port 3(netdevsim0) entered blocking state [ 92.332069][ T4518] bridge0: port 3(netdevsim0) entered forwarding state [ 92.332197][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.332234][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.332341][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.332388][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.334046][ T4518] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.494887][ T4526] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 92.837971][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.936370][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.185363][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 93.305491][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.315829][ T1111] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 93.335158][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.343384][ T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.365824][ T21] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 93.378465][ T1111] usb 5-1: config 0 descriptor?? [ 93.385735][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.406317][ T4543] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 93.414697][ T4543] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 93.467643][ T21] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 93.491752][ T21] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 94.136183][ T4525] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 94.155243][ T4525] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 94.187834][ T4525] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 94.335344][ T4525] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 94.384554][ T21] usb 4-1: USB disconnect, device number 2 [ 94.587840][ T21] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 94.612671][ T21] spcp8x5 4-1:1.0: device disconnected [ 94.693791][ T4569] 9pnet_virtio: no channels available for device syz [ 95.005146][ T4268] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.255270][ T4268] usb 3-1: Using ep0 maxpacket: 8 [ 95.596129][ T4526] sched: RT throttling activated [ 96.186043][ T4268] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 96.685995][ T4268] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.738392][ T4268] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.748502][ T4268] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.758715][ T4268] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.815739][ T4268] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.824857][ T4268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.755676][ T1111] usb 5-1: string descriptor 0 read error: -71 [ 97.783040][ T1111] uvcvideo 5-1:0.0: Found multiple Units with ID 1 [ 97.820628][ T1111] usb 5-1: Found UVC 0.00 device (2833:0201) [ 97.873821][ T1111] usb 5-1: No valid video chain found. [ 97.885987][ T4268] usb 3-1: usb_control_msg returned -71 [ 97.895742][ T4268] usbtmc 3-1:16.0: can't read capabilities [ 97.995174][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.051194][ T1111] usb 5-1: USB disconnect, device number 2 [ 98.064090][ T4268] usb 3-1: USB disconnect, device number 2 [ 98.190234][ T4598] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 98.245903][ T4598] bridge0: port 3(netdevsim0) entered disabled state [ 98.253298][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.260492][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.294864][ T4596] bridge0: port 3(netdevsim0) entered blocking state [ 98.302650][ T4596] bridge0: port 3(netdevsim0) entered disabled state [ 98.310460][ T4596] device netdevsim0 entered promiscuous mode [ 98.317081][ T4596] bridge0: port 3(netdevsim0) entered blocking state [ 98.323803][ T4596] bridge0: port 3(netdevsim0) entered forwarding state [ 98.342029][ T4604] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 98.360925][ T4604] bridge0: port 3(netdevsim0) entered disabled state [ 98.367879][ T4604] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.375360][ T4604] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.448736][ T4604] bridge0: port 3(netdevsim0) entered blocking state [ 98.455724][ T4604] bridge0: port 3(netdevsim0) entered forwarding state [ 98.461961][ T1108] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.463238][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.478779][ T4604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.486366][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.493517][ T4604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.511780][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.544423][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.557991][ T4604] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.580988][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.741542][ T1108] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.760148][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.786652][ T1108] usb 1-1: Product: syz [ 98.794375][ T1108] usb 1-1: Manufacturer: syz [ 98.890476][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 98.899455][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 98.933956][ T1108] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 98.945510][ T1108] cdc_wdm 1-1:1.0: Unknown control protocol [ 99.414066][ T4630] Zero length message leads to an empty skb [ 100.291106][ T2302] usb 1-1: USB disconnect, device number 2 [ 100.844203][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 102.739864][ T4687] loop2: detected capacity change from 0 to 512 [ 102.792242][ T4687] EXT4-fs (loop2): Unrecognized mount option "smackfsdef=+" or missing value [ 103.231427][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 104.640836][ T4721] loop2: detected capacity change from 0 to 512 [ 104.724567][ T4721] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.909646][ T4721] Invalid ELF header len 10 [ 105.063369][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 105.562883][ T4729] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 106.754313][ T4748] loop0: detected capacity change from 0 to 512 [ 106.952170][ T4748] EXT4-fs (loop0): Unrecognized mount option "smackfsdef=+" or missing value [ 108.503860][ T4769] debugfs: File 'dropped' in directory 'loop6' already present! [ 108.512191][ T4769] debugfs: File 'msg' in directory 'loop6' already present! [ 108.520240][ T4769] debugfs: File 'trace0' in directory 'loop6' already present! [ 108.550593][ T4771] loop0: detected capacity change from 0 to 4096 [ 108.663774][ T4779] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 108.806305][ T4786] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 108.829872][ T4779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.054853][ T4791] loop2: detected capacity change from 0 to 256 [ 109.200361][ T26] audit: type=1800 audit(1790191007.608:2): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.134" name="bus" dev="loop2" ino=1048592 res=0 errno=0 [ 110.210837][ T4799] loop3: detected capacity change from 0 to 512 [ 110.295179][ T4799] EXT4-fs (loop3): Unrecognized mount option "smackfsdef=+" or missing value [ 110.527038][ T4784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.955268][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 110.995166][ T4806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.046108][ T4806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.080181][ T4806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.105358][ T4806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.765146][ T4820] loop2: detected capacity change from 0 to 512 [ 111.905875][ T4820] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.393078][ T4820] Invalid ELF header len 10 [ 112.715648][ T4826] se_dev->se_dev_ptr already set for storage object [ 113.160344][ T4841] device syzkaller0 entered promiscuous mode [ 113.421524][ T4845] device syzkaller0 entered promiscuous mode [ 114.037720][ T4854] device syzkaller0 entered promiscuous mode [ 115.827366][ T4886] se_dev->se_dev_ptr already set for storage object [ 116.665262][ T4888] debugfs: File 'dropped' in directory 'loop8' already present! [ 116.673179][ T4888] debugfs: File 'msg' in directory 'loop8' already present! [ 116.681090][ T4888] debugfs: File 'trace0' in directory 'loop8' already present! [ 117.560044][ T4901] se_dev->se_dev_ptr already set for storage object [ 117.760219][ T4905] bridge0: port 3(netdevsim0) entered blocking state [ 117.767068][ T4905] bridge0: port 3(netdevsim0) entered forwarding state [ 117.774254][ T4905] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.781464][ T4905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.789152][ T4905] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.796336][ T4905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.143048][ T4911] debugfs: File 'dropped' in directory 'loop0' already present! [ 118.151395][ T4911] debugfs: File 'msg' in directory 'loop0' already present! [ 118.161270][ T4911] debugfs: File 'trace0' in directory 'loop0' already present! [ 118.528171][ T4915] loop0: detected capacity change from 0 to 4096 [ 118.763421][ T4917] device syzkaller0 entered promiscuous mode [ 119.001470][ T4919] device syzkaller0 entered promiscuous mode [ 119.072973][ T4925] loop0: detected capacity change from 0 to 512 [ 119.118583][ T4925] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.237986][ T4925] Invalid ELF header len 10 [ 119.791272][ T4945] binder: 4941:4945 ioctl c0306201 0 returned -14 [ 120.638631][ T4950] debugfs: File 'trace0' in directory 'loop0' already present! [ 121.231320][ T4955] se_dev->se_dev_ptr already set for storage object [ 121.628693][ T4962] device syzkaller0 entered promiscuous mode [ 121.642870][ T4966] loop0: detected capacity change from 0 to 4096 [ 122.706781][ T4977] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 122.781833][ T4970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.979461][ T4983] device syzkaller0 entered promiscuous mode [ 123.102363][ T4985] Illegal XDP return value 5, expect packet loss! [ 123.304908][ T4993] binder: 4990:4993 ioctl c0306201 0 returned -14 [ 123.569282][ T4970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.024397][ T4999] se_dev->se_dev_ptr already set for storage object [ 124.865393][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 125.380041][ T5021] device syzkaller0 entered promiscuous mode [ 125.422458][ T5021] tipc: Started in network mode [ 125.444333][ T5021] tipc: Node identity c6ca216d8a93, cluster identity 4711 [ 125.468053][ T5021] tipc: Enabled bearer , priority 0 [ 125.523569][ T5021] tipc: Resetting bearer [ 125.605139][ T5020] tipc: Resetting bearer [ 125.650763][ T5020] tipc: Disabling bearer [ 125.907645][ T5032] debugfs: File 'dropped' in directory 'loop2' already present! [ 125.916019][ T5032] debugfs: File 'msg' in directory 'loop2' already present! [ 125.925598][ T5032] debugfs: File 'trace0' in directory 'loop2' already present! [ 126.599048][ T5037] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 126.808982][ T5034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.925340][ T5042] binder: 5038:5042 ioctl c0306201 0 returned -14 [ 127.521688][ T5046] device syzkaller0 entered promiscuous mode [ 127.858998][ T5037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.172203][ T5057] device syzkaller0 entered promiscuous mode [ 128.342384][ T5060] device syzkaller0 entered promiscuous mode [ 130.009602][ T5094] loop2: detected capacity change from 0 to 128 [ 130.114019][ T5096] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 130.183918][ T5094] FAT-fs (loop2): Directory bread(block 32) failed [ 130.237019][ T5096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.252166][ T5094] FAT-fs (loop2): Directory bread(block 33) failed [ 130.261449][ T5094] FAT-fs (loop2): Directory bread(block 34) failed [ 130.268309][ T5094] FAT-fs (loop2): Directory bread(block 35) failed [ 130.275480][ T5094] FAT-fs (loop2): Directory bread(block 36) failed [ 130.282076][ T5094] FAT-fs (loop2): Directory bread(block 37) failed [ 130.292538][ T5094] FAT-fs (loop2): Directory bread(block 38) failed [ 130.299940][ T5094] FAT-fs (loop2): Directory bread(block 39) failed [ 130.307381][ T5094] FAT-fs (loop2): Directory bread(block 40) failed [ 130.314775][ T5094] FAT-fs (loop2): Directory bread(block 41) failed [ 130.440075][ T5105] netlink: 'syz.4.218': attribute type 12 has an invalid length. [ 130.456126][ T5105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 130.635875][ T5094] attempt to access beyond end of device [ 130.635875][ T5094] loop2: rw=0, want=4112, limit=128 [ 130.665833][ T5094] FAT-fs (loop2): Filesystem has been set read-only [ 130.680450][ T5094] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 130.706301][ T5110] loop4: detected capacity change from 0 to 256 [ 130.807622][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 130.823449][ T26] audit: type=1800 audit(1790191029.178:3): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.220" name="bus" dev="loop4" ino=1048597 res=0 errno=0 [ 130.897092][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 130.912048][ T5094] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.921277][ T5094] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.930628][ T5094] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.939721][ T5094] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.012624][ T5116] debugfs: File 'trace0' in directory 'loop0' already present! [ 131.563711][ T5096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.657289][ T5120] netlink: 'syz.2.222': attribute type 12 has an invalid length. [ 131.682965][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 132.027887][ T5128] debugfs: File 'trace0' in directory 'loop2' already present! [ 132.448660][ T5130] loop4: detected capacity change from 0 to 512 [ 132.541552][ T2302] Bluetooth: hci1: command 0x0406 tx timeout [ 132.557213][ T5130] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.167156][ T5148] device syzkaller0 entered promiscuous mode [ 133.190354][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.197175][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.529477][ T5161] debugfs: File 'dropped' in directory 'loop4' already present! [ 133.537737][ T5161] debugfs: File 'msg' in directory 'loop4' already present! [ 133.548155][ T5161] debugfs: File 'trace0' in directory 'loop4' already present! [ 133.790918][ T5163] loop4: detected capacity change from 0 to 256 [ 133.985523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.999767][ T5166] [ 134.002398][ T5166] ====================================================== [ 134.009764][ T5166] WARNING: possible circular locking dependency detected [ 134.016830][ T5166] syzkaller #0 Not tainted [ 134.021299][ T5166] ------------------------------------------------------ [ 134.028343][ T5166] syz.1.235/5166 is trying to acquire lock: [ 134.034266][ T5166] ffff8880783a8478 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 [ 134.043423][ T5166] [ 134.043423][ T5166] but task is already holding lock: [ 134.050832][ T5166] ffffffff8d5b37c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 134.059861][ T5166] [ 134.059861][ T5166] which lock already depends on the new lock. [ 134.059861][ T5166] [ 134.070411][ T5166] [ 134.070411][ T5166] the existing dependency chain (in reverse order) is: [ 134.079555][ T5166] [ 134.079555][ T5166] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 134.087195][ T5166] __mutex_lock_common+0x1e5/0x2400 [ 134.092968][ T5166] mutex_lock_nested+0x17/0x20 [ 134.098436][ T5166] rfcomm_security_cfm+0x95/0x780 [ 134.104050][ T5166] hci_encrypt_cfm+0x363/0x4d0 [ 134.109390][ T5166] hci_encrypt_change_evt+0x62d/0xdd0 [ 134.115348][ T5166] hci_event_packet+0x67e/0x1310 [ 134.120858][ T5166] hci_rx_work+0x255/0xa10 [ 134.125835][ T5166] process_one_work+0x867/0xff0 [ 134.131254][ T5166] worker_thread+0xad7/0x12a0 [ 134.136683][ T5166] kthread+0x42e/0x520 [ 134.141741][ T5166] ret_from_fork+0x1f/0x30 [ 134.147425][ T5166] [ 134.147425][ T5166] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 134.155210][ T5166] __mutex_lock_common+0x1e5/0x2400 [ 134.160963][ T5166] mutex_lock_nested+0x17/0x20 [ 134.166280][ T5166] hci_remote_features_evt+0x5d9/0xa10 [ 134.172286][ T5166] hci_event_packet+0x600/0x1310 [ 134.177820][ T5166] hci_rx_work+0x255/0xa10 [ 134.182801][ T5166] process_one_work+0x867/0xff0 [ 134.188219][ T5166] worker_thread+0xad7/0x12a0 [ 134.193456][ T5166] kthread+0x42e/0x520 [ 134.198085][ T5166] ret_from_fork+0x1f/0x30 [ 134.203137][ T5166] [ 134.203137][ T5166] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 134.210960][ T5166] __lock_acquire+0x2c66/0x7b50 [ 134.212357][ T26] audit: type=1800 audit(1790191032.338:4): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.234" name="bus" dev="loop4" ino=1048600 res=0 errno=0 [ 134.216383][ T5166] lock_acquire+0x19e/0x400 [ 134.216414][ T5166] __mutex_lock_common+0x1e5/0x2400 [ 134.216433][ T5166] mutex_lock_nested+0x17/0x20 [ 134.216449][ T5166] l2cap_chan_connect+0xfb/0xe20 [ 134.216470][ T5166] l2cap_sock_connect+0x5a3/0x770 [ 134.216486][ T5166] kernel_connect+0x11c/0x180 [ 134.216506][ T5166] rfcomm_dlc_open+0x600/0x10c0 [ 134.216525][ T5166] rfcomm_sock_connect+0x2e9/0x600 [ 134.216543][ T5166] __sys_connect+0x3cb/0x450 [ 134.216559][ T5166] __x64_sys_connect+0x76/0x80 [ 134.216578][ T5166] do_syscall_64+0x4c/0xa0 [ 134.296487][ T5166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.302930][ T5166] [ 134.302930][ T5166] other info that might help us debug this: [ 134.302930][ T5166] [ 134.313289][ T5166] Chain exists of: [ 134.313289][ T5166] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 134.313289][ T5166] [ 134.326022][ T5166] Possible unsafe locking scenario: [ 134.326022][ T5166] [ 134.333510][ T5166] CPU0 CPU1 [ 134.338977][ T5166] ---- ---- [ 134.344366][ T5166] lock(rfcomm_mutex); [ 134.348564][ T5166] lock(hci_cb_list_lock); [ 134.355810][ T5166] lock(rfcomm_mutex); [ 134.363138][ T5166] lock(&hdev->lock); [ 134.367247][ T5166] [ 134.367247][ T5166] *** DEADLOCK *** [ 134.367247][ T5166] [ 134.375431][ T5166] 1 lock held by syz.1.235/5166: [ 134.380383][ T5166] #0: ffffffff8d5b37c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 134.390032][ T5166] [ 134.390032][ T5166] stack backtrace: [ 134.395946][ T5166] CPU: 0 PID: 5166 Comm: syz.1.235 Not tainted syzkaller #0 [ 134.403257][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.413524][ T5166] Call Trace: [ 134.416843][ T5166] [ 134.419808][ T5166] dump_stack_lvl+0x188/0x250 [ 134.424507][ T5166] ? load_image+0x410/0x410 [ 134.429029][ T5166] ? show_regs_print_info+0x20/0x20 [ 134.434249][ T5166] ? print_circular_bug+0x12b/0x1a0 [ 134.439481][ T5166] check_noncircular+0x296/0x330 [ 134.444465][ T5166] ? add_chain_block+0x9b0/0x9b0 [ 134.449436][ T5166] ? lockdep_lock+0xf1/0x1f0 [ 134.454069][ T5166] ? check_noncircular+0x189/0x330 [ 134.459233][ T5166] ? mark_lock+0x94/0x320 [ 134.463595][ T5166] ? _find_first_zero_bit+0xd1/0xf0 [ 134.468837][ T5166] __lock_acquire+0x2c66/0x7b50 [ 134.474319][ T5166] ? verify_lock_unused+0x140/0x140 [ 134.479577][ T5166] ? verify_lock_unused+0x140/0x140 [ 134.484803][ T5166] lock_acquire+0x19e/0x400 [ 134.489323][ T5166] ? l2cap_chan_connect+0xfb/0xe20 [ 134.494539][ T5166] ? __lock_acquire+0x13dc/0x7b50 [ 134.499682][ T5166] ? __might_sleep+0xf0/0xf0 [ 134.504294][ T5166] ? read_lock_is_recursive+0x10/0x10 [ 134.509697][ T5166] __mutex_lock_common+0x1e5/0x2400 [ 134.514934][ T5166] ? l2cap_chan_connect+0xfb/0xe20 [ 134.520137][ T5166] ? reacquire_held_locks+0x319/0x5c0 [ 134.525546][ T5166] ? l2cap_chan_connect+0xfb/0xe20 [ 134.530801][ T5166] ? do_raw_read_unlock+0x39/0x70 [ 134.535860][ T5166] ? _raw_read_unlock+0x24/0x40 [ 134.540925][ T5166] ? mutex_lock_io_nested+0x60/0x60 [ 134.546183][ T5166] ? mark_lock+0x94/0x320 [ 134.550656][ T5166] mutex_lock_nested+0x17/0x20 [ 134.555506][ T5166] l2cap_chan_connect+0xfb/0xe20 [ 134.560589][ T5166] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 134.566620][ T5166] ? l2cap_chan_busy+0x90/0x90 [ 134.571661][ T5166] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.577314][ T5166] ? _local_bh_enable+0xa0/0xa0 [ 134.582458][ T5166] l2cap_sock_connect+0x5a3/0x770 [ 134.587754][ T5166] ? do_syscall_64+0x4c/0xa0 [ 134.592388][ T5166] ? l2cap_sock_bind+0x870/0x870 [ 134.597476][ T5166] ? kernel_connect+0xd2/0x180 [ 134.602280][ T5166] kernel_connect+0x11c/0x180 [ 134.607100][ T5166] ? kernel_accept+0x420/0x420 [ 134.612218][ T5166] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 134.617970][ T5166] rfcomm_dlc_open+0x600/0x10c0 [ 134.622846][ T5166] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 134.629135][ T5166] ? rfcomm_dlc_free+0x40/0x40 [ 134.633916][ T5166] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.639587][ T5166] ? lockdep_hardirqs_on+0x94/0x140 [ 134.645420][ T5166] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.650835][ T5166] ? _local_bh_enable+0xa0/0xa0 [ 134.655714][ T5166] ? do_raw_spin_unlock+0x11d/0x230 [ 134.661081][ T5166] rfcomm_sock_connect+0x2e9/0x600 [ 134.666230][ T5166] ? rfcomm_sock_bind+0x550/0x550 [ 134.671416][ T5166] __sys_connect+0x3cb/0x450 [ 134.676048][ T5166] ? __sys_connect_file+0x170/0x170 [ 134.681291][ T5166] __x64_sys_connect+0x76/0x80 [ 134.686076][ T5166] do_syscall_64+0x4c/0xa0 [ 134.690541][ T5166] ? clear_bhb_loop+0x30/0x80 [ 134.695411][ T5166] ? clear_bhb_loop+0x30/0x80 [ 134.700114][ T5166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.706278][ T5166] RIP: 0033:0x7f9cfd149159 [ 134.710828][ T5166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.731168][ T5166] RSP: 002b:00007f9cfb3a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 134.740221][ T5166] RAX: ffffffffffffffda RBX: 00007f9cfd3d0fa0 RCX: 00007f9cfd149159 [ 134.748228][ T5166] RDX: 000000000000002c RSI: 0000200000005dc0 RDI: 0000000000000006 [ 134.756319][ T5166] RBP: 00007f9cfd1e006b R08: 0000000000000000 R09: 0000000000000000 [ 134.764323][ T5166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.772444][ T5166] R13: 00007f9cfd3d1038 R14: 00007f9cfd3d0fa0 R15: 00007ffda9db3f08 [ 134.780458][ T5166]