last executing test programs: 48.073288951s ago: executing program 4 (id=250): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) close(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001040)="0c5bbf", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="ff0a29", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000000a80)='D', 0x1}], 0x1}}], 0x4, 0x40140c4) 47.816637346s ago: executing program 4 (id=253): socket$inet6(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) userfaultfd(0x801) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000080)}) 46.857181742s ago: executing program 4 (id=255): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x482000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_XEN_HVM(r2, 0x4068aea3, 0x0) 45.832877241s ago: executing program 4 (id=257): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01310100000000003800c09d0e00010069703665727370616e000000240002801440050000400000000000000000ffff7f00000104001200"], 0x58}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40040000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, r11, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 45.33221569s ago: executing program 4 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r7, 0x3) accept4(r7, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r3, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x33b600, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x64, r1, 0x10, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 44.31495429s ago: executing program 4 (id=260): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d0200"], &(0x7f0000000040)=""/202, 0x42, 0xca, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={0x0}) 29.296898961s ago: executing program 32 (id=260): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d0200"], &(0x7f0000000040)=""/202, 0x42, 0xca, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={0x0}) 18.180234066s ago: executing program 1 (id=325): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f0000000100), 0x0, 0x0) 14.469174911s ago: executing program 1 (id=338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 9.969797872s ago: executing program 1 (id=359): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$sw_sync_info(0xffffff9c, &(0x7f00000001c0), 0x8500, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r1, 0x0, 0x0) shutdown(r1, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.174468018s ago: executing program 1 (id=364): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 7.349488504s ago: executing program 2 (id=369): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c0001"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 7.295581507s ago: executing program 0 (id=370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 7.269359839s ago: executing program 1 (id=371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 7.179721804s ago: executing program 3 (id=372): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x482000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_XEN_HVM(r2, 0x4068aea3, 0x0) 7.095898779s ago: executing program 2 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0x8}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x8, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x80, 0x2, 0x6, 0xb, 0x2, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0xff, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) r3 = fanotify_init(0x200, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x2400c040) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(r3, 0x1, 0x106e, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2) 6.829150705s ago: executing program 3 (id=375): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) recvfrom$ax25(r2, &(0x7f0000000280)=""/102, 0x66, 0x40001000, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) recvfrom$ax25(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 6.668517253s ago: executing program 2 (id=376): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) openat$kvm(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x397) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000540), 0x24, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r5}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 6.396606239s ago: executing program 0 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, 0x0}, 0x5) 6.21787184s ago: executing program 5 (id=378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 6.054406109s ago: executing program 3 (id=379): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000340)={0x3, 0x5, 0x0, 0x824a, 0x2}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4004) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.526317058s ago: executing program 2 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0xffff}, {}, {0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.525630788s ago: executing program 0 (id=381): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 4.438897953s ago: executing program 5 (id=382): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000700)}, 0x64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000580)=""/174, 0xff56) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40c1) 4.296836161s ago: executing program 2 (id=383): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) syz_emit_vhci(&(0x7f0000002bc0)=ANY=[@ANYBLOB="02c90010000c000500170508"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f) set_mempolicy(0x3, 0x0, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)={0x20, 0x52, 0x1, 0x3, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}]}, 0x20}}, 0x0) 3.202411185s ago: executing program 3 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r7, 0x3) accept4(r7, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r3, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x33b600, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x64, r1, 0x10, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.892184723s ago: executing program 0 (id=385): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4f}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000045}, 0x5000) sendfile(r4, r4, 0x0, 0x200900) syz_extract_tcp_res(&(0x7f0000000580), 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x8, 0x44, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@rr={0x7, 0xb, 0x35, [@broadcast, @empty]}]}}, {{0x4e22, 0x4e23, r5, 0x41424344, 0x1, 0x0, 0x9, 0xc2, 0x5, 0x0, 0x9, {[@window={0x3, 0x3}, @generic={0x1, 0xa, "ff9a30062b66ab5f"}]}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.888838933s ago: executing program 5 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0x8}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x8, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x80, 0x2, 0x6, 0xb, 0x2, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0xff, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) r3 = fanotify_init(0x200, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x2400c040) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(r3, 0x1, 0x106e, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2) 2.76079246s ago: executing program 2 (id=387): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.686619703s ago: executing program 3 (id=388): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r3) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ftruncate(r4, 0x5) 1.592896628s ago: executing program 5 (id=389): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) close(0x4) 1.299573695s ago: executing program 5 (id=390): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) openat$kvm(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x397) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r5}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.287966706s ago: executing program 0 (id=391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 207.822218ms ago: executing program 0 (id=392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 169.21495ms ago: executing program 3 (id=393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)}, 0x5) 167.201701ms ago: executing program 1 (id=394): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f00000001c0)) r3 = accept4$inet6(r2, 0x0, 0x0, 0x80000) recvfrom$l2tp6(r3, 0x0, 0x0, 0x10061, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x20) 0s ago: executing program 5 (id=395): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 47.962337][ T4173] cgroup: Unknown subsys name 'net' [ 48.095203][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.287543][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.639729][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 50.682570][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 50.706664][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 50.738920][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.776437][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 50.846004][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.853220][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.862279][ T4186] device bridge_slave_0 entered promiscuous mode [ 50.873708][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.880899][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.888844][ T4186] device bridge_slave_1 entered promiscuous mode [ 50.949071][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.956315][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.964546][ T4185] device bridge_slave_0 entered promiscuous mode [ 50.971823][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.978865][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.987187][ T4187] device bridge_slave_0 entered promiscuous mode [ 51.000022][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.007118][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.015126][ T4187] device bridge_slave_1 entered promiscuous mode [ 51.022057][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.029113][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.039251][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.048464][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.057731][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.064898][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.072670][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.090817][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.097868][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.105599][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.114056][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.135190][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.142334][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.149893][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.171553][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.192820][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.199878][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.207995][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.221607][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.232680][ T4186] team0: Port device team_slave_0 added [ 51.245981][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.263203][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.273872][ T4186] team0: Port device team_slave_1 added [ 51.286917][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.302316][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.320646][ T4187] team0: Port device team_slave_0 added [ 51.334112][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.354405][ T4187] team0: Port device team_slave_1 added [ 51.360917][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.367834][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.393748][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.411696][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.446031][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.453112][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.479171][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.492009][ T4185] team0: Port device team_slave_0 added [ 51.503517][ T4191] team0: Port device team_slave_0 added [ 51.516365][ T4194] team0: Port device team_slave_0 added [ 51.524631][ T4194] team0: Port device team_slave_1 added [ 51.531644][ T4185] team0: Port device team_slave_1 added [ 51.538896][ T4191] team0: Port device team_slave_1 added [ 51.545013][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.552168][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.578082][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.595787][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.602766][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.628679][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.682784][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.689742][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.716673][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.738183][ T4186] device hsr_slave_0 entered promiscuous mode [ 51.744784][ T4186] device hsr_slave_1 entered promiscuous mode [ 51.752007][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.758942][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.790093][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.809199][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.816299][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.842307][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.853984][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.861178][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.887216][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.899104][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.906271][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.932461][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.962304][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.969253][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.995214][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.011881][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.018728][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.026032][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.033864][ T4187] Cannot create hsr debugfs directory [ 52.079189][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.086103][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.093908][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.102342][ T4191] Cannot create hsr debugfs directory [ 52.111082][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.117656][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.124545][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.132233][ T4185] Cannot create hsr debugfs directory [ 52.179223][ T4194] device hsr_slave_0 entered promiscuous mode [ 52.186219][ T4194] device hsr_slave_1 entered promiscuous mode [ 52.192944][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.200543][ T4194] Cannot create hsr debugfs directory [ 52.421443][ T2862] Bluetooth: hci2: command 0x0409 tx timeout [ 52.430635][ T1326] Bluetooth: hci0: command 0x0409 tx timeout [ 52.436964][ T1326] Bluetooth: hci1: command 0x0409 tx timeout [ 52.437095][ T2862] Bluetooth: hci3: command 0x0409 tx timeout [ 52.451620][ T2862] Bluetooth: hci4: command 0x0409 tx timeout [ 52.473155][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.484134][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.492826][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.502400][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.543769][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.565726][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.576609][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.587912][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.628293][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.638187][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.655045][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.677015][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.698636][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.720958][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.737388][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.746222][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.763735][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.770861][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.789122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.798491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.807287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.816284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.829204][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.836429][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.845226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.879722][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.912232][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.921458][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.929810][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.936880][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.946384][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.955493][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.966793][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.976776][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.992652][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.003511][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.026956][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.045817][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.053787][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.062622][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.074281][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.082621][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.091716][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.100126][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.107226][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.115264][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.123088][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.146125][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.154895][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.166015][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.173080][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.185676][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.194429][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.207369][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.216598][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.244352][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.255685][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.272155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.282433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.293081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.301875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.310052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.318547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.326816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.335794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.344381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.352017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.386304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.395647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.406222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.416912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.427271][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.441276][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.449831][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.485600][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.498659][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.515837][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.527493][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.538432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.551003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.574516][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.590834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.602599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.611594][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.618649][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.629560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.638206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.647090][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.654174][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.662613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.671393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.679645][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.686738][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.696229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.705642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.714118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.738867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.747647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.756866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.765989][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.773066][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.780977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.789889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.798363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.806894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.815220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.827779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.838787][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.848398][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.869229][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.879727][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.893990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.903105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.912330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.921408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.929743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.938394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.948649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.957256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.965098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.974479][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.989036][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.004282][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.011852][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.019219][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.027624][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.042225][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.053367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.064662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.081902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.095820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.105763][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.112860][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.135805][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.152661][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.184020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.192698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.201836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.210508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.218850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.228107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.236900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.245652][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.252712][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.262311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.270797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.279159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.309556][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.325599][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.342670][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.360462][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.368995][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.384180][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.396361][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.405093][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.413805][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.422866][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.431623][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.439348][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.477051][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.486774][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.500664][ T2862] Bluetooth: hci4: command 0x041b tx timeout [ 54.506825][ T2862] Bluetooth: hci3: command 0x041b tx timeout [ 54.520953][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.528410][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.536895][ T2862] Bluetooth: hci1: command 0x041b tx timeout [ 54.543874][ T2862] Bluetooth: hci2: command 0x041b tx timeout [ 54.549947][ T2862] Bluetooth: hci0: command 0x041b tx timeout [ 54.553764][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.588812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.599060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.609011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.622945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.631554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.639189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.656551][ T4186] device veth0_vlan entered promiscuous mode [ 54.666724][ T4187] device veth0_vlan entered promiscuous mode [ 54.680230][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.688161][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.696202][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.704580][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.713591][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.721501][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.735208][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.748950][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.765061][ T4187] device veth1_vlan entered promiscuous mode [ 54.772578][ T4186] device veth1_vlan entered promiscuous mode [ 54.779194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.788241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.796521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.804503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.818789][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.828168][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.869398][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.878174][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.888022][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.896333][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.911181][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.918877][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.941723][ T4187] device veth0_macvtap entered promiscuous mode [ 54.957008][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.965161][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.974256][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.985010][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.994938][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.003556][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.014735][ T4191] device veth0_vlan entered promiscuous mode [ 55.025594][ T4194] device veth0_vlan entered promiscuous mode [ 55.034592][ T4187] device veth1_macvtap entered promiscuous mode [ 55.044039][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.051847][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.059408][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.068343][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.088486][ T4194] device veth1_vlan entered promiscuous mode [ 55.102910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.111741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.120916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.130737][ T4191] device veth1_vlan entered promiscuous mode [ 55.149859][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.159113][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.167027][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.175540][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.183908][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.192202][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.200925][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.209489][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.218325][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.227029][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.235127][ T4185] device veth0_vlan entered promiscuous mode [ 55.248725][ T4186] device veth0_macvtap entered promiscuous mode [ 55.257124][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.279304][ T4194] device veth0_macvtap entered promiscuous mode [ 55.288816][ T4185] device veth1_vlan entered promiscuous mode [ 55.297971][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.307352][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.318882][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.328212][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.336760][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.345634][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.354523][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.364212][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.375260][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.384351][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.393264][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.402590][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.415249][ T4191] device veth0_macvtap entered promiscuous mode [ 55.425174][ T4191] device veth1_macvtap entered promiscuous mode [ 55.435188][ T4186] device veth1_macvtap entered promiscuous mode [ 55.446563][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.454695][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.463708][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.472927][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.491437][ T4194] device veth1_macvtap entered promiscuous mode [ 55.518417][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.529203][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.545080][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.576112][ T4185] device veth0_macvtap entered promiscuous mode [ 55.584235][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.594350][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.602580][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.612180][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.621889][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.630200][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.638917][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.651959][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.666291][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.676704][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.687386][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.698818][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.713590][ T4185] device veth1_macvtap entered promiscuous mode [ 55.728388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.740797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.749218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.767028][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.779989][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.794313][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.813071][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.823685][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.833626][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.844133][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.854471][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.865149][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.876077][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.887265][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.899753][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.909770][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.920936][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.932405][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.943466][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.952446][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.961584][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.970717][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.980647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.989232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.998180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.006733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.015455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.024292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.036316][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.045185][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.054406][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.063392][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.092817][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.103759][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.113757][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.124367][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.134313][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.145645][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.156670][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.170473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.179694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.190930][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.202250][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.212408][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.225484][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.235324][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.246023][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.256022][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.266655][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.277854][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.287715][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.298730][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.303088][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.311692][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.316855][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.334439][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.345549][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.355982][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.366208][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.376635][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.387350][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.402946][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.411999][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.422448][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.431224][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.441934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.449570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.458195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.466990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.475733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.497056][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.506932][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.516016][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.524922][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.568410][ T437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.581087][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 56.587237][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 56.595459][ T437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.603260][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 56.610849][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 56.618351][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.633084][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 56.729808][ T437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.779461][ T437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.803863][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.813421][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.835206][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.845035][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.849241][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.856602][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.869975][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.913160][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.969816][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.135924][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.196033][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.340512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 57.460816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 57.545335][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.747460][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.821788][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.851979][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.862819][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.869968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.878619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.894315][ T4304] device syzkaller0 entered promiscuous mode [ 57.903046][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.920447][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.928371][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.945635][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.992936][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.046202][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.364681][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 58.466837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.116251][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 59.140429][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.183997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.388429][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.397970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.538174][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 59.544480][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 59.550829][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 59.644619][ T4318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.675689][ T4318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.692323][ T4324] device syzkaller0 entered promiscuous mode [ 59.720418][ T4318] 0: reclassify loop, rule prio 0, protocol 800 [ 60.196194][ T4323] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.110367][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 61.724583][ T4323] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.792098][ T4323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.801931][ T4323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.811901][ T4323] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.830447][ T4323] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.839487][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.066873][ T4354] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 62.073615][ T4354] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.111562][ T4323] usb 3-1: GET_CAPABILITIES returned 0 [ 62.122916][ T4323] usbtmc 3-1:16.0: can't read capabilities [ 62.193436][ T4357] binder: Binderfs stats mode cannot be changed during a remount [ 62.208878][ T4354] vhci_hcd vhci_hcd.0: Device attached [ 62.370381][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.388083][ T4254] usb 3-1: USB disconnect, device number 2 [ 62.420773][ T1326] vhci_hcd: vhci_device speed not set [ 62.502456][ T1326] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 65.369030][ T4381] ======================================================= [ 65.369030][ T4381] WARNING: The mand mount option has been deprecated and [ 65.369030][ T4381] and is ignored by this kernel. Remove the mand [ 65.369030][ T4381] option from the mount to silence this warning. [ 65.369030][ T4381] ======================================================= [ 65.404004][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.428770][ T4381] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.592080][ T4202] Bluetooth: Wrong link type (-22) [ 66.599188][ T4384] Zero length message leads to an empty skb [ 66.831132][ T4355] vhci_hcd: connection reset by peer [ 66.837846][ T4267] vhci_hcd: stop threads [ 66.842678][ T4267] vhci_hcd: release socket [ 66.872244][ T4267] vhci_hcd: disconnect device [ 66.983714][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.630488][ T1326] vhci_hcd: vhci_device speed not set [ 68.156076][ T4405] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 69.428854][ T4433] overlayfs: overlapping lowerdir path [ 69.445517][ T4433] overlayfs: overlapping lowerdir path [ 70.373068][ T4435] process 'syz.2.38' launched '/dev/fd/4' with NULL argv: empty string added [ 71.226195][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.232963][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.695230][ T4474] device syzkaller0 entered promiscuous mode [ 75.855881][ T4481] overlayfs: overlapping lowerdir path [ 75.912334][ T4482] overlayfs: overlapping lowerdir path [ 76.433337][ T21] cfg80211: failed to load regulatory.db [ 81.737615][ T4527] overlayfs: overlapping lowerdir path [ 81.752766][ T4527] overlayfs: overlapping lowerdir path [ 84.419998][ T4202] Bluetooth: Wrong link type (-22) [ 88.568510][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 89.693238][ T4592] device hsr_slave_1 left promiscuous mode [ 92.603079][ T4654] device syzkaller0 entered promiscuous mode [ 93.681298][ T4202] Bluetooth: Wrong link type (-22) [ 95.440231][ T4682] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 95.511406][ T4682] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 96.383649][ T4682] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 96.401083][ T4682] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 96.409578][ T4682] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 96.562844][ T4695] device syzkaller0 entered promiscuous mode [ 98.489604][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 98.512188][ T4710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.116'. [ 98.537292][ T4710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.116'. [ 98.574455][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 98.626931][ T4710] device syzkaller0 entered promiscuous mode [ 98.652575][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 98.743141][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 99.598665][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 99.819385][ T4733] overlayfs: overlapping lowerdir path [ 101.023583][ T4738] device syzkaller0 entered promiscuous mode [ 101.356188][ T4202] Bluetooth: Wrong link type (-22) [ 102.313601][ T4757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.132'. [ 102.341361][ T4323] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 102.373728][ T4323] Bluetooth: hci3: Injecting HCI hardware error event [ 102.397394][ T4757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.132'. [ 102.416713][ T4202] Bluetooth: hci3: hardware error 0x00 [ 102.447350][ T4761] device syzkaller0 entered promiscuous mode [ 103.383726][ T4776] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 104.447339][ T4782] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 104.490038][ T4782] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 104.511817][ T4782] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 104.532848][ T4782] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 105.068636][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 105.161601][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 105.173666][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 105.468006][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 105.479124][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.731667][ T4818] netlink: 68 bytes leftover after parsing attributes in process `syz.2.146'. [ 108.625421][ T4833] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 108.727508][ T4833] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 108.776548][ T4833] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 109.061426][ T2862] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 109.079960][ T2862] Bluetooth: hci1: Injecting HCI hardware error event [ 109.121286][ T4200] Bluetooth: hci1: hardware error 0x00 [ 110.484283][ T4862] IPVS: length: 528 != 8 [ 110.495591][ T4862] 9pnet_virtio: no channels available for device syz [ 112.710192][ T4875] binder: 4871:4875 ioctl 4018620d 0 returned -22 [ 112.840378][ T2862] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 112.868107][ T4881] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 113.073099][ T4881] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 113.240609][ T2862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 113.466587][ T2862] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 113.584736][ T2862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.682334][ T2862] usb 5-1: config 0 descriptor?? [ 114.550574][ T4874] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.032750][ T2862] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 115.601631][ T2862] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 115.608850][ T2862] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 115.617373][ T2862] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 115.625424][ T2862] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 115.638301][ T2862] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 115.654602][ T2862] usb 5-1: USB disconnect, device number 2 [ 116.005360][ T4916] fido_id[4916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 116.495044][ T4927] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 116.766611][ T4939] tipc: Started in network mode [ 116.794670][ T4939] tipc: Node identity 12d536f66ed3, cluster identity 4711 [ 116.824577][ T4939] tipc: Enabled bearer , priority 0 [ 116.850815][ T4941] device syzkaller0 entered promiscuous mode [ 116.951977][ T4939] tipc: Resetting bearer [ 117.983456][ T4938] tipc: Resetting bearer [ 118.041089][ T4938] tipc: Disabling bearer [ 118.073455][ T2862] tipc: Node number set to 2080782070 [ 119.457768][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 120.875873][ T4964] sched: RT throttling activated [ 120.907331][ T4961] device hsr_slave_1 left promiscuous mode [ 123.635815][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 123.659274][ T4200] Bluetooth: Wrong link type (-22) [ 123.686410][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 124.867790][ T5004] device syzkaller0 entered promiscuous mode [ 126.697982][ T5021] IPVS: length: 528 != 8 [ 126.706629][ T5021] 9pnet_virtio: no channels available for device syz [ 128.257957][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.217'. [ 128.322244][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.217'. [ 128.420918][ T2862] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.800823][ T2862] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 128.915312][ T2862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.971540][ T2862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.982725][ T2862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.000796][ T2862] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.013399][ T2862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.045793][ T2862] usb 3-1: config 0 descriptor?? [ 132.889603][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.895998][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.010454][ T2862] usbhid 3-1:0.0: can't add hid device: -71 [ 133.017554][ T2862] usbhid: probe of 3-1:0.0 failed with error -71 [ 133.516097][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 133.643480][ T2862] usb 3-1: USB disconnect, device number 3 [ 134.270944][ T5065] device hsr_slave_1 left promiscuous mode [ 137.259991][ T5090] tipc: Enabled bearer , priority 0 [ 137.286347][ T5090] device syzkaller0 entered promiscuous mode [ 137.321600][ T5090] tipc: Resetting bearer [ 137.339278][ T5089] tipc: Resetting bearer [ 137.600428][ T4235] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 138.207454][ T5089] tipc: Disabling bearer [ 138.470923][ T5104] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 138.477540][ T5104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 138.560544][ T4235] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 138.618324][ T5104] vhci_hcd vhci_hcd.0: Device attached [ 138.626890][ T4235] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.646411][ T5101] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 138.653028][ T5101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.682375][ T4235] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 138.789347][ T5101] vhci_hcd vhci_hcd.0: Device attached [ 138.796312][ T4235] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 138.819023][ T4323] vhci_hcd: vhci_device speed not set [ 138.824495][ T4235] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.843058][ T5113] 9pnet_virtio: no channels available for device syz [ 139.273070][ T4323] usb 41-2: new full-speed USB device number 2 using vhci_hcd [ 139.281615][ T4235] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 139.326874][ T5105] vhci_hcd: connection reset by peer [ 139.332631][ T4297] vhci_hcd: stop threads [ 139.347685][ T4297] vhci_hcd: release socket [ 139.357423][ T5102] vhci_hcd: connection closed [ 139.360769][ T4297] vhci_hcd: disconnect device [ 139.377411][ T4235] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 139.400425][ T4235] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 139.437574][ T4297] vhci_hcd: stop threads [ 139.447935][ T4235] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 139.543237][ T4297] vhci_hcd: release socket [ 139.548419][ T4297] vhci_hcd: disconnect device [ 139.820519][ T4235] usb 3-1: string descriptor 0 read error: -22 [ 139.826754][ T4235] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 139.836118][ T4345] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.875659][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.961812][ T4235] adutux 3-1:168.0: interrupt endpoints not found [ 140.100349][ T4345] usb 4-1: Using ep0 maxpacket: 8 [ 140.152081][ T5126] IPVS: length: 528 != 8 [ 140.173146][ T5126] 9pnet_virtio: no channels available for device syz [ 140.276512][ T4294] usb 3-1: USB disconnect, device number 4 [ 140.420442][ T4345] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 140.460488][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 140.524292][ T4345] usb 4-1: Product: syz [ 140.548533][ T4345] usb 4-1: Manufacturer: syz [ 140.566985][ T4345] usb 4-1: SerialNumber: syz [ 140.620065][ T4345] usb 4-1: config 0 descriptor?? [ 142.451929][ T4345] usb 4-1: USB disconnect, device number 2 [ 142.545809][ T5138] device syzkaller0 entered promiscuous mode [ 142.699037][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.514351][ T5148] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.420381][ T4323] vhci_hcd: vhci_device speed not set [ 146.024546][ T5171] device syzkaller0 entered promiscuous mode [ 146.315151][ T5177] IPVS: length: 528 != 8 [ 150.470375][ T4294] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.370522][ T4294] usb 3-1: Using ep0 maxpacket: 8 [ 151.490691][ T4247] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.511196][ T4294] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.544090][ T4294] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.607989][ T4294] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.673322][ T4294] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.740481][ T4247] usb 2-1: Using ep0 maxpacket: 32 [ 151.763710][ T4294] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.819283][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.860645][ T4247] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 151.885046][ T4247] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 152.007772][ T4247] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 152.101263][ T4247] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 152.156494][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.210488][ T4294] usb 3-1: GET_CAPABILITIES returned 0 [ 152.216049][ T4294] usbtmc 3-1:16.0: can't read capabilities [ 152.259124][ T5210] device syzkaller0 entered promiscuous mode [ 152.350670][ T4247] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 152.371313][ T4247] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 152.379795][ T4247] usb 2-1: Product: syz [ 152.404692][ T4247] usb 2-1: Manufacturer: syz [ 152.409337][ T4247] usb 2-1: SerialNumber: syz [ 152.445933][ T4247] usb 2-1: config 0 descriptor?? [ 152.459566][ T4228] usb 3-1: USB disconnect, device number 5 [ 152.509559][ T4247] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 152.550072][ T4247] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 152.745355][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.030363][ T1111] usb 4-1: Using ep0 maxpacket: 8 [ 153.162106][ T1111] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.245997][ T1111] usb 4-1: config 0 has no interface number 0 [ 153.260315][ T1111] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 153.287143][ T1111] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 153.334922][ T1111] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.390051][ T1111] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.400204][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.640502][ T4247] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.890374][ T4247] usb 3-1: Using ep0 maxpacket: 8 [ 153.962268][ T4235] usb 2-1: USB disconnect, device number 2 [ 154.171233][ T4247] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 154.223107][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.308970][ T4247] usb 3-1: Product: syz [ 154.375694][ T4247] usb 3-1: Manufacturer: syz [ 154.424694][ T4247] usb 3-1: SerialNumber: syz [ 154.498206][ T4247] usb 3-1: config 0 descriptor?? [ 154.549555][ T1111] usb 4-1: config 0 descriptor?? [ 154.574562][ T4235] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 154.582286][ T5230] 9pnet_virtio: no channels available for device syz [ 154.591979][ T1111] ldusb 4-1:0.55: Interrupt in endpoint not found [ 155.316788][ T4247] usb 3-1: USB disconnect, device number 6 [ 155.871772][ T4345] usb 4-1: USB disconnect, device number 3 [ 155.979487][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.740361][ T4247] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.101020][ T4247] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 158.120169][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.240559][ T4247] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 158.249756][ T4247] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 158.292600][ T4247] usb 2-1: Manufacturer: syz [ 158.318339][ T4247] usb 2-1: config 0 descriptor?? [ 158.470376][ T4247] rc_core: IR keymap rc-hauppauge not found [ 158.476349][ T4247] Registered IR keymap rc-empty [ 158.510018][ T4247] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 158.543418][ T4247] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 158.603581][ T4247] usb 2-1: USB disconnect, device number 3 [ 161.268923][ T5289] overlayfs: overlapping lowerdir path [ 161.377464][ T5293] overlayfs: overlapping lowerdir path [ 161.740407][ T4247] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.070370][ T4247] usb 2-1: Using ep0 maxpacket: 32 [ 162.190529][ T4247] usb 2-1: config 0 has no interfaces? [ 162.227459][ T4247] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 162.600467][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.735185][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 162.765180][ T4247] usb 2-1: config 0 descriptor?? [ 162.899660][ T5310] device hsr_slave_1 left promiscuous mode [ 163.013373][ T4235] usb 2-1: USB disconnect, device number 4 [ 163.319929][ T5316] chnl_net:caif_netlink_parms(): no params data found [ 163.440209][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.457881][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.477032][ T5316] device bridge_slave_0 entered promiscuous mode [ 163.574566][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.394553][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.402373][ T5316] device bridge_slave_1 entered promiscuous mode [ 164.428937][ T5316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.439854][ T5316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.474093][ T5316] team0: Port device team_slave_0 added [ 164.483063][ T5316] team0: Port device team_slave_1 added [ 164.519052][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.526348][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.552461][ T5316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.565470][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.573508][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.624396][ T5316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.705000][ T5334] binder: 5332:5334 ioctl 0 200000000040 returned -22 [ 165.060339][ T4345] Bluetooth: hci5: command 0x0409 tx timeout [ 165.919084][ T5316] device hsr_slave_0 entered promiscuous mode [ 166.008767][ T5316] device hsr_slave_1 entered promiscuous mode [ 166.059772][ T5316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.118076][ T5316] Cannot create hsr debugfs directory [ 166.298632][ T5340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.770098][ T5316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.822571][ T5316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.851588][ T5316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.964758][ T5316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.965925][ T4345] Bluetooth: hci5: command 0x041b tx timeout [ 169.285232][ T5316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.412250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.454840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.471851][ T5316] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.548283][ T5374] 9pnet_virtio: no channels available for device syz [ 169.961891][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.998675][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.030506][ T4345] Bluetooth: hci5: command 0x040f tx timeout [ 170.114770][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.121936][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.150658][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.229710][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.360812][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.404743][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.411849][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.436953][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.566831][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.619114][ T5383] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 170.642434][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.678207][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.767705][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.780326][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.795635][ T5316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.807157][ T5316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.824469][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.848178][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.867010][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.916986][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.956524][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.981484][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 171.008575][ T5388] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.017724][ T5388] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.026686][ T5388] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.035400][ T5388] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.174266][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.190166][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 171.364625][ T5316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.405468][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.435809][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.885396][ T5402] tipc: Started in network mode [ 171.903643][ T5402] tipc: Node identity 22594356076e, cluster identity 4711 [ 172.298220][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 172.910877][ T5402] tipc: Enabled bearer , priority 0 [ 172.953491][ T5407] device syzkaller0 entered promiscuous mode [ 173.032603][ T5402] tipc: Resetting bearer [ 173.057416][ T5401] tipc: Resetting bearer [ 173.089658][ T5401] tipc: Disabling bearer [ 173.205280][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.222896][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.325144][ T5316] device veth0_vlan entered promiscuous mode [ 173.354692][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.369162][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.399292][ T5316] device veth1_vlan entered promiscuous mode [ 173.417871][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.446873][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.455107][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.478573][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.507412][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.536608][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.548338][ T5423] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 173.563639][ T5316] device veth0_macvtap entered promiscuous mode [ 173.606870][ T5316] device veth1_macvtap entered promiscuous mode [ 173.644694][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.665594][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.690368][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.708058][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.741051][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.788491][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.809438][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.837015][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.866724][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.905890][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.966518][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.027295][ T5316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.110929][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.154802][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.196585][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.242448][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.284689][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.309423][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.320355][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 174.335042][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.349912][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.366509][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.377467][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.399281][ T5316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.460714][ T1108] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.469104][ T1108] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.469247][ T5430] device syzkaller0 entered promiscuous mode [ 174.490853][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.493174][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.499914][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.532781][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.556011][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.567278][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.576341][ T1108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.576850][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.596666][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.597153][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.630084][ T1108] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.652694][ T5316] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.670607][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.678713][ T5316] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.717066][ T5316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.718190][ T1108] usb 2-1: config 0 descriptor?? [ 174.727789][ T5316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.052311][ T1108] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 175.082104][ T1108] usb 2-1: USB disconnect, device number 5 [ 175.091301][ T1108] usblp0: removed [ 175.225687][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.278050][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.350481][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.360683][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.382414][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.443231][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.508989][ T5456] IPVS: length: 528 != 8 [ 175.514935][ T5456] 9pnet_virtio: no channels available for device syz [ 175.680684][ T4345] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 176.779165][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 176.797139][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 176.940544][ T5463] syz.2.337 uses obsolete (PF_INET,SOCK_PACKET) [ 179.283530][ T5502] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 179.397629][ T5502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.548199][ T5505] bond1: (slave ip6erspan0): making interface the new active one [ 179.588646][ T5505] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 179.626691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 179.659272][ T5505] syz.3.348 (5505) used greatest stack depth: 19760 bytes left [ 180.111707][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 181.050077][ T5529] IPVS: length: 528 != 8 [ 181.071045][ T5529] 9pnet_virtio: no channels available for device syz [ 181.276071][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 181.349140][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 181.441957][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 181.453223][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 181.463742][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 182.630989][ T5569] device syzkaller0 entered promiscuous mode [ 185.512501][ T5619] device syzkaller0 entered promiscuous mode [ 186.930652][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 188.405590][ T5639] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.863982][ T5651] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 189.354990][ T5657] binder: 5644:5657 ioctl 0 200000000040 returned -22 [ 189.967634][ T5660] IPVS: length: 528 != 8 [ 189.977617][ T5660] 9pnet_virtio: no channels available for device syz [ 191.540763][ C1] ================================================================== [ 191.549160][ C1] BUG: KASAN: use-after-free in ax25_t1timer_expiry+0xec/0x110 [ 191.556724][ C1] Read of size 4 at addr ffff88814b169c50 by task syz.1.394/5673 [ 191.564442][ C1] [ 191.566781][ C1] CPU: 1 PID: 5673 Comm: syz.1.394 Not tainted syzkaller #0 [ 191.574058][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.584118][ C1] Call Trace: [ 191.587395][ C1] [ 191.590241][ C1] dump_stack_lvl+0x188/0x250 [ 191.594928][ C1] ? show_regs_print_info+0x20/0x20 [ 191.600139][ C1] ? _printk+0xda/0x130 [ 191.604299][ C1] ? ax25_t1timer_expiry+0xec/0x110 [ 191.609511][ C1] ? load_image+0x400/0x400 [ 191.614016][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 191.619489][ C1] print_address_description+0x60/0x2d0 [ 191.625047][ C1] ? ax25_t1timer_expiry+0xec/0x110 [ 191.630244][ C1] kasan_report+0xdf/0x130 [ 191.634692][ C1] ? ax25_t1timer_expiry+0xec/0x110 [ 191.639903][ C1] ? ax25_heartbeat_expiry+0x130/0x130 [ 191.645368][ C1] ax25_t1timer_expiry+0xec/0x110 [ 191.650402][ C1] call_timer_fn+0x17b/0x540 [ 191.654995][ C1] ? ax25_heartbeat_expiry+0x130/0x130 [ 191.660459][ C1] ? __run_timers+0x7f0/0x7f0 [ 191.665150][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 191.670386][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 191.675601][ C1] ? ax25_heartbeat_expiry+0x130/0x130 [ 191.681056][ C1] __run_timers+0x53a/0x7f0 [ 191.685579][ C1] ? detach_timer+0x2b0/0x2b0 [ 191.690278][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.696267][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 191.701126][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 191.706424][ C1] run_timer_softirq+0x63/0xf0 [ 191.711196][ C1] handle_softirqs+0x339/0x830 [ 191.715967][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 191.720828][ C1] ? do_softirq+0x210/0x210 [ 191.725337][ C1] __irq_exit_rcu+0x13b/0x230 [ 191.730011][ C1] ? irq_exit_rcu+0x20/0x20 [ 191.734521][ C1] irq_exit_rcu+0x5/0x20 [ 191.738761][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 191.744397][ C1] [ 191.747322][ C1] [ 191.750254][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.756240][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x7a/0x80 [ 191.762568][ C1] Code: c1 e0 05 4d 8d 50 28 4d 39 ca 77 1e 4a c7 44 02 08 06 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a 0f 1f 44 00 00 48 8b 04 24 65 48 8b 0d b4 4d 89 7e 65 8b 15 b5 [ 191.782171][ C1] RSP: 0018:ffffc9000447f9c0 EFLAGS: 00000293 [ 191.788253][ C1] RAX: ffffffff81ad9f85 RBX: 00007f11a9824000 RCX: ffff888028878000 [ 191.796221][ C1] RDX: 0000000000000000 RSI: 00007f11a9c24000 RDI: 00007f11a9824000 [ 191.804190][ C1] RBP: 1ffff11014aaa00a R08: 0000000000000000 R09: 1ffff1100e84fc6c [ 191.812159][ C1] R10: dffffc0000000000 R11: ffffed100e84fc6d R12: 00007f11a9c24000 [ 191.820126][ C1] R13: 0000000000000000 R14: ffff8880a5550000 R15: ffff8880a5550050 [ 191.828101][ C1] ? unmap_single_vma+0x135/0x2b0 [ 191.833131][ C1] unmap_single_vma+0x135/0x2b0 [ 191.837981][ C1] unmap_vmas+0x131/0x250 [ 191.842309][ C1] ? unmap_page_range+0x2500/0x2500 [ 191.847504][ C1] ? __mutex_lock_common+0x465/0x2400 [ 191.852890][ C1] exit_mmap+0x3b9/0x640 [ 191.857132][ C1] ? vm_brk+0x20/0x20 [ 191.861123][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 191.866317][ C1] ? mm_update_next_owner+0x5e1/0x640 [ 191.871692][ C1] __mmput+0x115/0x3b0 [ 191.875768][ C1] exit_mm+0x588/0x6e0 [ 191.879833][ C1] ? do_exit+0x20c0/0x20c0 [ 191.884243][ C1] ? taskstats_exit+0x439/0xab0 [ 191.889094][ C1] ? sync_mm_rss+0x211/0x350 [ 191.893684][ C1] do_exit+0x5a9/0x20c0 [ 191.897840][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.903823][ C1] ? put_task_struct+0x80/0x80 [ 191.908585][ C1] ? lock_chain_count+0x20/0x20 [ 191.913454][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 191.918660][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 191.923868][ C1] do_group_exit+0x12e/0x300 [ 191.928468][ C1] __x64_sys_exit_group+0x3b/0x40 [ 191.933496][ C1] do_syscall_64+0x4c/0xa0 [ 191.937914][ C1] ? clear_bhb_loop+0x30/0x80 [ 191.942587][ C1] ? clear_bhb_loop+0x30/0x80 [ 191.947270][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.953173][ C1] RIP: 0033:0x7f11aa1c1eb9 [ 191.957588][ C1] Code: Unable to access opcode bytes at RIP 0x7f11aa1c1e8f. [ 191.964955][ C1] RSP: 002b:00007ffddc5180b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 191.973370][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f11aa1c1eb9 [ 191.981340][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.989306][ C1] RBP: 00007ffddc51811c R08: 0000000000000000 R09: 000055558f0269f0 [ 191.997281][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000004c [ 192.005250][ C1] R13: 000055558f0269f0 R14: 000000000002d438 R15: 00007ffddc518170 [ 192.013212][ C1] [ 192.016210][ C1] [ 192.018513][ C1] Allocated by task 5523: [ 192.022820][ C1] __kasan_kmalloc+0xb5/0xf0 [ 192.027397][ C1] ax25_dev_device_up+0x50/0x580 [ 192.032314][ C1] ax25_device_event+0x483/0x4f0 [ 192.037229][ C1] raw_notifier_call_chain+0xcb/0x160 [ 192.042575][ C1] __dev_notify_flags+0x194/0x300 [ 192.047580][ C1] dev_change_flags+0xe3/0x1a0 [ 192.052326][ C1] dev_ifsioc+0x130/0xd50 [ 192.056630][ C1] dev_ioctl+0x545/0xe30 [ 192.060846][ C1] sock_do_ioctl+0x245/0x320 [ 192.065410][ C1] sock_ioctl+0x4d2/0x710 [ 192.069715][ C1] __se_sys_ioctl+0xfa/0x170 [ 192.074280][ C1] do_syscall_64+0x4c/0xa0 [ 192.078674][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.084540][ C1] [ 192.086848][ C1] Freed by task 5663: [ 192.090807][ C1] kasan_set_track+0x4b/0x70 [ 192.095395][ C1] kasan_set_free_info+0x1f/0x40 [ 192.100321][ C1] ____kasan_slab_free+0xd5/0x110 [ 192.105343][ C1] slab_free_freelist_hook+0xea/0x170 [ 192.110699][ C1] kfree+0xef/0x2a0 [ 192.114483][ C1] ax25_release+0x661/0x870 [ 192.118961][ C1] sock_close+0xd5/0x240 [ 192.123179][ C1] __fput+0x234/0x930 [ 192.127132][ C1] task_work_run+0x125/0x1a0 [ 192.131694][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 192.137038][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 192.142560][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 192.147997][ C1] do_syscall_64+0x58/0xa0 [ 192.152385][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.158252][ C1] [ 192.160549][ C1] Last potentially related work creation: [ 192.166233][ C1] kasan_save_stack+0x35/0x60 [ 192.170886][ C1] kasan_record_aux_stack+0xb8/0x100 [ 192.176142][ C1] insert_work+0x54/0x3d0 [ 192.180444][ C1] __queue_work+0x9c5/0xd50 [ 192.184921][ C1] queue_work_on+0x124/0x1f0 [ 192.189482][ C1] call_usermodehelper_exec+0x2e3/0x520 [ 192.194996][ C1] kobject_uevent_env+0x681/0x890 [ 192.199994][ C1] device_add+0x91c/0xfb0 [ 192.204298][ C1] __video_register_device+0x38fd/0x4670 [ 192.209908][ C1] vivid_create_devnodes+0x1453/0x2cd0 [ 192.215339][ C1] vivid_probe+0x4f45/0x67a0 [ 192.219903][ C1] platform_probe+0x137/0x1c0 [ 192.224552][ C1] really_probe+0x284/0xc80 [ 192.229028][ C1] __driver_probe_device+0x18c/0x330 [ 192.234283][ C1] driver_probe_device+0x4f/0x420 [ 192.239277][ C1] __driver_attach+0x46b/0x670 [ 192.244010][ C1] bus_for_each_dev+0x182/0x1f0 [ 192.248834][ C1] bus_add_driver+0x30a/0x5a0 [ 192.253485][ C1] driver_register+0x32d/0x430 [ 192.258222][ C1] vivid_init+0x39/0x70 [ 192.262353][ C1] do_one_initcall+0x272/0x730 [ 192.267094][ C1] do_initcall_level+0x137/0x1f0 [ 192.272008][ C1] do_initcalls+0x4b/0x90 [ 192.276313][ C1] kernel_init_freeable+0x3e9/0x570 [ 192.281483][ C1] kernel_init+0x19/0x1b0 [ 192.285811][ C1] ret_from_fork+0x1f/0x30 [ 192.290197][ C1] [ 192.292498][ C1] The buggy address belongs to the object at ffff88814b169c00 [ 192.292498][ C1] which belongs to the cache kmalloc-192 of size 192 [ 192.306522][ C1] The buggy address is located 80 bytes inside of [ 192.306522][ C1] 192-byte region [ffff88814b169c00, ffff88814b169cc0) [ 192.319682][ C1] The buggy address belongs to the page: [ 192.325297][ C1] page:ffffea00052c5a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814b169700 pfn:0x14b169 [ 192.336810][ C1] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 192.344425][ C1] raw: 057ff00000000200 ffffea00052076c8 ffffea0005223e88 ffff888016c41a00 [ 192.352982][ C1] raw: ffff88814b169700 0000000000100009 00000001ffffffff 0000000000000000 [ 192.361532][ C1] page dumped because: kasan: bad access detected [ 192.367921][ C1] page_owner tracks the page as allocated [ 192.373605][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9119577759, free_ts 0 [ 192.388428][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 192.393962][ C1] __alloc_pages+0x1ee/0x480 [ 192.398530][ C1] alloc_page_interleave+0x24/0x1e0 [ 192.403703][ C1] new_slab+0xc0/0x4b0 [ 192.407753][ C1] ___slab_alloc+0x80a/0xdd0 [ 192.412325][ C1] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 192.417674][ C1] call_usermodehelper_setup+0x8a/0x260 [ 192.423194][ C1] kobject_uevent_env+0x65e/0x890 [ 192.428229][ C1] device_add+0x91c/0xfb0 [ 192.432544][ C1] __video_register_device+0x38fd/0x4670 [ 192.438154][ C1] vivid_create_devnodes+0x1397/0x2cd0 [ 192.443589][ C1] vivid_probe+0x4f45/0x67a0 [ 192.448155][ C1] platform_probe+0x137/0x1c0 [ 192.452809][ C1] really_probe+0x284/0xc80 [ 192.457303][ C1] __driver_probe_device+0x18c/0x330 [ 192.462568][ C1] driver_probe_device+0x4f/0x420 [ 192.467569][ C1] page_owner free stack trace missing [ 192.472906][ C1] [ 192.475205][ C1] Memory state around the buggy address: [ 192.480805][ C1] ffff88814b169b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 192.488839][ C1] ffff88814b169b80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 192.496872][ C1] >ffff88814b169c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.504907][ C1] ^ [ 192.511560][ C1] ffff88814b169c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 192.519602][ C1] ffff88814b169d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.527637][ C1] ================================================================== [ 192.535672][ C1] Disabling lock debugging due to kernel taint [ 192.541886][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.549068][ C1] CPU: 1 PID: 5673 Comm: syz.1.394 Tainted: G B syzkaller #0 [ 192.557714][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.567743][ C1] Call Trace: [ 192.570999][ C1] [ 192.573819][ C1] dump_stack_lvl+0x188/0x250 [ 192.578471][ C1] ? show_regs_print_info+0x20/0x20 [ 192.583643][ C1] ? load_image+0x400/0x400 [ 192.588121][ C1] panic+0x2e5/0x810 [ 192.591986][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.598114][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 192.602592][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 192.608459][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 192.614324][ C1] ? _raw_spin_unlock+0x40/0x40 [ 192.619150][ C1] ? ax25_t1timer_expiry+0xec/0x110 [ 192.624321][ C1] check_panic_on_warn+0x80/0xa0 [ 192.629232][ C1] ? ax25_t1timer_expiry+0xec/0x110 [ 192.634400][ C1] end_report+0x6d/0xf0 [ 192.638530][ C1] kasan_report+0x102/0x130 [ 192.643004][ C1] ? ax25_t1timer_expiry+0xec/0x110 [ 192.648171][ C1] ? ax25_heartbeat_expiry+0x130/0x130 [ 192.653599][ C1] ax25_t1timer_expiry+0xec/0x110 [ 192.658595][ C1] call_timer_fn+0x17b/0x540 [ 192.663157][ C1] ? ax25_heartbeat_expiry+0x130/0x130 [ 192.668586][ C1] ? __run_timers+0x7f0/0x7f0 [ 192.673234][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 192.678406][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 192.683574][ C1] ? ax25_heartbeat_expiry+0x130/0x130 [ 192.689001][ C1] __run_timers+0x53a/0x7f0 [ 192.693479][ C1] ? detach_timer+0x2b0/0x2b0 [ 192.698124][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 192.704076][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 192.708896][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 192.714152][ C1] run_timer_softirq+0x63/0xf0 [ 192.718888][ C1] handle_softirqs+0x339/0x830 [ 192.723657][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 192.728479][ C1] ? do_softirq+0x210/0x210 [ 192.732954][ C1] __irq_exit_rcu+0x13b/0x230 [ 192.737600][ C1] ? irq_exit_rcu+0x20/0x20 [ 192.742077][ C1] irq_exit_rcu+0x5/0x20 [ 192.746315][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 192.751924][ C1] [ 192.754829][ C1] [ 192.757731][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.763685][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x7a/0x80 [ 192.769986][ C1] Code: c1 e0 05 4d 8d 50 28 4d 39 ca 77 1e 4a c7 44 02 08 06 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a 0f 1f 44 00 00 48 8b 04 24 65 48 8b 0d b4 4d 89 7e 65 8b 15 b5 [ 192.789566][ C1] RSP: 0018:ffffc9000447f9c0 EFLAGS: 00000293 [ 192.795692][ C1] RAX: ffffffff81ad9f85 RBX: 00007f11a9824000 RCX: ffff888028878000 [ 192.803638][ C1] RDX: 0000000000000000 RSI: 00007f11a9c24000 RDI: 00007f11a9824000 [ 192.811582][ C1] RBP: 1ffff11014aaa00a R08: 0000000000000000 R09: 1ffff1100e84fc6c [ 192.819528][ C1] R10: dffffc0000000000 R11: ffffed100e84fc6d R12: 00007f11a9c24000 [ 192.827486][ C1] R13: 0000000000000000 R14: ffff8880a5550000 R15: ffff8880a5550050 [ 192.835432][ C1] ? unmap_single_vma+0x135/0x2b0 [ 192.840433][ C1] unmap_single_vma+0x135/0x2b0 [ 192.845260][ C1] unmap_vmas+0x131/0x250 [ 192.849558][ C1] ? unmap_page_range+0x2500/0x2500 [ 192.854725][ C1] ? __mutex_lock_common+0x465/0x2400 [ 192.860071][ C1] exit_mmap+0x3b9/0x640 [ 192.864291][ C1] ? vm_brk+0x20/0x20 [ 192.868250][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 192.873421][ C1] ? mm_update_next_owner+0x5e1/0x640 [ 192.878801][ C1] __mmput+0x115/0x3b0 [ 192.882840][ C1] exit_mm+0x588/0x6e0 [ 192.886877][ C1] ? do_exit+0x20c0/0x20c0 [ 192.891263][ C1] ? taskstats_exit+0x439/0xab0 [ 192.896087][ C1] ? sync_mm_rss+0x211/0x350 [ 192.900645][ C1] do_exit+0x5a9/0x20c0 [ 192.904775][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 192.910727][ C1] ? put_task_struct+0x80/0x80 [ 192.915459][ C1] ? lock_chain_count+0x20/0x20 [ 192.920289][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 192.925461][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 192.930630][ C1] do_group_exit+0x12e/0x300 [ 192.935192][ C1] __x64_sys_exit_group+0x3b/0x40 [ 192.940183][ C1] do_syscall_64+0x4c/0xa0 [ 192.944569][ C1] ? clear_bhb_loop+0x30/0x80 [ 192.949216][ C1] ? clear_bhb_loop+0x30/0x80 [ 192.953868][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.959730][ C1] RIP: 0033:0x7f11aa1c1eb9 [ 192.964117][ C1] Code: Unable to access opcode bytes at RIP 0x7f11aa1c1e8f. [ 192.971449][ C1] RSP: 002b:00007ffddc5180b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 192.979831][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f11aa1c1eb9 [ 192.987773][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.995716][ C1] RBP: 00007ffddc51811c R08: 0000000000000000 R09: 000055558f0269f0 [ 193.003658][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000004c [ 193.011600][ C1] R13: 000055558f0269f0 R14: 000000000002d438 R15: 00007ffddc518170 [ 193.019546][ C1] [ 193.022864][ C1] Kernel Offset: disabled [ 193.027173][ C1] Rebooting in 86400 seconds..