last executing test programs: 9.13258782s ago: executing program 1 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 8.873342005s ago: executing program 2 (id=304): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mount$9p_tcp(0x0, &(0x7f0000000880)='./bus/file1\x00', 0x0, 0x3006082, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x803) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/28], 0xac}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040084) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x2, 0x227e5105, 0x0, 0x200, 0x7, 0xa15, 0x0, 0x0, 0x1, 0xd0}}, 0x50) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r4, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x0) 6.653615504s ago: executing program 3 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {}, {0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) 5.997947852s ago: executing program 3 (id=315): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x28ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x5, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}) 5.565337087s ago: executing program 3 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3e4cd25529e20900"}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040), 0x0, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023892) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008001240"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) 5.407276886s ago: executing program 0 (id=318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, r1, 0xffffffffffffffff, 0xee00, 0x3a, 0x1}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb}) 5.293913813s ago: executing program 1 (id=319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 5.197772979s ago: executing program 0 (id=320): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 5.135323422s ago: executing program 4 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x8, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x80, 0x2, 0x6, 0xb, 0x2, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0xff, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) r3 = fanotify_init(0x200, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x2400c040) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(r3, 0x1, 0x106e, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2) 5.028477588s ago: executing program 0 (id=322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4}, {0x43, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xdd86}], 0x2}, 0x4005) 4.176982427s ago: executing program 2 (id=323): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x482000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f0000000140)={0x8, 0xa}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 4.176298127s ago: executing program 1 (id=324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 3.680803997s ago: executing program 4 (id=325): open(0x0, 0x14113e, 0x6ceac77f206eabb9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.604513741s ago: executing program 1 (id=326): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010029bd8200000000000a000800000000070000000008000d000800000008000e00d10c0000140002"], 0x40}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.552501384s ago: executing program 0 (id=327): chdir(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000380)=ANY=[@ANYBLOB="79ee7ca42eeabbbbbbbbbbbb86dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e214e20006490"], 0x0) 3.485725858s ago: executing program 2 (id=328): gettid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) socket(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 3.222528193s ago: executing program 1 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 2.476391456s ago: executing program 2 (id=330): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000001500), 0x4) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20024800}, 0x20008010) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18070000000000000000000000000000851000000300000018000000000000000008000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') socket(0x23, 0x2, 0x1) 2.41709155s ago: executing program 0 (id=331): syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0xa08802, &(0x7f0000000180)=ANY=[], 0x1, 0x693, &(0x7f0000000600)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) 2.165043044s ago: executing program 3 (id=332): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x184) 2.164862464s ago: executing program 4 (id=333): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f00000001c0)='./file0\x00', 0x4200, 0x64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) umount2(&(0x7f0000000180)='./file0\x00', 0xc) 2.089731729s ago: executing program 0 (id=334): write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab09", 0xa) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.2189961s ago: executing program 4 (id=335): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@remote, 0xd9, 0x0, 0x0, 0x2, 0x5, 0x3f19}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0xffff0002, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 1.024439401s ago: executing program 4 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 743.133247ms ago: executing program 3 (id=337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x8, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x80, 0x2, 0x6, 0xb, 0x2, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0xff, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) r3 = fanotify_init(0x200, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000b40), 0x0, 0x2400c040) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(r3, 0x1, 0x106e, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2) 543.163189ms ago: executing program 2 (id=338): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x482000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f0000000140)={0x8, 0xa}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 196.987548ms ago: executing program 2 (id=339): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x8, 0x4, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x65, 0x0, 0x8, 0x7b, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x4, 0xd0, 0x0, 0xd}]}}}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="2ef20f017df40f8bc5f2eeb80e000f00d0660f3acfc30d0f01b91a000f20e06635000010000f22e06766c744240033d500006766c74424020001c0fe6766c744240600000000670f0114240f00d466b9410101c066b869d281cd66ba000000000f22d42e0f017500", 0x68}], 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200881, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 195.849099ms ago: executing program 3 (id=340): gettid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) socket(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 22.189629ms ago: executing program 4 (id=341): socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}, 0x40) 0s ago: executing program 1 (id=342): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800, 0x8, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 59.445916][ T4171] cgroup: Unknown subsys name 'net' [ 59.586715][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.089156][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.019189][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.084045][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.141707][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 63.201104][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.248816][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.258981][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.268385][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.284073][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.294048][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.302934][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.319370][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.337282][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.344469][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.352981][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.382481][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.390000][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.398258][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.439071][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.450481][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.458472][ T4185] device bridge_slave_0 entered promiscuous mode [ 63.476404][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.500295][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.507445][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.515536][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.531846][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.559510][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.581815][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.616655][ T4186] team0: Port device team_slave_0 added [ 63.643268][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.650921][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.658886][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.668968][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.679906][ T4186] team0: Port device team_slave_1 added [ 63.698707][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.706794][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.715291][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.724589][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.734094][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.741402][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.749527][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.766482][ T4184] team0: Port device team_slave_0 added [ 63.785657][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.793784][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.803517][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.819262][ T4184] team0: Port device team_slave_1 added [ 63.841991][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.858083][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.865668][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.892765][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.913144][ T4185] team0: Port device team_slave_0 added [ 63.921609][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.938976][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.946469][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.973689][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.988145][ T4185] team0: Port device team_slave_1 added [ 64.016584][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.031001][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.038007][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.064638][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.097241][ T4193] team0: Port device team_slave_0 added [ 64.105261][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.118455][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.133556][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.160129][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.184520][ T4193] team0: Port device team_slave_1 added [ 64.198682][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.209779][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.236572][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.256005][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.264988][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.291965][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.337083][ T4190] team0: Port device team_slave_0 added [ 64.356202][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.363322][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.377138][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.384459][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.411004][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.424388][ T4190] team0: Port device team_slave_1 added [ 64.449323][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.456532][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.463816][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.471801][ T4184] Cannot create hsr debugfs directory [ 64.478509][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.485681][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.511933][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.536443][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.543592][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.569987][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.582883][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.589996][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.616644][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.647033][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.653843][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.660944][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.668547][ T4185] Cannot create hsr debugfs directory [ 64.760617][ T4196] Bluetooth: hci4: command 0x0409 tx timeout [ 64.760617][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 64.762486][ T4196] Bluetooth: hci0: command 0x0409 tx timeout [ 64.767084][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 64.787044][ T4196] Bluetooth: hci1: command 0x0409 tx timeout [ 64.812104][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.819148][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.826282][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.834848][ T4190] Cannot create hsr debugfs directory [ 64.859175][ T4193] device hsr_slave_0 entered promiscuous mode [ 64.867089][ T4193] device hsr_slave_1 entered promiscuous mode [ 64.875200][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.883177][ T4193] Cannot create hsr debugfs directory [ 65.184333][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.200753][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.219500][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.244147][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.253221][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.277878][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.304070][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.317144][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.334911][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.363170][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.374108][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.417809][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.443739][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.470919][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.514432][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.531827][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.561386][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.576680][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.586660][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.616020][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.624376][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.635775][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.647139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.661297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.701828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.713802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.724619][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.732219][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.742346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.753816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.762674][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.769956][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.779247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.789609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.811650][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.834257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.845463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.854881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.865850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.875083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.883953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.893556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.902542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.936043][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.954379][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.968129][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.980930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.989111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.998136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.007580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.019533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.028861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.038376][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.045997][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.070906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.079360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.093244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.103786][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.111076][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.131135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.180577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.203903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.216737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.226745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.236788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.245859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.266461][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.276751][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.286372][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.296755][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.318195][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.327875][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.357684][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.397061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.405869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.426604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.442462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.455907][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.471244][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.497610][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.514148][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.533991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.541703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.549153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.558082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.568643][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.575840][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.584348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.593633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.603336][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.610545][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.647033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.671002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.680236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.688934][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.696090][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.712224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.725934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.735872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.744394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.754517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.764527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.774026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.783555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.792877][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.800032][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.807902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.818282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.846674][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.856660][ T4173] Bluetooth: hci2: command 0x041b tx timeout [ 66.864904][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.873936][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 66.881233][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 66.888517][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.897269][ T4173] Bluetooth: hci3: command 0x041b tx timeout [ 66.903735][ T4173] Bluetooth: hci4: command 0x041b tx timeout [ 66.908167][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.924372][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.933871][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.943806][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.954857][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.976490][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.991396][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.003924][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.013765][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.022547][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.031290][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.038399][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.056749][ T4186] device veth0_vlan entered promiscuous mode [ 67.070521][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.078943][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.094464][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.103209][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.113117][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.121856][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.130914][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.149494][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.162462][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.175109][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.205827][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.217087][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.227556][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.236722][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.246943][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.255988][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.265301][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.276276][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.285170][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.294797][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.305059][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.312222][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.320854][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.330741][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.339499][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.348739][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.357848][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.366129][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.374596][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.388999][ T4186] device veth1_vlan entered promiscuous mode [ 67.400766][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.443857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.475924][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.507915][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.525720][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.551095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.571872][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.583640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.597204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.607378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.627432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.640757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.677939][ T4184] device veth0_vlan entered promiscuous mode [ 67.697157][ T4186] device veth0_macvtap entered promiscuous mode [ 67.728198][ T4186] device veth1_macvtap entered promiscuous mode [ 67.745498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.756722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.781587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.792326][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.806911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.815465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.824355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.832879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.846417][ T4184] device veth1_vlan entered promiscuous mode [ 67.877406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.894627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.905248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.913476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.922330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.933549][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.954091][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.968883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.977485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.987186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.026400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.035799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.047641][ T4184] device veth0_macvtap entered promiscuous mode [ 68.057117][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.074420][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.087363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.095782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.105072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.117806][ T4184] device veth1_macvtap entered promiscuous mode [ 68.138070][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.147241][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.157149][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.166058][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.192814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.202743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.212136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.231109][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.242528][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.255231][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.270342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.277995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.287072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.298110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.317744][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.330360][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.346486][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.358845][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.373970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.386897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.396240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.412726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.456054][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.465662][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.475202][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.485868][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.508445][ T4190] device veth0_vlan entered promiscuous mode [ 68.524136][ T4185] device veth0_vlan entered promiscuous mode [ 68.540915][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.556511][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.582568][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.592073][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.602381][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.610773][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.618742][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.642019][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.679088][ T4185] device veth1_vlan entered promiscuous mode [ 68.701867][ T4190] device veth1_vlan entered promiscuous mode [ 68.787006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.806438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.822288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.841558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.856172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.866805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.880248][ T4185] device veth0_macvtap entered promiscuous mode [ 68.895464][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.896819][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.906122][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.921202][ T3520] Bluetooth: hci4: command 0x040f tx timeout [ 68.927546][ T3520] Bluetooth: hci3: command 0x040f tx timeout [ 68.934720][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.934944][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.950340][ T3520] Bluetooth: hci0: command 0x040f tx timeout [ 68.956435][ T3520] Bluetooth: hci1: command 0x040f tx timeout [ 68.966184][ T3520] Bluetooth: hci2: command 0x040f tx timeout [ 68.982387][ T4185] device veth1_macvtap entered promiscuous mode [ 68.997039][ T4190] device veth0_macvtap entered promiscuous mode [ 69.005416][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.017004][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.025321][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.065824][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.076066][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.089911][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.102149][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.112548][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.123387][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.136573][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.159585][ T4190] device veth1_macvtap entered promiscuous mode [ 69.177700][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.186976][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.196104][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.208079][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.219840][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.220420][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.230624][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.249848][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.263641][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.271252][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.293650][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.306607][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.319373][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.331178][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.341772][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.352877][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.364523][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.373136][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.382744][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.391969][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.402454][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.413734][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.425645][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.435402][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.445055][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.453944][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.485853][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.505495][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.508301][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.525664][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.527419][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.544195][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.555271][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.568324][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.581300][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.588936][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.598256][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.607916][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.654796][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.669071][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.678691][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.691937][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.705829][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.717026][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.728043][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.736698][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.750613][ T4193] device veth0_vlan entered promiscuous mode [ 69.781231][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.789279][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.835529][ T4193] device veth1_vlan entered promiscuous mode [ 69.865698][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.875549][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.889113][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.903412][ T4295] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.912432][ T4295] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.921264][ T4295] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.930249][ T4295] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.994628][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.012759][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.027383][ T4295] Zero length message leads to an empty skb [ 70.043781][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.101433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.135819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.147046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.156680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.171209][ T4193] device veth0_macvtap entered promiscuous mode [ 70.184516][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.196837][ T4193] device veth1_macvtap entered promiscuous mode [ 70.204896][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.214551][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.229762][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.242235][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.260878][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.269321][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.293268][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.356438][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.512521][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.554242][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.564865][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.574888][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.585718][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.595636][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.609783][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 70.621210][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.652062][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.665749][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.678956][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.744197][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.939760][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.000046][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 71.009550][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 71.021273][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 71.027896][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 71.042886][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.043199][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 71.083087][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.134463][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.145037][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.157820][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.170144][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.198864][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.291901][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.292354][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.317060][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.325093][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.495112][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.501839][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.575781][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.994914][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.024558][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.033687][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.049758][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.160228][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.333034][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.379747][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.438121][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.456411][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.474134][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.492218][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 72.530063][ T1108] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 72.546664][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.568126][ T4326] 9pnet_virtio: no channels available for device syz [ 72.650128][ T1108] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 72.669102][ T1108] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 72.705139][ T1108] usb 2-1: Manufacturer: syz [ 72.738279][ T1108] usb 2-1: config 0 descriptor?? [ 72.804126][ T4328] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 72.845276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.950406][ T1108] rc_core: IR keymap rc-hauppauge not found [ 72.981422][ T1108] Registered IR keymap rc-empty [ 73.010023][ T1108] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 73.030237][ T1108] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 73.065313][ T1108] usb 2-1: USB disconnect, device number 2 [ 73.211299][ T4323] device hsr_slave_1 left promiscuous mode [ 73.230645][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.366564][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 73.509859][ T4345] device syzkaller0 entered promiscuous mode [ 73.562558][ T4328] wg2 speed is unknown, defaulting to 1000 [ 73.677494][ T4328] wg2 speed is unknown, defaulting to 1000 [ 73.697573][ T4328] wg2 speed is unknown, defaulting to 1000 [ 73.846819][ T4323] syz.3.10 (4323) used greatest stack depth: 20720 bytes left [ 74.193791][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 74.296127][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 74.900488][ T4229] wg2 speed is unknown, defaulting to 1000 [ 74.899367][ T4328] infiniband syz2: set active [ 74.925054][ T4357] tipc: Started in network mode [ 74.931393][ T4328] infiniband syz2: added wg2 [ 74.952025][ T4357] tipc: Node identity 964af5538c35, cluster identity 4711 [ 74.973366][ T4357] tipc: Enabled bearer , priority 0 [ 75.003212][ T4362] device syzkaller0 entered promiscuous mode [ 75.013120][ T4361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'. [ 75.070834][ T4361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'. [ 75.160527][ T4362] tipc: Resetting bearer [ 75.174762][ T4328] RDS/IB: syz2: added [ 75.186565][ T4328] smc: adding ib device syz2 with port count 1 [ 75.194906][ T4328] smc: ib device syz2 port 1 has pnetid [ 75.205879][ T4328] wg2 speed is unknown, defaulting to 1000 [ 75.215996][ T4356] tipc: Resetting bearer [ 75.231816][ T4356] tipc: Disabling bearer [ 75.263777][ T4361] device syzkaller0 entered promiscuous mode [ 75.294417][ T1108] wg2 speed is unknown, defaulting to 1000 [ 75.831898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.842243][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.934283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.036931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.139338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.280068][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.860788][ T4389] device syzkaller0 entered promiscuous mode [ 76.923708][ T4328] wg2 speed is unknown, defaulting to 1000 [ 77.382677][ T4291] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 77.403958][ T4291] Bluetooth: hci3: Injecting HCI hardware error event [ 77.441072][ T4195] Bluetooth: hci3: hardware error 0x00 [ 77.477459][ T4328] wg2 speed is unknown, defaulting to 1000 [ 78.824349][ T4328] wg2 speed is unknown, defaulting to 1000 [ 78.945011][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'. [ 78.972019][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'. [ 79.003346][ T4409] tipc: Enabled bearer , priority 0 [ 79.016935][ T4407] device syzkaller0 entered promiscuous mode [ 79.120402][ T4412] device syzkaller0 entered promiscuous mode [ 79.235168][ T4328] wg2 speed is unknown, defaulting to 1000 [ 79.401338][ T4413] tipc: Resetting bearer [ 79.450861][ T4413] tipc: Disabling bearer [ 80.465505][ T4291] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 80.480149][ T4291] Bluetooth: hci4: Injecting HCI hardware error event [ 80.487290][ T146] Bluetooth: hci4: hardware error 0x00 [ 81.436549][ T4432] binder: 4428:4432 ioctl 0 200000000040 returned -22 [ 82.651149][ T4440] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.254362][ T4461] ======================================================= [ 83.254362][ T4461] WARNING: The mand mount option has been deprecated and [ 83.254362][ T4461] and is ignored by this kernel. Remove the mand [ 83.254362][ T4461] option from the mount to silence this warning. [ 83.254362][ T4461] ======================================================= [ 83.321958][ T4461] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.318979][ T4199] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 87.046628][ T23] cfg80211: failed to load regulatory.db [ 87.593631][ T4199] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 88.360684][ T4291] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 88.536517][ T4291] Bluetooth: hci2: Injecting HCI hardware error event [ 88.548900][ T4195] Bluetooth: hci2: hardware error 0x00 [ 89.607865][ T4533] tipc: Started in network mode [ 89.639454][ T4533] tipc: Node identity 164c8d11a817, cluster identity 4711 [ 89.728206][ T4533] tipc: Enabled bearer , priority 0 [ 89.760418][ T4540] device syzkaller0 entered promiscuous mode [ 89.874896][ T4533] tipc: Resetting bearer [ 90.069175][ T4532] tipc: Resetting bearer [ 90.105791][ T4532] tipc: Disabling bearer [ 90.189026][ T4546] process 'syz.1.72' launched './file2' with NULL argv: empty string added [ 91.809804][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.069784][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 92.370079][ T23] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 92.399113][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.264807][ T23] usb 2-1: Product: syz [ 93.279210][ T23] usb 2-1: Manufacturer: syz [ 93.303570][ T23] usb 2-1: SerialNumber: syz [ 93.409227][ T23] usb 2-1: config 0 descriptor?? [ 95.520456][ T23] usb 2-1: can't set config #0, error -71 [ 95.553910][ T23] usb 2-1: USB disconnect, device number 3 [ 95.774984][ T146] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 99.207632][ T4637] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.563503][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 102.092356][ T4667] tipc: Enabled bearer , priority 0 [ 102.100638][ T4667] device syzkaller0 entered promiscuous mode [ 102.942029][ T4667] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 103.978395][ T4666] tipc: Resetting bearer [ 104.018996][ T4689] 9pnet_virtio: no channels available for device syz [ 104.138425][ T4666] tipc: Disabling bearer [ 104.180620][ T4229] tipc: Node number set to 444593491 [ 104.600550][ T4229] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 104.614836][ T4229] Bluetooth: hci0: Injecting HCI hardware error event [ 104.640931][ T146] Bluetooth: hci0: hardware error 0x00 [ 104.917362][ T4195] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 104.929134][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 106.497416][ T4752] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 107.485173][ T4755] 9pnet_virtio: no channels available for device syz [ 108.217845][ T4767] device syzkaller0 entered promiscuous mode [ 109.929063][ T4796] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.841277][ T4799] 9pnet_virtio: no channels available for device syz [ 114.982631][ T4844] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.021438][ T4845] syz.3.157 uses obsolete (PF_INET,SOCK_PACKET) [ 115.274639][ T4841] device syzkaller1 entered promiscuous mode [ 115.506627][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 116.341774][ T4871] 9pnet_virtio: no channels available for device syz [ 119.480120][ T4272] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 119.488505][ T4272] Bluetooth: hci1: Injecting HCI hardware error event [ 119.554021][ T146] Bluetooth: hci1: hardware error 0x00 [ 119.583402][ T4897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.605535][ T4897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.646466][ T4897] bond1: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 119.670225][ T4897] syz.4.173 (4897) used greatest stack depth: 19952 bytes left [ 119.702121][ T4900] device syzkaller0 entered promiscuous mode [ 119.982111][ T4904] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.280843][ T4952] device syzkaller0 entered promiscuous mode [ 124.697110][ T4961] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 124.705039][ T4961] netlink: 'syz.2.193': attribute type 2 has an invalid length. [ 126.987551][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 127.070332][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 127.079513][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 127.170921][ T5004] binder: 4987:5004 ioctl 0 200000000040 returned -22 [ 127.338317][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 127.414636][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 127.573427][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.953556][ T5022] 9pnet_virtio: no channels available for device syz [ 130.674402][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 130.690444][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 130.714972][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 130.746753][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 130.793743][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 130.937027][ T5051] device syzkaller0 entered promiscuous mode [ 132.626896][ T5073] __nla_validate_parse: 1 callbacks suppressed [ 132.627326][ T5073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 132.922810][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.950141][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.957086][ T5072] binder: 5059:5072 ioctl 0 200000000040 returned -22 [ 134.514075][ T5092] device syzkaller0 entered promiscuous mode [ 134.789321][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.814020][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.821314][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.254380][ T5156] syz.2.259[5156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.451867][ T5157] binder: 5134:5157 ioctl 0 200000000040 returned -22 [ 140.798376][ T5161] IPVS: length: 528 != 8 [ 140.811185][ T5161] 9pnet_virtio: no channels available for device syz [ 141.708809][ T5164] netlink: 'syz.3.261': attribute type 4 has an invalid length. [ 141.973372][ T5175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 142.729741][ T5169] netlink: 'syz.3.261': attribute type 4 has an invalid length. [ 145.012337][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 145.130193][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 145.425952][ T5204] IPVS: length: 528 != 8 [ 145.437002][ T5204] 9pnet_virtio: no channels available for device syz [ 145.443940][ T4196] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 146.060002][ T5206] overlayfs: overlapping lowerdir path [ 146.105409][ T5199] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 146.180088][ T4196] usb 4-1: Using ep0 maxpacket: 8 [ 146.306767][ T5196] device hsr_slave_1 left promiscuous mode [ 146.530667][ T4196] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 147.283532][ T4196] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.291926][ T4196] usb 4-1: Product: syz [ 147.296126][ T4196] usb 4-1: Manufacturer: syz [ 147.300846][ T4196] usb 4-1: SerialNumber: syz [ 147.318661][ T4196] usb 4-1: config 0 descriptor?? [ 147.401111][ T5217] device syzkaller0 entered promiscuous mode [ 150.520005][ T4196] usb 4-1: USB disconnect, device number 2 [ 150.757642][ T5245] 9pnet_virtio: no channels available for device syz [ 150.831684][ T4873] udevd[4873]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.135693][ T5255] 8021q: VLANs not supported on ip_vti0 [ 152.796368][ T5264] loop0: detected capacity change from 0 to 256 [ 152.975920][ T5261] device syzkaller0 entered promiscuous mode [ 153.186103][ T5264] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.279253][ T5271] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 153.297129][ T5264] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 153.399592][ T5264] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.824463][ T5291] loop0: detected capacity change from 0 to 128 [ 153.881984][ T5292] loop2: detected capacity change from 0 to 4096 [ 153.955580][ T5292] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 153.979516][ T5291] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,min_batch_time=0x000000000000000c,,errors=continue. Quota mode: none. [ 153.996711][ T5291] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.012997][ T5292] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.154635][ T5292] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 155.120345][ T5312] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 155.241992][ T4173] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.292671][ T5292] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 155.461981][ T5314] device syzkaller0 entered promiscuous mode [ 155.664140][ T5325] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.709717][ T4173] usb 3-1: Using ep0 maxpacket: 32 [ 155.829861][ T4173] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 155.862624][ T4173] usb 3-1: config 0 has no interface number 0 [ 155.892769][ T4173] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.905163][ T4173] usb 3-1: config 0 interface 85 has no altsetting 0 [ 155.935688][ T5328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 155.982897][ T5330] loop4: detected capacity change from 0 to 1024 [ 156.063176][ T5330] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 156.070243][ T4173] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 156.084731][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.096430][ T5330] hfsplus: failed to load root directory [ 156.104014][ T4173] usb 3-1: Product: syz [ 156.109276][ T4173] usb 3-1: Manufacturer: syz [ 156.114843][ T4173] usb 3-1: SerialNumber: syz [ 156.239025][ T4173] usb 3-1: config 0 descriptor?? [ 157.010308][ T4173] appletouch 3-1:0.85: Geyser mode initialized. [ 157.137150][ T4173] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 157.396744][ T4173] usb 3-1: USB disconnect, device number 2 [ 157.457852][ T4173] appletouch 3-1:0.85: input: appletouch disconnected [ 157.691450][ T4236] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.718767][ T5350] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 158.574370][ T5350] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 158.596542][ T5350] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 158.608120][ T5350] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 158.617420][ T5350] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 158.626572][ T5350] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 158.658333][ T5359] device syzkaller0 entered promiscuous mode [ 158.739855][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 159.139819][ T4236] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 159.148929][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 159.169702][ T4236] usb 4-1: Product: syz [ 159.174020][ T4236] usb 4-1: Manufacturer: syz [ 159.178649][ T4236] usb 4-1: SerialNumber: syz [ 159.195171][ T4236] usb 4-1: config 0 descriptor?? [ 159.239440][ T5374] loop4: detected capacity change from 0 to 512 [ 159.322561][ T5381] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.477081][ T5374] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 159.588468][ T5374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.997904][ T5374] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 160.166095][ T5374] EXT4-fs (loop4): 1 truncate cleaned up [ 160.171888][ T5374] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 160.291786][ T5388] loop0: detected capacity change from 0 to 1024 [ 160.559000][ T5395] 9pnet_virtio: no channels available for device syz [ 161.636767][ T4236] usb 4-1: USB disconnect, device number 3 [ 161.724757][ T4873] udevd[4873]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.019709][ T4196] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 162.115218][ T5413] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 162.176735][ T5413] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 162.279747][ T4196] usb 1-1: Using ep0 maxpacket: 32 [ 162.530657][ T4196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.542336][ T4196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.552585][ T4196] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.562052][ T4196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.580513][ T4196] usb 1-1: config 0 descriptor?? [ 162.686477][ T4196] hub 1-1:0.0: USB hub found [ 162.879804][ T4196] hub 1-1:0.0: 1 port detected [ 162.972001][ T5431] ================================================================== [ 162.980463][ T5431] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 162.988243][ T5431] Write of size 4 at addr ffff888142f813b8 by task syz.4.341/5431 [ 162.996078][ T5431] [ 162.998419][ T5431] CPU: 1 PID: 5431 Comm: syz.4.341 Not tainted syzkaller #0 [ 163.005702][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.015794][ T5431] Call Trace: [ 163.019078][ T5431] [ 163.022149][ T5431] dump_stack_lvl+0x188/0x250 [ 163.026868][ T5431] ? show_regs_print_info+0x20/0x20 [ 163.032084][ T5431] ? _printk+0xda/0x130 [ 163.036286][ T5431] ? ax25_dev_device_down+0x35e/0x520 [ 163.041678][ T5431] ? load_image+0x400/0x400 [ 163.046214][ T5431] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 163.051676][ T5431] ? lockdep_hardirqs_on+0x94/0x140 [ 163.056882][ T5431] print_address_description+0x60/0x2d0 [ 163.062432][ T5431] ? ax25_dev_device_down+0x35e/0x520 [ 163.067821][ T5431] kasan_report+0xdf/0x130 [ 163.072252][ T5431] ? ax25_dev_device_down+0x35e/0x520 [ 163.077658][ T5431] kasan_check_range+0x235/0x290 [ 163.082645][ T5431] ax25_dev_device_down+0x35e/0x520 [ 163.087854][ T5431] ax25_device_event+0x4b4/0x4f0 [ 163.092798][ T5431] raw_notifier_call_chain+0xcb/0x160 [ 163.098185][ T5431] __dev_notify_flags+0x158/0x300 [ 163.103235][ T5431] ? __dev_change_flags+0x6a0/0x6a0 [ 163.108435][ T5431] ? __dev_change_flags+0x4d0/0x6a0 [ 163.113637][ T5431] ? dev_get_flags+0x1c0/0x1c0 [ 163.118466][ T5431] ? __mutex_lock_common+0x465/0x2400 [ 163.123850][ T5431] dev_change_flags+0xe3/0x1a0 [ 163.128627][ T5431] dev_ifsioc+0x130/0xd50 [ 163.132975][ T5431] ? dev_ioctl+0xe30/0xe30 [ 163.137392][ T5431] ? apparmor_capable+0x12c/0x190 [ 163.142418][ T5431] ? full_name_hash+0x8e/0xe0 [ 163.147117][ T5431] dev_ioctl+0x545/0xe30 [ 163.151361][ T5431] ? _copy_from_user+0x111/0x170 [ 163.156304][ T5431] sock_do_ioctl+0x245/0x320 [ 163.160905][ T5431] ? sock_show_fdinfo+0xb0/0xb0 [ 163.165769][ T5431] sock_ioctl+0x4d2/0x710 [ 163.170112][ T5431] ? sock_poll+0x410/0x410 [ 163.174541][ T5431] ? bpf_lsm_file_ioctl+0x5/0x10 [ 163.179481][ T5431] ? security_file_ioctl+0x7c/0xa0 [ 163.184639][ T5431] ? sock_poll+0x410/0x410 [ 163.189100][ T5431] __se_sys_ioctl+0xfa/0x170 [ 163.193718][ T5431] do_syscall_64+0x4c/0xa0 [ 163.198144][ T5431] ? clear_bhb_loop+0x30/0x80 [ 163.202823][ T5431] ? clear_bhb_loop+0x30/0x80 [ 163.207509][ T5431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.213415][ T5431] RIP: 0033:0x7f7c27bd0eb9 [ 163.217834][ T5431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.237588][ T5431] RSP: 002b:00007f7c25e2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.246016][ T5431] RAX: ffffffffffffffda RBX: 00007f7c27e4bfa0 RCX: 00007f7c27bd0eb9 [ 163.253994][ T5431] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a [ 163.262185][ T5431] RBP: 00007f7c27c3ec1f R08: 0000000000000000 R09: 0000000000000000 [ 163.270191][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.278171][ T5431] R13: 00007f7c27e4c038 R14: 00007f7c27e4bfa0 R15: 00007ffc3d5a01c8 [ 163.286158][ T5431] [ 163.289186][ T5431] [ 163.291523][ T5431] Allocated by task 4339: [ 163.295843][ T5431] __kasan_kmalloc+0xb5/0xf0 [ 163.300571][ T5431] ax25_dev_device_up+0x50/0x580 [ 163.305544][ T5431] ax25_device_event+0x483/0x4f0 [ 163.310493][ T5431] raw_notifier_call_chain+0xcb/0x160 [ 163.316073][ T5431] __dev_notify_flags+0x194/0x300 [ 163.321112][ T5431] dev_change_flags+0xe3/0x1a0 [ 163.325894][ T5431] dev_ifsioc+0x130/0xd50 [ 163.330224][ T5431] dev_ioctl+0x545/0xe30 [ 163.334461][ T5431] sock_do_ioctl+0x245/0x320 [ 163.339057][ T5431] sock_ioctl+0x4d2/0x710 [ 163.343399][ T5431] __se_sys_ioctl+0xfa/0x170 [ 163.347993][ T5431] do_syscall_64+0x4c/0xa0 [ 163.352419][ T5431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.358311][ T5431] [ 163.360678][ T5431] Freed by task 5431: [ 163.364650][ T5431] kasan_set_track+0x4b/0x70 [ 163.369243][ T5431] kasan_set_free_info+0x1f/0x40 [ 163.374185][ T5431] ____kasan_slab_free+0xd5/0x110 [ 163.379212][ T5431] slab_free_freelist_hook+0xea/0x170 [ 163.384585][ T5431] kfree+0xef/0x2a0 [ 163.388386][ T5431] ax25_dev_device_down+0x1c0/0x520 [ 163.393579][ T5431] ax25_device_event+0x4b4/0x4f0 [ 163.398515][ T5431] raw_notifier_call_chain+0xcb/0x160 [ 163.403884][ T5431] __dev_notify_flags+0x158/0x300 [ 163.408905][ T5431] dev_change_flags+0xe3/0x1a0 [ 163.413665][ T5431] dev_ifsioc+0x130/0xd50 [ 163.417995][ T5431] dev_ioctl+0x545/0xe30 [ 163.422234][ T5431] sock_do_ioctl+0x245/0x320 [ 163.426851][ T5431] sock_ioctl+0x4d2/0x710 [ 163.431176][ T5431] __se_sys_ioctl+0xfa/0x170 [ 163.435780][ T5431] do_syscall_64+0x4c/0xa0 [ 163.440193][ T5431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.446080][ T5431] [ 163.448398][ T5431] The buggy address belongs to the object at ffff888142f81300 [ 163.448398][ T5431] which belongs to the cache kmalloc-192 of size 192 [ 163.462486][ T5431] The buggy address is located 184 bytes inside of [ 163.462486][ T5431] 192-byte region [ffff888142f81300, ffff888142f813c0) [ 163.475759][ T5431] The buggy address belongs to the page: [ 163.481403][ T5431] page:ffffea00050be040 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888142f81400 pfn:0x142f81 [ 163.492943][ T5431] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 163.500606][ T5431] raw: 057ff00000000200 ffffea0005313388 ffffea00050c7d88 ffff888016c41a00 [ 163.509187][ T5431] raw: ffff888142f81400 0000000000100008 00000001ffffffff 0000000000000000 [ 163.517794][ T5431] page dumped because: kasan: bad access detected [ 163.524213][ T5431] page_owner tracks the page as allocated [ 163.529952][ T5431] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2756684369, free_ts 0 [ 163.544812][ T5431] get_page_from_freelist+0x1bbd/0x1ca0 [ 163.550374][ T5431] __alloc_pages+0x1ee/0x480 [ 163.554968][ T5431] alloc_page_interleave+0x24/0x1e0 [ 163.560172][ T5431] new_slab+0xc0/0x4b0 [ 163.564254][ T5431] ___slab_alloc+0x80a/0xdd0 [ 163.568841][ T5431] __kmalloc_track_caller+0x1cb/0x330 [ 163.574209][ T5431] krealloc+0x5a/0xf0 [ 163.578191][ T5431] add_sysfs_param+0xe8/0x930 [ 163.582872][ T5431] kernel_add_sysfs_param+0xaf/0x120 [ 163.588152][ T5431] param_sysfs_builtin+0x183/0x200 [ 163.593265][ T5431] param_sysfs_init+0x66/0x70 [ 163.597939][ T5431] do_one_initcall+0x272/0x730 [ 163.602703][ T5431] do_initcall_level+0x137/0x1f0 [ 163.607639][ T5431] do_initcalls+0x4b/0x90 [ 163.611979][ T5431] kernel_init_freeable+0x3e9/0x570 [ 163.617280][ T5431] kernel_init+0x19/0x1b0 [ 163.621610][ T5431] page_owner free stack trace missing [ 163.626971][ T5431] [ 163.629288][ T5431] Memory state around the buggy address: [ 163.634909][ T5431] ffff888142f81280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 163.642964][ T5431] ffff888142f81300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.651042][ T5431] >ffff888142f81380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 163.659098][ T5431] ^ [ 163.664984][ T5431] ffff888142f81400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.673041][ T5431] ffff888142f81480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 163.681098][ T5431] ================================================================== [ 163.689151][ T5431] Disabling lock debugging due to kernel taint [ 163.699288][ T5431] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.706538][ T5431] CPU: 0 PID: 5431 Comm: syz.4.341 Tainted: G B syzkaller #0 [ 163.715247][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.725363][ T5431] Call Trace: [ 163.728690][ T5431] [ 163.731638][ T5431] dump_stack_lvl+0x188/0x250 [ 163.736334][ T5431] ? show_regs_print_info+0x20/0x20 [ 163.741546][ T5431] ? load_image+0x400/0x400 [ 163.746076][ T5431] panic+0x2e5/0x810 [ 163.749991][ T5431] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.756167][ T5431] ? bpf_jit_dump+0xd0/0xd0 [ 163.760688][ T5431] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 163.766685][ T5431] ? _raw_spin_unlock+0x40/0x40 [ 163.771558][ T5431] ? ax25_dev_device_down+0x35e/0x520 [ 163.776943][ T5431] check_panic_on_warn+0x80/0xa0 [ 163.781895][ T5431] ? ax25_dev_device_down+0x35e/0x520 [ 163.787292][ T5431] end_report+0x6d/0xf0 [ 163.791490][ T5431] kasan_report+0x102/0x130 [ 163.796009][ T5431] ? ax25_dev_device_down+0x35e/0x520 [ 163.801396][ T5431] kasan_check_range+0x235/0x290 [ 163.806350][ T5431] ax25_dev_device_down+0x35e/0x520 [ 163.811564][ T5431] ax25_device_event+0x4b4/0x4f0 [ 163.816518][ T5431] raw_notifier_call_chain+0xcb/0x160 [ 163.821910][ T5431] __dev_notify_flags+0x158/0x300 [ 163.826957][ T5431] ? __dev_change_flags+0x6a0/0x6a0 [ 163.832177][ T5431] ? __dev_change_flags+0x4d0/0x6a0 [ 163.837415][ T5431] ? dev_get_flags+0x1c0/0x1c0 [ 163.842191][ T5431] ? __mutex_lock_common+0x465/0x2400 [ 163.847597][ T5431] dev_change_flags+0xe3/0x1a0 [ 163.852375][ T5431] dev_ifsioc+0x130/0xd50 [ 163.856715][ T5431] ? dev_ioctl+0xe30/0xe30 [ 163.861144][ T5431] ? apparmor_capable+0x12c/0x190 [ 163.866180][ T5431] ? full_name_hash+0x8e/0xe0 [ 163.870870][ T5431] dev_ioctl+0x545/0xe30 [ 163.875122][ T5431] ? _copy_from_user+0x111/0x170 [ 163.880086][ T5431] sock_do_ioctl+0x245/0x320 [ 163.884782][ T5431] ? sock_show_fdinfo+0xb0/0xb0 [ 163.889647][ T5431] sock_ioctl+0x4d2/0x710 [ 163.893990][ T5431] ? sock_poll+0x410/0x410 [ 163.898421][ T5431] ? bpf_lsm_file_ioctl+0x5/0x10 [ 163.903380][ T5431] ? security_file_ioctl+0x7c/0xa0 [ 163.908501][ T5431] ? sock_poll+0x410/0x410 [ 163.912939][ T5431] __se_sys_ioctl+0xfa/0x170 [ 163.917651][ T5431] do_syscall_64+0x4c/0xa0 [ 163.922104][ T5431] ? clear_bhb_loop+0x30/0x80 [ 163.926808][ T5431] ? clear_bhb_loop+0x30/0x80 [ 163.931503][ T5431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.937408][ T5431] RIP: 0033:0x7f7c27bd0eb9 [ 163.941841][ T5431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.961456][ T5431] RSP: 002b:00007f7c25e2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.969892][ T5431] RAX: ffffffffffffffda RBX: 00007f7c27e4bfa0 RCX: 00007f7c27bd0eb9 [ 163.977879][ T5431] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a [ 163.985861][ T5431] RBP: 00007f7c27c3ec1f R08: 0000000000000000 R09: 0000000000000000 [ 163.993859][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.001844][ T5431] R13: 00007f7c27e4c038 R14: 00007f7c27e4bfa0 R15: 00007ffc3d5a01c8 [ 164.009836][ T5431] [ 164.013204][ T5431] Kernel Offset: disabled [ 164.017685][ T5431] Rebooting in 86400 seconds..