last executing test programs: 23.571440186s ago: executing program 3 (id=220): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000001c0), 0x0}, 0x20) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe2$9p(0x0, 0x84800) 19.606964096s ago: executing program 3 (id=225): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64d0, &(0x7f0000000280)={0x3, 0x0, 0x6, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setownex(r1, 0xf, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/12, 0xc}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) 18.027834842s ago: executing program 3 (id=226): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x1b, {0x1b, 0x14, "0ec1da1d97fb28b6684368ae5f69f591e84d4896350e223311"}}, 0x0}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x5, 0xa3, "79731a50412baed39497cd5c21cce7de70e493f33e5c53e66e68bd14102a852b1219feb5bd0c7118f70cbf36794821a2904ab2dea1fb3af5159e272891376c4fb40f063391f1de7e77a71651d861b046aa813d7392148b7ee1991427f81d84abd54bcde2d3a1cb554908d524fdac7518aee966658fb52aa828962ff6431302d319ac6c550a062c44ba22653e2ce5ab9afd209f9d44122763a4e99fdf398cb6b0d20a03"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x20, 0x82, 0x1, '\b'}, &(0x7f0000000380)={0x20, 0x83, 0x1, "f9"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "28de"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "05f9a1"}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010038"], 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_open_procfs(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone3(0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, 0x0) 16.107380125s ago: executing program 1 (id=231): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000040)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r5, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14.886744743s ago: executing program 1 (id=233): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa", 0xb, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x640b1}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) 13.769377248s ago: executing program 1 (id=236): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64d0, &(0x7f0000000280)={0x3, 0x0, 0x6, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, 0x0, 0x0) fcntl$setownex(r1, 0xf, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/12, 0xc}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) 11.604612097s ago: executing program 1 (id=238): writev(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x2200060, 0x0, 0x11, 0x0, &(0x7f0000000200)) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000240)=ANY=[@ANYBLOB="0226d839", @ANYRESDEC=0x0, @ANYBLOB=',adinicb,mode=00000000000000000000010,longad,utf8,unhide,undelete,iocharset=utf8,uid=forget,rootdir=00000000000000000006,gid=forget,nostrict,session=00000000000000000000,gid=forget,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@loopback, 0xfe, 0x32}, @in6=@empty, {0x6, 0x6, 0xfffffffffffffefd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x9, 0x7fffffffffffffff, 0x3}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @mark={0xc, 0x15, {0x35075d, 0xfffffff8}}]}, 0x148}}, 0x4000004) 11.293272984s ago: executing program 0 (id=240): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 9.623150862s ago: executing program 4 (id=244): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000400)={[{@uni_xlate}, {@shortname_winnt}, {@shortname_lower}, {}, {@shortname_mixed}, {@numtail}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@rodir}]}, 0x2, 0x2ae, &(0x7f0000001980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r1 = socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="acf5646d636f6d706f73652c6e6f62617272696572266e6c733d637031323531"], 0x1, 0x5c8, &(0x7f00000006c0)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/46, 0x2e) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x9b) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)}) close(r2) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@private, @multicast1}, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x1400c0c0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.401307967s ago: executing program 2 (id=245): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$hidraw(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 8.473782008s ago: executing program 4 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 8.312536022s ago: executing program 2 (id=247): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{0x0}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}], 0x2, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0}]) write(r3, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x51) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) 6.534060523s ago: executing program 1 (id=248): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64d0, &(0x7f0000000280)={0x3, 0x0, 0x6, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, 0x0, 0x0) fcntl$setownex(r1, 0xf, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/12, 0xc}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) 5.571367824s ago: executing program 4 (id=249): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 5.115960535s ago: executing program 0 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45522, 0x2410}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x30}}, 0x0) 4.912584539s ago: executing program 2 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 4.792527962s ago: executing program 4 (id=252): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.712837304s ago: executing program 2 (id=253): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0}, 0x20) syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000400)=ANY=[], 0x1, 0x15a, &(0x7f00000001c0)="$eJzs0M+LEnEYx/H3d+Y7WqRYZCBBKXSxJPAHdYtwIsmghKJLJ0GnEhQjobylRLcOQlcPy+51Wdi/QFcPi+Bedv+JvXhb2OMu3xndXXbZ/+B5XcTPPM/nGeb1i7204tyrduv7D6/T8eqpD5V3pY+Ho1HR5CHobl98Hg7mx0X4hmasYdGHOjCNOnxpND2r1m6a/4simHH3FiZ3gNjqnhvX9DXkCPbTj2Byz5+zuJp5BRx/774GNxZkWeCkcTPouxNkpu8IsEGp0PLYA5u/5UzyroLuMLO16byfz8pPn7z0/uVLg8eRhJ35Deu46sbu9OuBvdwyFea3kM8/L2RzFs/2/cLeAP0m8hM+K9Cmz2I+K78FEg/1J/ij4L9/a7GjosBk7bjSCp99694vOwUqOaxVE85GNX7bwk5rrqNXbyOEEEIIIYQQQgghhBBCCCGEEEJcdhoAAP//BA5Lvw==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) 4.551027017s ago: executing program 0 (id=254): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000040)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r5, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.515134698s ago: executing program 3 (id=255): syz_usb_connect(0x0, 0x6b, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 4.336551182s ago: executing program 2 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4004804) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x9) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, 0x0) 3.926855322s ago: executing program 0 (id=257): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$hidraw(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 2.293714138s ago: executing program 1 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x10000}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='GPL\x00', 0xb, 0x100c, &(0x7f0000001880)=""/4108, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 2.260319419s ago: executing program 4 (id=259): writev(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x2200060, 0x0, 0x11, 0x0, &(0x7f0000000200)) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000240)=ANY=[@ANYBLOB="0226d839", @ANYRESDEC=0x0, @ANYBLOB=',adinicb,mode=00000000000000000000010,longad,utf8,unhide,undelete,iocharset=utf8,uid=forget,rootdir=00000000000000000006,gid=forget,nostrict,session=00000000000000000000,gid=forget,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@loopback, 0xfe, 0x32}, @in6=@empty, {0x6, 0x6, 0xfffffffffffffefd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x9, 0x7fffffffffffffff, 0x3}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @mark={0xc, 0x15, {0x35075d, 0xfffffff8}}]}, 0x148}}, 0x4000004) 2.120655502s ago: executing program 3 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 2.083647873s ago: executing program 0 (id=261): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{0x0}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}], 0x2, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0}]) write(r3, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x51) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) 846.233931ms ago: executing program 4 (id=262): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) pselect6(0x40, &(0x7f0000000e00)={0x10, 0x8, 0x5, 0x6dbf7781, 0x6, 0x9, 0x7, 0x6}, 0x0, 0x0, &(0x7f0000000ec0), 0x0) 316.382084ms ago: executing program 0 (id=263): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 180.592956ms ago: executing program 3 (id=264): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x40, &(0x7f0000000000)={@link_local={0x3}, @random="0633d825765e", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, 'K$'}}}}}, 0x0) close_range(r1, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) connect$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 0s ago: executing program 2 (id=265): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x1b, {0x1b, 0x14, "0ec1da1d97fb28b6684368ae5f69f591e84d4896350e223311"}}, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010038"], 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_open_procfs(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone3(0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 56.914971][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.950469][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. syzkaller login: [ 79.092280][ T4258] cgroup: Unknown subsys name 'net' [ 79.194160][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.752198][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 82.714284][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.722428][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.723611][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.731627][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.743915][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.745136][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.756297][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.759811][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.766825][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.775210][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.786509][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.794085][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.798149][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.804553][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.817703][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.818663][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.826024][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.835385][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.846781][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.854133][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.887127][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.896009][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.942804][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.951966][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.959774][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.967256][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.984167][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.991940][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.999442][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.007492][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.511894][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 83.552574][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 83.580631][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 83.591763][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 83.626310][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 83.800516][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.808604][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.816815][ T4286] device bridge_slave_0 entered promiscuous mode [ 83.835783][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.843086][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.855289][ T4274] device bridge_slave_0 entered promiscuous mode [ 83.874210][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.881901][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.890690][ T4271] device bridge_slave_0 entered promiscuous mode [ 83.907985][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.915267][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.923932][ T4286] device bridge_slave_1 entered promiscuous mode [ 83.932174][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.939605][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.948673][ T4274] device bridge_slave_1 entered promiscuous mode [ 83.963498][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.970836][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.980164][ T4271] device bridge_slave_1 entered promiscuous mode [ 83.988712][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.995859][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.005285][ T4272] device bridge_slave_0 entered promiscuous mode [ 84.020960][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.028197][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.036659][ T4272] device bridge_slave_1 entered promiscuous mode [ 84.073186][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.116138][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.123816][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.132360][ T4279] device bridge_slave_0 entered promiscuous mode [ 84.142746][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.161297][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.172586][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.182815][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.190892][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.199546][ T4279] device bridge_slave_1 entered promiscuous mode [ 84.214035][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.234014][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.246501][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.281505][ T4274] team0: Port device team_slave_0 added [ 84.296198][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.322590][ T4274] team0: Port device team_slave_1 added [ 84.331209][ T4286] team0: Port device team_slave_0 added [ 84.351210][ T4272] team0: Port device team_slave_0 added [ 84.360028][ T4272] team0: Port device team_slave_1 added [ 84.374334][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.405720][ T4286] team0: Port device team_slave_1 added [ 84.436091][ T4271] team0: Port device team_slave_0 added [ 84.444317][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.471325][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.478636][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.505091][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.519936][ T4271] team0: Port device team_slave_1 added [ 84.526349][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.535964][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.563932][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.582265][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.589495][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.616178][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.630255][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.637702][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.664514][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.676599][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.686712][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.713316][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.759114][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.766140][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.792216][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.812691][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.819935][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.846208][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.864750][ T4279] team0: Port device team_slave_0 added [ 84.873452][ T4279] team0: Port device team_slave_1 added [ 84.885357][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.892510][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.919168][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.958114][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 84.958129][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 84.982983][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.990570][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.018614][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.038666][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 85.038685][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 85.038952][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 85.061744][ T4272] device hsr_slave_0 entered promiscuous mode [ 85.069327][ T4272] device hsr_slave_1 entered promiscuous mode [ 85.093403][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.100761][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.130869][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.176642][ T4271] device hsr_slave_0 entered promiscuous mode [ 85.184007][ T4271] device hsr_slave_1 entered promiscuous mode [ 85.191200][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.199794][ T4271] Cannot create hsr debugfs directory [ 85.214515][ T4274] device hsr_slave_0 entered promiscuous mode [ 85.221757][ T4274] device hsr_slave_1 entered promiscuous mode [ 85.229351][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.237425][ T4274] Cannot create hsr debugfs directory [ 85.248389][ T4286] device hsr_slave_0 entered promiscuous mode [ 85.255775][ T4286] device hsr_slave_1 entered promiscuous mode [ 85.262969][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.271033][ T4286] Cannot create hsr debugfs directory [ 85.363645][ T4279] device hsr_slave_0 entered promiscuous mode [ 85.370838][ T4279] device hsr_slave_1 entered promiscuous mode [ 85.378450][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.386177][ T4279] Cannot create hsr debugfs directory [ 85.747116][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.781638][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.797953][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.812972][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.865498][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.880260][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.893810][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.904566][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.973918][ T4286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.003537][ T4286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.035866][ T4286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.056589][ T4286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.079325][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.130062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.142356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.174262][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.199358][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.211180][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.219840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.229425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.250348][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.271423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.281834][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.294369][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.301815][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.313609][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.323730][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.333648][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.341019][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.350675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.359046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.369260][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.379701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.390585][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.398032][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.406711][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.420226][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.431265][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.442997][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.453505][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.462677][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.469920][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.520697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.531752][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.541265][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.593482][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.603983][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.623295][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.639680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.651388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.662051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.671492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.682505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.692472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.702849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.713306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.722479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.731758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.742656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.764992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.788476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.796377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.827413][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.849873][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.871416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.889410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.905210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.914382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.933407][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.951712][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.962790][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.979910][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.998920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.011619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.021510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.030825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.038862][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 87.048045][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 87.075311][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.117343][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 87.123469][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 87.128406][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 87.136923][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.163588][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.199637][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.206852][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.269283][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.319122][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.335786][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.343113][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.368374][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.388879][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.398723][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.418215][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.462684][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.498617][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.518937][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.553311][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.626451][ T4286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.646471][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.662030][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.684828][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.701234][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.715412][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.762977][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.775604][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.794456][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.817838][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.828921][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.883068][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.928174][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.964512][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.002078][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.057060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.072784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.097186][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.104635][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.122004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.152358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.168524][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.175969][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.190372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.213974][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.266060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.287917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.305613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.315644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.325776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.333763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.359471][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.374700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.385236][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.392535][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.409306][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.426496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.436442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.452185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.463567][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.470938][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.486513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.496599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.542125][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.574194][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.584250][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.600590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.613994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.631254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.666191][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.699433][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.730039][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.749490][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.768247][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.780624][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.789956][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.800625][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.814078][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.870847][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.895426][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.911914][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.924822][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.942376][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.959371][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.966947][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.014186][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.042559][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.061218][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.127448][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 89.127655][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 89.157590][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.166326][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.188595][ T4274] device veth0_vlan entered promiscuous mode [ 89.197715][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 89.203812][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 89.210733][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 89.239020][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.248758][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.257021][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.266583][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.282741][ T4274] device veth1_vlan entered promiscuous mode [ 89.305384][ T4286] device veth0_vlan entered promiscuous mode [ 89.321135][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.338902][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.348534][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.359235][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.367964][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.403565][ T4286] device veth1_vlan entered promiscuous mode [ 89.420816][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.434307][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.443865][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.454844][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.502263][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.513132][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.524694][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.540880][ T4274] device veth0_macvtap entered promiscuous mode [ 89.563449][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.574403][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.594507][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.606957][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.638645][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.663306][ T4274] device veth1_macvtap entered promiscuous mode [ 89.699437][ T4286] device veth0_macvtap entered promiscuous mode [ 89.713544][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.723582][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.748886][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.765136][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.782645][ T4272] device veth0_vlan entered promiscuous mode [ 89.809970][ T4286] device veth1_macvtap entered promiscuous mode [ 89.854216][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.879852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.900905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.922284][ T4272] device veth1_vlan entered promiscuous mode [ 89.947756][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.972055][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.983130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.992458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.000739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.010007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.019267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.026973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.041125][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.051528][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.061437][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.070588][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.084949][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.097534][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.109546][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.121398][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.148403][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.162257][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.175037][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.185935][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.200372][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.244852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.270173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.283499][ T4286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.293441][ T4286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.302930][ T4286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.313168][ T4286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.333947][ T4272] device veth0_macvtap entered promiscuous mode [ 90.370743][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.380952][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.390788][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.401492][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.412118][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.421982][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.435961][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.450452][ T4272] device veth1_macvtap entered promiscuous mode [ 90.494531][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.522668][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.530807][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.544478][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.556138][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.581142][ T4271] device veth0_vlan entered promiscuous mode [ 90.593508][ T4279] device veth0_vlan entered promiscuous mode [ 90.605084][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.614994][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.624334][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.632650][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.642944][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.652803][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.662770][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.679362][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.690992][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.701897][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.715206][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.728406][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.745197][ T4271] device veth1_vlan entered promiscuous mode [ 90.761361][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.776502][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.788617][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.816679][ T4279] device veth1_vlan entered promiscuous mode [ 90.838025][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.845932][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.855702][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.868995][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.880762][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.900786][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.912776][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.931765][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.941329][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.952710][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.989797][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.004958][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.015310][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.025092][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.056780][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.068434][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.085678][ T4279] device veth0_macvtap entered promiscuous mode [ 91.115253][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.138314][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.157036][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.166106][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.175323][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.184648][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.197521][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 91.203637][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 91.228936][ T4271] device veth0_macvtap entered promiscuous mode [ 91.239045][ T4279] device veth1_macvtap entered promiscuous mode [ 91.271673][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.278813][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 91.283918][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 91.286058][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 91.318424][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.345332][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.354601][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.372157][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.403719][ T4271] device veth1_macvtap entered promiscuous mode [ 91.459166][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.474562][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.494262][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.503720][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.504502][ T4365] Device name cannot be null; rc = [-22] [ 91.520857][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.526443][ T4365] sock: sock_set_timeout: `syz.3.4' (pid 4365) tries to set negative timeout [ 91.531485][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.531532][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.531549][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.535447][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.616259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.630571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.645046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.661428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.681909][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.704794][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.747832][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.762202][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.783683][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.796320][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.801296][ T4367] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.822704][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.844004][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.858713][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.874806][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.886919][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.904432][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.916058][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.944886][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.961648][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.976095][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.006838][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.025596][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.046110][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.057896][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.071857][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.088274][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.100003][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.111312][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.130768][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.142531][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.155343][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.169972][ T14] cfg80211: failed to load regulatory.db [ 92.258883][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.278122][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.318857][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.337286][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.353158][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.364363][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.374871][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.386182][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.427373][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.447291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.456299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.511680][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.533061][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.554693][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.572692][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.647235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.657234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.667202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.677209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.687215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.697200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.707211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.717199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.727208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.737196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 94.594819][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.615320][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.657750][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.717881][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.756933][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.840683][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.853790][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.878335][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.886289][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.900833][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.931184][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.963409][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.112078][ T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.645998][ T127] usb 5-1: device descriptor read/all, error -71 [ 107.047969][ T3597] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 107.241148][ T3597] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.277298][ T3597] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.307209][ T3597] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.330734][ T3597] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.347278][ T3597] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 107.366830][ T3597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.430504][ T3597] usb 3-1: config 0 descriptor?? [ 107.941379][ T3597] usbhid 3-1:0.0: can't add hid device: -71 [ 107.960575][ T3597] usbhid: probe of 3-1:0.0 failed with error -71 [ 108.037512][ T3597] usb 3-1: USB disconnect, device number 2 [ 111.623843][ T4470] Zero length message leads to an empty skb [ 111.940906][ T4473] loop2: detected capacity change from 0 to 2048 [ 112.006119][ T4473] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value [ 113.729428][ T4285] Bluetooth: hci4: command 0x0407 tx timeout [ 117.913246][ T4493] loop1: detected capacity change from 0 to 32768 [ 119.547498][ T3597] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 120.485812][ T3597] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.498937][ T3597] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.509790][ T3597] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.524404][ T3597] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.543692][ T3597] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 121.370824][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.381303][ T3597] usb 1-1: config 0 descriptor?? [ 121.865245][ T3597] usbhid 1-1:0.0: can't add hid device: -71 [ 121.884032][ T3597] usbhid: probe of 1-1:0.0 failed with error -71 [ 122.133370][ T3597] usb 1-1: USB disconnect, device number 2 [ 123.975190][ T4536] loop3: detected capacity change from 0 to 256 [ 124.443236][ T4543] loop0: detected capacity change from 0 to 256 [ 126.616323][ T4540] xt_cgroup: path and classid specified [ 127.790952][ T4562] loop0: detected capacity change from 0 to 512 [ 127.946070][ T4562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.173855][ T4562] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.785868][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 137.509545][ T4602] xt_cgroup: path and classid specified [ 139.567652][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.764016][ T4612] loop1: detected capacity change from 0 to 256 [ 140.988688][ T26] audit: type=1800 audit(1784285128.212:2): pid=4618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.61" name="file0" dev="loop1" ino=1048599 res=0 errno=0 [ 147.834841][ T4655] loop2: detected capacity change from 0 to 256 [ 153.081407][ T4670] xt_cgroup: path and classid specified [ 155.382337][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 155.468058][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 160.316566][ T4707] loop4: detected capacity change from 0 to 256 [ 161.720456][ T4715] xt_cgroup: path and classid specified [ 168.962817][ T4747] loop4: detected capacity change from 0 to 256 [ 169.375257][ T4753] xt_cgroup: path and classid specified [ 170.377687][ T4758] device wg1 entered promiscuous mode [ 175.044843][ T4782] loop4: detected capacity change from 0 to 512 [ 175.296785][ T4782] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 175.467660][ T4782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.595623][ T4782] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.115: bad orphan inode 131083 [ 175.618838][ T4782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.685072][ T4782] syz.4.115 (pid 4782) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 175.769503][ T4787] capability: warning: `syz.2.116' uses deprecated v2 capabilities in a way that may be insecure [ 175.996805][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 176.239857][ T4792] xt_cgroup: path and classid specified [ 180.724422][ T4815] loop1: detected capacity change from 0 to 256 [ 185.794817][ T4851] loop1: detected capacity change from 0 to 1024 [ 185.805605][ T4851] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 189.142553][ T4870] xt_cgroup: path and classid specified [ 196.772776][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 198.002489][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 198.140281][ T14] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 198.437228][ T14] usb 1-1: config 0 has no interface number 0 [ 198.443444][ T14] usb 1-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 198.527393][ T14] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 198.547282][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.564469][ T14] usb 1-1: Product: syz [ 198.574881][ T14] usb 1-1: Manufacturer: syz [ 200.029357][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.040499][ T14] usb 1-1: SerialNumber: syz [ 200.052553][ T14] usb 1-1: config 0 descriptor?? [ 200.229434][ T14] usb 1-1: can't set config #0, error -71 [ 200.247967][ T14] usb 1-1: USB disconnect, device number 3 [ 201.878121][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 203.330482][ T4936] xt_cgroup: path and classid specified [ 207.808099][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 207.814222][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 207.817653][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 207.826759][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 207.967434][ T3597] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 209.607222][ T3597] usb 4-1: Using ep0 maxpacket: 32 [ 209.614470][ T3597] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 209.647703][ T3597] usb 4-1: config 0 has no interface number 0 [ 209.671304][ T3597] usb 4-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 209.706786][ T3597] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 209.753490][ T3597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.780660][ T3597] usb 4-1: Product: syz [ 209.802943][ T3597] usb 4-1: Manufacturer: syz [ 209.833867][ T3597] usb 4-1: SerialNumber: syz [ 209.846510][ T3597] usb 4-1: config 0 descriptor?? [ 209.983223][ T3597] usb 4-1: can't set config #0, error -71 [ 209.997733][ T3597] usb 4-1: USB disconnect, device number 2 [ 214.024280][ T26] audit: type=1326 audit(1784285201.242:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 214.127288][ T26] audit: type=1326 audit(1784285201.272:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 214.259474][ T26] audit: type=1326 audit(1784285201.272:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 214.338843][ T26] audit: type=1326 audit(1784285201.272:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 214.428724][ T26] audit: type=1326 audit(1784285201.272:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 214.538981][ T26] audit: type=1326 audit(1784285201.272:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 214.605288][ T26] audit: type=1326 audit(1784285201.272:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 214.927886][ T26] audit: type=1326 audit(1784285201.272:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 215.583898][ T4996] device wg1 entered promiscuous mode [ 215.797272][ T26] audit: type=1326 audit(1784285201.272:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f827c19de99 code=0x7ffc0000 [ 216.637696][ T4326] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 218.367176][ T4326] usb 3-1: Using ep0 maxpacket: 32 [ 218.464011][ T4326] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 218.478548][ T4326] usb 3-1: can't read configurations, error -71 [ 218.503662][ T5013] loop4: detected capacity change from 0 to 512 [ 218.608059][ T5013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 218.657451][ T5013] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.396897][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 227.838353][ T5081] loop1: detected capacity change from 0 to 256 [ 230.263023][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 230.457365][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 230.464678][ T7] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 230.580482][ T7] usb 5-1: config 0 has no interface number 0 [ 230.603187][ T7] usb 5-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 231.374143][ T7] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 231.449322][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.495849][ T7] usb 5-1: Product: syz [ 231.511673][ T7] usb 5-1: Manufacturer: syz [ 231.522096][ T7] usb 5-1: SerialNumber: syz [ 231.557969][ T7] usb 5-1: config 0 descriptor?? [ 231.880630][ T5101] xt_cgroup: path and classid specified [ 233.555693][ T7] usb 5-1: USB disconnect, device number 4 [ 235.966643][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 238.068228][ T5138] xt_cgroup: path and classid specified [ 241.656853][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 243.746190][ T5158] loop4: detected capacity change from 0 to 256 [ 248.228524][ T5180] xt_cgroup: path and classid specified [ 249.057271][ T4324] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 249.257256][ T4324] usb 4-1: Using ep0 maxpacket: 32 [ 249.265183][ T4324] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 249.321859][ T4324] usb 4-1: config 0 has no interface number 0 [ 249.355220][ T4324] usb 4-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 249.453053][ T4324] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 249.507217][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.548561][ T4324] usb 4-1: Product: syz [ 249.552853][ T4324] usb 4-1: Manufacturer: syz [ 249.587355][ T4324] usb 4-1: SerialNumber: syz [ 249.612166][ T4324] usb 4-1: config 0 descriptor?? [ 250.356014][ T5212] loop4: detected capacity change from 0 to 256 [ 251.305805][ T5216] loop1: detected capacity change from 0 to 2048 [ 251.323657][ T5216] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value [ 251.481384][ T4710] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 251.835711][ T5226] ======================================================= [ 251.835711][ T5226] WARNING: The mand mount option has been deprecated and [ 251.835711][ T5226] and is ignored by this kernel. Remove the mand [ 251.835711][ T5226] option from the mount to silence this warning. [ 251.835711][ T5226] ======================================================= [ 251.885335][ T5226] FAT-fs (nullb0): bogus number of reserved sectors [ 251.892569][ T5226] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 254.688539][ T127] usb 4-1: USB disconnect, device number 3 [ 254.767955][ T26] audit: type=1326 audit(1784285241.992:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.249" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c799de99 code=0x7ffc0000 [ 254.956459][ T26] audit: type=1326 audit(1784285241.992:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.249" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c799de99 code=0x7ffc0000 [ 255.052495][ T5256] loop2: detected capacity change from 0 to 16 [ 255.113369][ T5256] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 255.128857][ T26] audit: type=1326 audit(1784285241.992:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.249" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f78c799de99 code=0x7ffc0000 [ 255.216410][ T26] audit: type=1326 audit(1784285241.992:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.249" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f78c799de99 code=0x7ffc0000 [ 257.700351][ T5275] loop4: detected capacity change from 0 to 2048 [ 257.754065][ T5275] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value [ 259.658445][ T5290] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 259.864366][ T5291] ------------[ cut here ]------------ [ 259.870229][ T5291] kernel BUG at net/phonet/socket.c:213! [ 259.945963][ T5291] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 259.952138][ T5291] CPU: 1 PID: 5291 Comm: syz.3.264 Not tainted syzkaller #0 [ 259.959552][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 259.969773][ T5291] RIP: 0010:pn_socket_connect+0xb86/0xb90 [ 259.975572][ T5291] Code: 48 8b 7c 24 10 e9 6b fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 1a fd ff ff 4c 89 e7 e8 34 e6 66 f8 e9 0d fd ff ff e8 6a c0 15 f8 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 259.995231][ T5291] RSP: 0018:ffffc9001cb87c40 EFLAGS: 00010283 [ 260.001393][ T5291] RAX: ffffffff896c6136 RBX: 0000000000000000 RCX: 0000000000080000 [ 260.009499][ T5291] RDX: ffffc9000f2cc000 RSI: 000000000000003c RDI: 000000000000003d [ 260.017559][ T5291] RBP: ffffc9001cb87db0 R08: ffff88807d12809b R09: 1ffff1100fa25013 [ 260.025582][ T5291] R10: dffffc0000000000 R11: ffffed100fa25014 R12: ffff8880727b8c18 [ 260.033803][ T5291] R13: 1ffff92003970f98 R14: dffffc0000000000 R15: 1ffff1100e4f7183 [ 260.041844][ T5291] FS: 00007f3da29cd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 260.050844][ T5291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.057490][ T5291] CR2: 00007f3da1beb580 CR3: 000000002407c000 CR4: 00000000003506e0 [ 260.065519][ T5291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.073623][ T5291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.081667][ T5291] Call Trace: [ 260.084986][ T5291] [ 260.087961][ T5291] ? __might_fault+0xa6/0x120 [ 260.092777][ T5291] ? pn_socket_sendmsg+0x230/0x230 [ 260.098044][ T5291] ? aa_af_perm+0x340/0x340 [ 260.102601][ T5291] ? tomoyo_socket_connect_permission+0x196/0x270 [ 260.109082][ T5291] ? __might_fault+0xa6/0x120 [ 260.113815][ T5291] ? bpf_lsm_socket_connect+0x5/0x10 [ 260.119186][ T5291] ? security_socket_connect+0x7c/0xa0 [ 260.124698][ T5291] ? pn_socket_sendmsg+0x230/0x230 [ 260.129872][ T5291] __sys_connect+0x3cb/0x450 [ 260.134517][ T5291] ? __sys_connect_file+0x170/0x170 [ 260.139956][ T5291] __x64_sys_connect+0x76/0x80 [ 260.144968][ T5291] do_syscall_64+0x4c/0xa0 [ 260.149439][ T5291] ? clear_bhb_loop+0x60/0xb0 [ 260.154175][ T5291] ? clear_bhb_loop+0x60/0xb0 [ 260.158949][ T5291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.164900][ T5291] RIP: 0033:0x7f3da1b9de99 [ 260.169426][ T5291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.189084][ T5291] RSP: 002b:00007f3da29cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 260.197559][ T5291] RAX: ffffffffffffffda RBX: 00007f3da1e26090 RCX: 00007f3da1b9de99 [ 260.205601][ T5291] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007 [ 260.213622][ T5291] RBP: 00007f3da1c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 260.221636][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.229820][ T5291] R13: 00007f3da1e26128 R14: 00007f3da1e26090 R15: 00007ffc46b21738 [ 260.237857][ T5291] [ 260.240921][ T5291] Modules linked in: [ 260.324411][ T5296] IPVS: stopping backup sync thread 5297 ... [ 260.427339][ T4348] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 260.637275][ T4348] usb 3-1: Using ep0 maxpacket: 32 [ 260.649568][ T4348] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 260.746821][ T5291] ---[ end trace 0000000000000000 ]--- [ 260.753313][ T5291] RIP: 0010:pn_socket_connect+0xb86/0xb90 [ 260.759175][ T5291] Code: 48 8b 7c 24 10 e9 6b fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 1a fd ff ff 4c 89 e7 e8 34 e6 66 f8 e9 0d fd ff ff e8 6a c0 15 f8 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 260.779378][ T5291] RSP: 0018:ffffc9001cb87c40 EFLAGS: 00010283 [ 260.785510][ T5291] RAX: ffffffff896c6136 RBX: 0000000000000000 RCX: 0000000000080000 [ 260.793801][ T5291] RDX: ffffc9000f2cc000 RSI: 000000000000003c RDI: 000000000000003d [ 260.802075][ T5291] RBP: ffffc9001cb87db0 R08: ffff88807d12809b R09: 1ffff1100fa25013 [ 260.806825][ T4348] usb 3-1: config 0 has no interface number 0 [ 260.810197][ T5291] R10: dffffc0000000000 R11: ffffed100fa25014 R12: ffff8880727b8c18 [ 260.810217][ T5291] R13: 1ffff92003970f98 R14: dffffc0000000000 R15: 1ffff1100e4f7183 [ 260.810232][ T5291] FS: 00007f3da29cd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 260.841495][ T5291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.855770][ T5291] CR2: 0000200000005000 CR3: 000000002407c000 CR4: 00000000003506f0 [ 260.887622][ T4348] usb 3-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 260.934479][ T5291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.946576][ T4348] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 260.955888][ T5291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.955923][ T5291] Kernel panic - not syncing: Fatal exception [ 260.970406][ T5291] Kernel Offset: disabled [ 260.974753][ T5291] Rebooting in 86400 seconds..