last executing test programs: 16.214200247s ago: executing program 1 (id=342): gettid() mq_open(&(0x7f0000000040)=',(]\x00', 0x1, 0x44, &(0x7f0000000080)={0x8, 0x6, 0x3, 0x5}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0, 0x3, 0xfffffffe}) pipe2$watch_queue(0x0, 0x80) add_key$keyring(&(0x7f0000001600), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x36) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 15.2978717s ago: executing program 1 (id=347): pipe(&(0x7f0000000000)) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12.288378482s ago: executing program 1 (id=353): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2404877d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 11.395229244s ago: executing program 0 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@remote, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2002c12, &(0x7f0000000500), 0x2, 0xa03, &(0x7f0000003a40)="$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") r3 = syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') 9.585777718s ago: executing program 1 (id=358): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x163) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0xfffffffffffffeeb) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) getsockname$llc(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') lseek(r6, 0x8000000010007, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) close(r4) syz_fuse_handle_req(r0, &(0x7f0000000880)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000449bf08ac788b83d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004231000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000860400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, 0x0) 9.576931518s ago: executing program 4 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x891a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x66, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000"/51], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205648, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10820}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) 9.573256818s ago: executing program 0 (id=360): pipe(&(0x7f0000000000)) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.518098389s ago: executing program 2 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x7fffffff, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000080)=@fd={0x8, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '>Vl '}}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x6000) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) 9.037541371s ago: executing program 3 (id=362): gettid() mq_open(&(0x7f0000000040)=',(]\x00', 0x1, 0x44, &(0x7f0000000080)={0x8, 0x6, 0x3, 0x5}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0, 0x3, 0xfffffffe}) pipe2$watch_queue(0x0, 0x80) 8.041298456s ago: executing program 0 (id=364): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef", 0x5a}, {&(0x7f0000000b40)="86545d2157646172b815", 0xa}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1}, @ringbuf_query, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.041150936s ago: executing program 2 (id=365): socket$inet_tcp(0x2, 0x1, 0x0) 7.267461234s ago: executing program 3 (id=366): pipe(&(0x7f0000000000)) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.849509754s ago: executing program 4 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.848776404s ago: executing program 2 (id=377): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[@ANYBLOB="5b37182347bcffffffffffff88a800004305000086dd60f7537200140600ff0200", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000a89eb81a"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 5.436342398s ago: executing program 1 (id=368): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b1d, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080ffffffff87affff2", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_settings={0x9, 0x3, @sync=0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x0, 0x0, 0x0, 0x15b76fa0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x0, 0x3}, 0x10}, 0x94) r5 = socket$kcm(0x1e, 0x2, 0x0) recvmsg(r5, 0x0, 0x400100a2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 4.450311192s ago: executing program 3 (id=369): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000500)="304c388a800297b3eee001a5d39d5791", 0x10, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$reject(0x13, r3, 0xd59, 0x1, r3) keyctl$revoke(0x3, r3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 4.079002831s ago: executing program 2 (id=370): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xad, &(0x7f0000000140)=""/173, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff5f44691a7f887bf1df7709f6220936561f57fc68b412f7e13726835445f5b5bd0d131c11e766882f53821670c672c17aa8149744590e1c4e31db52a8f7f8d7112fab64d71e8488225335229d36b2a2f122559782aa95498131b360ac6f0390f11e43b0966bf0c752c108000000bdf491df310e8b2d7702460207afca0defe414cb985449b38431e2a43610a0e2df1f8b3e4176623016977bee18cbc7e643cc151573751b6de4a9ae3bd1faf05e8014d45b9fc3b90e9d6d41a67dff7a21b1dc349ec9ef71746830b3ea630dc20d64978c97", @ANYRES32], 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x2, 0x12) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64650100000030303008003030303030303030303130303030302c75736572c9a5ee34169b15535f69643d6d6eb507f1aa4b6119e2895c02a32c3bb910b6594d", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.465678306s ago: executing program 4 (id=371): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2404877d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1.689792039s ago: executing program 4 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@remote, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2002c12, &(0x7f0000000500), 0x2, 0xa03, &(0x7f0000003a40)="$eJzs3c1vHOd9B/Dv8EWiaUOSbdV1BdlayZVM2yxFUrVUQYdWIlcSXb4UJAVY6MFyLaoQxNat3QK2UaAyUPRUoQVa9NDejJxyEuBLfAl8S27JKYcAgf8FIycFCMBgZpfSklxySYUiafnzIXZ3Xn7zPL/ZmZ2Huzs7T/huWTq4Ymxpqbptdby7Of7DnUiZvevS+Ddf3L9X3j6/m33pztvFj5K+JLWkJ8nLSe/Y+OzMVIeC7iQ3knydFEn2p/G4KTdS/GeeezT+dYr/L+td177NlkwnS3yv7fb+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe1ExNj48PFLsy8T0tXdrDUltjbHx2ZkiS0tr5ywv0/BV1et38VXHepOivKWvb7mr75cPP5r9UpLaiRxtjB2tOiRPXz579qVDF17s6Vpefr1sfi/7N1/sx59+duf9xcWFj55IInvflfr0xNzMxNTFK/XaxNxM7fzZs8Onr16eq12emKzPXZ+br0/VxmbrF+dnZmsDY2/URs6fP1OrD12fuTZ9ZXxosr488dyfjA4Pn629M/RX9YuzczPTp98Zmhu7OjE5OTF9pYopZ5cx58od8S8n5mvz9YtTtdqt24sLZ1bl1J1V+28ZNNJpTcqg0U5Bo8OjoyMjo6Mjnzd7z3444ezb598+NzzcM7xK1kQ8oZ2WveWZ9Tfz9h/E4TF1Ndr/ZDITmc61vJta27+xjGc2M5laZ35TT3VffHXydH3Delvb/6OtizYcKe9O5NXmaN867f86uezc38f5NJ/lTt7PYhazkI92PaOd/buSeqYzkbnMZCJTuVhNqTWn1HI+Z3M2w3kvV3Msc6nlciYymXrmcj1zmU+92qPGMpt6LmY+M5lNLQMZyxupZSTncz5nUks9Q7memVzLdK5kPBerUm7ldvW8n9kgx4dBI5sJGm2Z2L0qaE1jvuX2v776nxO+d7b9GA6Pa6nZ/u/rHDowthMJAQAAANvuj36aA4df+MmvkiKvVJ/LX56YrA/vdloAAADANqq++T+aIuktR19J4f0/AAAAPG2K6jd2RZL+HGsMLf8SyocAAAAA8JSoLtf3aopjjyZ4/w8AAABPmc7X2O8YUQwuX/63drPxeLMZ0Rgr+i9PTNaHxmYmL4zkVHWVgeqXBmtK606K3urnB2/meCPqeH/jsf9RiWWdfWXUyNCFkbyZE80VGXitfHhtoE3kaCPy9Ubk662R3VkReWbogutzAvD0O7FBe7zZ9v/NDDYiBo9UTX7PkTZt8HDZBgMAe8HDPnZ+0+zSrE3734x4db32/083eP9fRryQW8capxQM5YN8mMXczGCaZxwca1fqcm8EjdMQBjt8GtDfPGXh5+e6Mrjm84C+h+vaGruQ0Qy2/USgpdxiOYczjbjuJ7MNAGCnndiwHd5c+z/Y4f1/v1MKAWBPediDfTXQs2bKdgzs9joCACtppQEAAAAAAAAAAAAAAAAAAAAAAAAAAGD7beoC/j87lSwuLiTb3jXABgN9W8lw44Gu7FDOuz7QnWS3av/zrJm1tJRstFS5jffKU2dg5cAuH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYEUXS3W56V7I/yXCS0zuf1ZNzd7cT2C61x1useJAH+SQHtjsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDvu+b1/7vSeHy2MSk9XcnJJDeS/PVu57g9Gt0cPNjtNHbN31X3Ldf/70p6s1Skp7HZU/SOjc/OTJWbv9hfzv/mi/v3ylvnstf2qlAWUNawonOJZg0tU3pXLvV8tVT/+MLHd/7pw3+ojV+qdsxL85cnx6euzP7Fo8CXii8bXSC0doOwnO+/nPzxf7VM3tes/MtyTdtbXe/lqt7xtfX+Ybul16l3E24vLoyWNc3X353/57+//UnLrBdyPHltIBlYWdPflrd1ajq++vlcqfi2+PfiQP43N6rtXz4bxVJRbqKD1fo/c+v24sLQBx8u3nyY07+uyOlQjiW5mfRtPqdj1fGkrWqv6+otax2ugsq7wx3K21BLiSPrPK/PV7tM/5bWobb+OlQ6PO/NjM60zei///HFnNrylj7Voca2im+LXxZX84v8W0v/H13l9j+Ztq/ONkVUkS17Suu8FS+vrkZkteajrTPeW13muq9KnoD/yN/kzx5u/66W439zW+3M8ailxvavi2Trr4sfHFzTojxStUiHV7VIzaPPess08zzciFonzz/IW0nPkS0dUd7qcER5Uq///ysG8uvc1f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xVJd7vpXcnJJIeSHCzHa8nS6pi7j1FfV3/xOGlum8fJ+bunWHdFiwd5kE9yYKczAgAAAAAAAODJuDT+zRf37/126f696vv47vxxV3NOLelJcqj4n96x8dmZqQ4F9SY3lr/S79taDjfKu+cejX9djr3cYaHdPX0AAL7TfhcAAP//ekBszQ==") r3 = syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') 1.688768859s ago: executing program 0 (id=383): socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x9, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x28) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x408100) r3 = syz_open_dev$usbfs(0x0, 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x24000, 0x148, 0x26}, 0x18) mkdirat(r5, 0x0, 0x20) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x88c0) close(0x4) 1.688357429s ago: executing program 2 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.587528641s ago: executing program 3 (id=374): futex(0x0, 0x7, 0x2, 0x0, &(0x7f00000000c0)=0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28101) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4040080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x8, 0x10, 0x3, 0x8, {{0x5, 0x4, 0x1, 0xc, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast1, @rand_addr=0x64010102}}}}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r4, 0x603, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x0) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 893.867538ms ago: executing program 0 (id=375): pipe(&(0x7f0000000000)) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 658.635254ms ago: executing program 4 (id=376): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r1, r0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 192.322295ms ago: executing program 3 (id=378): socket$inet_tcp(0x2, 0x1, 0x0) 164.222256ms ago: executing program 3 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 138.186516ms ago: executing program 2 (id=380): pipe(&(0x7f0000000000)) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 15.013619ms ago: executing program 4 (id=381): pipe(&(0x7f0000000000)) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.08117ms ago: executing program 0 (id=382): syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0x4, 0xbe}]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) set_mempolicy(0x8006, 0x0, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x204003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') bind$packet(r2, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x6, @empty, 0xed, 0x4}, 0x20) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0x15}, @ioring_restriction_register_op={0x0, 0x2b}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 1 (id=384): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 56.952984][ T4174] cgroup: Unknown subsys name 'net' [ 57.060831][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.294404][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.667686][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.681897][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 59.720431][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 59.732924][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.809000][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 59.872302][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.880180][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.888197][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.922603][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.929773][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.938053][ T4195] device bridge_slave_0 entered promiscuous mode [ 59.945388][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.952993][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.960719][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.968673][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.976626][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.984493][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.001408][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.008982][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.017010][ T4195] device bridge_slave_1 entered promiscuous mode [ 60.037257][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.044697][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.052976][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.060312][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.067495][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.075570][ T4200] device bridge_slave_0 entered promiscuous mode [ 60.103924][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.111010][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.118948][ T4200] device bridge_slave_1 entered promiscuous mode [ 60.134557][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.145525][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.173550][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.184396][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.195224][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.211253][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.218453][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.226318][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.246756][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.257466][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.275767][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.282940][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.290669][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.318291][ T4186] team0: Port device team_slave_0 added [ 60.326530][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.349564][ T4195] team0: Port device team_slave_0 added [ 60.356741][ T4186] team0: Port device team_slave_1 added [ 60.365651][ T4187] team0: Port device team_slave_0 added [ 60.389644][ T4195] team0: Port device team_slave_1 added [ 60.397123][ T4187] team0: Port device team_slave_1 added [ 60.409651][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.421667][ T4200] team0: Port device team_slave_0 added [ 60.440676][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.447914][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.474347][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.487794][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.498363][ T4200] team0: Port device team_slave_1 added [ 60.529040][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.536320][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.562769][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.574349][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.581302][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.607848][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.619368][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.626634][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.652690][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.671660][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.679473][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.705453][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.725986][ T4188] team0: Port device team_slave_0 added [ 60.732797][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.739765][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.766669][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.789221][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.796488][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.822640][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.838865][ T4188] team0: Port device team_slave_1 added [ 60.862952][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.869952][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.896775][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.935412][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.943097][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.961564][ T4195] device hsr_slave_0 entered promiscuous mode [ 60.969182][ T4195] device hsr_slave_1 entered promiscuous mode [ 60.975892][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.983958][ T4195] Cannot create hsr debugfs directory [ 61.003860][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.010847][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.037211][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.051705][ T4200] device hsr_slave_0 entered promiscuous mode [ 61.060502][ T4200] device hsr_slave_1 entered promiscuous mode [ 61.067393][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.075518][ T4200] Cannot create hsr debugfs directory [ 61.095171][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.102157][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.128577][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.164896][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.171672][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.178583][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.186638][ T4187] Cannot create hsr debugfs directory [ 61.196965][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.204101][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.210914][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.218726][ T4188] Cannot create hsr debugfs directory [ 61.323222][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 61.333190][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 61.341302][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 61.362606][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 61.402445][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 61.545667][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.560133][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.569876][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.579376][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.615856][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.635356][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.644921][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.655073][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.716689][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.739130][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.748574][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.768633][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.828071][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.837261][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.850617][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.868319][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.890607][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.922131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.933624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.946975][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.969317][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.983106][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.997360][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.014775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.024521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.033042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.041618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.051409][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.058811][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.068641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.079051][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.090288][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.100146][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.128708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.138870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.147907][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.155033][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.163105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.173224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.183135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.191921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.200874][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.207983][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.237377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.246336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.257724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.267619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.278562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.288634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.305713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.316337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.325046][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.332089][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.371899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.380855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.389878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.399988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.411918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.420980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.442984][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.454159][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.464813][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.474123][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.492151][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.503260][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.523112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.533626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.544166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.554427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.563194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.571696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.593280][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.601778][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.615773][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.635984][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.651090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.659848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.672946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.680691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.690083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.698982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.707810][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.714924][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.723756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.737355][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.746501][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.755968][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.763096][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.789908][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.809608][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.820557][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.835896][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.848701][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.855867][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.865823][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.873879][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.881566][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.890652][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.899209][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.906313][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.928086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.937365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.946717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.956460][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.963601][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.973164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.982810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.991555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.000500][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.007629][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.016071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.034815][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.053950][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.061977][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.070676][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.079617][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.089413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.099577][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.108943][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.117571][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.125996][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.134653][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.143022][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.151316][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.159727][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.201383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.211411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.225653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.235383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.244600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.253773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.262138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.270845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.279865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.287720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.295343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.304886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.313894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.321917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.336933][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.347370][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.384230][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.400358][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.408972][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 63.409750][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.415968][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 63.423373][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 63.429195][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 63.443231][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.451591][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.462635][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.470913][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.479685][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.488023][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 63.493201][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.507588][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.518907][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.536326][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.547380][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.579768][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.588984][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.607558][ T4187] device veth0_vlan entered promiscuous mode [ 63.638187][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.664457][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.697405][ T4187] device veth1_vlan entered promiscuous mode [ 63.788900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.803043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.829946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.840019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.855147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.869279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.888723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.896693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.907387][ T4187] device veth0_macvtap entered promiscuous mode [ 63.933997][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.945785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.955571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.965554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.982052][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.991927][ T4187] device veth1_macvtap entered promiscuous mode [ 64.008556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.016801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.026207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.034304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.041865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.068565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.077572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.096343][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.104187][ T4186] device veth0_vlan entered promiscuous mode [ 64.116244][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.131580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.140238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.148683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.157590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.166754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.175850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.184411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.192957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.206007][ T4186] device veth1_vlan entered promiscuous mode [ 64.217637][ T4200] device veth0_vlan entered promiscuous mode [ 64.226861][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.237951][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.249883][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.259281][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.268305][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.292993][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.301513][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.309781][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.318918][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.328903][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.337664][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.384040][ T4200] device veth1_vlan entered promiscuous mode [ 64.393429][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.404336][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.413226][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.428101][ T4186] device veth0_macvtap entered promiscuous mode [ 64.446986][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.457213][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.466801][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.478244][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.502831][ T4186] device veth1_macvtap entered promiscuous mode [ 64.522189][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.531634][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.540552][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.549572][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.557958][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.580165][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.591287][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.603900][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.614969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.624708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.633588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.642124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.654801][ T4195] device veth0_vlan entered promiscuous mode [ 64.669017][ T4200] device veth0_macvtap entered promiscuous mode [ 64.676391][ T4188] device veth0_vlan entered promiscuous mode [ 64.695252][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.705903][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.719119][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.734728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.743309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.751116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.760920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.770934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.780945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.790104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.803689][ T4200] device veth1_macvtap entered promiscuous mode [ 64.815126][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.826067][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.835158][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.846797][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.865198][ T4188] device veth1_vlan entered promiscuous mode [ 64.883629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.891994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.900520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.916803][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.934326][ T4195] device veth1_vlan entered promiscuous mode [ 64.950165][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.998942][ T4188] device veth0_macvtap entered promiscuous mode [ 65.014547][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.026345][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.036672][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.047403][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.059476][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.068625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.077155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.087608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.096551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.105806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.116188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.135354][ T4188] device veth1_macvtap entered promiscuous mode [ 65.145488][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.157714][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.170202][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.182441][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.194020][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.226340][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.235329][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.245037][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.263375][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.274258][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.281200][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.282080][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.292305][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.311488][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.321557][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.333514][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.345672][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.357699][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.366621][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.375751][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.385667][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.406522][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.415888][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.417149][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.431907][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.441103][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.449715][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.458962][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.467947][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.476783][ T4195] device veth0_macvtap entered promiscuous mode [ 65.484329][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 65.491075][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 65.491740][ T4195] device veth1_macvtap entered promiscuous mode [ 65.497559][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 65.509768][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 65.517309][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.528186][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.538328][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.550879][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.560771][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.562914][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 65.572561][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.588599][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.620836][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.637055][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.648336][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.660374][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.670782][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.681950][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.692106][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.702817][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.714683][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.722104][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.733245][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.741621][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.750767][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.760789][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.770373][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.781047][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.790342][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.799298][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.809497][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.834219][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.835214][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.843064][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.860192][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.870897][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.881779][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.893956][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.904563][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.914776][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.925473][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.936647][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.949011][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.963215][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.984403][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.996615][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.028369][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.037348][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.051458][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.075185][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.104071][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.134970][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.144015][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.151593][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.168890][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.203078][ T4274] kcapi: manufacturer command 4294967295 unknown. [ 67.531969][ T4278] loop0: detected capacity change from 0 to 256 [ 67.663303][ T4280] 9pnet_virtio: no channels available for device 127.0.0.1 [ 67.687962][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 67.707227][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 67.823185][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.885495][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 67.898940][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.949320][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 67.998068][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.021402][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.031098][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 68.045562][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.069646][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.079159][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.089596][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.130115][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.153191][ T4275] Zero length message leads to an empty skb [ 68.201264][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.246604][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.301332][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.378035][ T4282] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.796952][ T4295] loop3: detected capacity change from 0 to 4096 [ 69.733116][ T1107] cfg80211: failed to load regulatory.db [ 69.783596][ T4295] ======================================================= [ 69.783596][ T4295] WARNING: The mand mount option has been deprecated and [ 69.783596][ T4295] and is ignored by this kernel. Remove the mand [ 69.783596][ T4295] option from the mount to silence this warning. [ 69.783596][ T4295] ======================================================= [ 69.894628][ T4306] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.896540][ T4295] NILFS (loop3): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 69.915261][ T4295] NILFS (loop3): error -5 getting root inode [ 71.062225][ C0] sched: RT throttling activated [ 71.414238][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.427790][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.883987][ T4327] device syzkaller0 entered promiscuous mode [ 72.157310][ T4335] device syzkaller0 entered promiscuous mode [ 72.281563][ T4337] loop3: detected capacity change from 0 to 2048 [ 72.508041][ T4337] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 72.664546][ T4337] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 73.318726][ T4337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.978931][ T4356] loop0: detected capacity change from 0 to 1024 [ 74.996166][ T4353] device syzkaller0 entered promiscuous mode [ 77.691430][ T26] audit: type=1326 audit(1785429694.481:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 79.163966][ T26] audit: type=1326 audit(1785429694.481:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 79.205614][ T26] audit: type=1326 audit(1785429694.511:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 79.240097][ T26] audit: type=1326 audit(1785429694.511:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 79.490636][ T26] audit: type=1326 audit(1785429694.511:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 80.220023][ T26] audit: type=1326 audit(1785429694.511:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 80.242259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.404561][ T26] audit: type=1326 audit(1785429694.511:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 80.630370][ T26] audit: type=1326 audit(1785429694.511:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 80.655151][ T26] audit: type=1326 audit(1785429694.521:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 80.679406][ T26] audit: type=1326 audit(1785429694.521:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dba3c1f99 code=0x7ffc0000 [ 80.741906][ T4412] device syzkaller0 entered promiscuous mode [ 80.753814][ T4412] 0: reclassify loop, rule prio 0, protocol 700 [ 81.019685][ T4416] netlink: 'syz.0.34': attribute type 5 has an invalid length. [ 81.027797][ T4416] netlink: 48 bytes leftover after parsing attributes in process `syz.0.34'. [ 82.260143][ T4430] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.546744][ T4430] loop0: detected capacity change from 0 to 1024 [ 82.880089][ T4430] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.202237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.222234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.232263][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.242244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.252231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 84.262230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 84.272225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 84.282231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 84.292232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 84.881691][ T4469] ODEBUG: Out of memory. ODEBUG disabled [ 87.842322][ T4546] hugetlbfs: syz.0.51 (4546): Using mlock ulimits for SHM_HUGETLB is deprecated [ 91.626481][ T4573] binder: BINDER_SET_CONTEXT_MGR already set [ 91.632941][ T4573] binder: 4564:4573 ioctl 4018620d 200000004a80 returned -16 [ 92.022286][ T4579] syz.4.60 uses obsolete (PF_INET,SOCK_PACKET) [ 92.188577][ T4580] loop0: detected capacity change from 0 to 4096 [ 92.320979][ T4590] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.281371][ T4598] loop3: detected capacity change from 0 to 16 [ 94.062608][ T4600] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 94.135114][ T4598] erofs: (device loop3): mounted with root inode @ nid 36. [ 94.953352][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 95.830871][ T4611] loop4: detected capacity change from 0 to 512 [ 97.409713][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.416922][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.423873][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.430763][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.437693][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.444716][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.451674][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.458516][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.465565][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.472391][ T4621] tc action pedit offset must be on 32 bit boundaries [ 97.479209][ T4621] 0: reclassify loop, rule prio 0, protocol 800 [ 97.575299][ T4625] loop0: detected capacity change from 0 to 128 [ 97.607830][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.616283][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.624685][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.633061][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.641413][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.649798][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.658285][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.666694][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.675076][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.683449][ T4623] tc action pedit unable to extract header offset for header type (0x4) [ 97.691817][ T4623] 0: reclassify loop, rule prio 0, protocol 800 [ 97.734219][ T4625] UDF-fs: bad mount option "18446744073709551615" or missing value [ 98.616292][ T4632] loop0: detected capacity change from 0 to 128 [ 99.502383][ T4637] trusted_key: encrypted_key: insufficient parameters specified [ 99.767148][ T4639] process 'syz.2.77' launched '/dev/fd/4' with NULL argv: empty string added [ 99.942563][ T4642] fuse: root generation should be zero [ 104.103408][ T4672] loop2: detected capacity change from 0 to 1764 [ 104.712671][ T4674] loop1: detected capacity change from 0 to 128 [ 105.056709][ T4674] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.089475][ T4719] db_root: cannot be changed: target drivers registered [ 105.390995][ T4733] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.309162][ T4744] netlink: 'syz.0.92': attribute type 21 has an invalid length. [ 106.327170][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 106.432715][ T4744] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 106.566524][ T4751] loop2: detected capacity change from 0 to 512 [ 106.994222][ T4753] ksmbd: Unknown IPC event: 3, ignore. [ 107.071205][ T4751] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 107.079018][ T4751] UDF-fs: Scanning with blocksize 512 failed [ 107.091723][ T4751] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 107.099472][ T4751] UDF-fs: Scanning with blocksize 1024 failed [ 107.112722][ T4751] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 107.120343][ T4751] UDF-fs: Scanning with blocksize 2048 failed [ 107.143626][ T4751] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 107.178032][ T4751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.841797][ T4760] device syzkaller0 entered promiscuous mode [ 110.545397][ T4760] tipc: Started in network mode [ 110.632970][ T4760] tipc: Node identity 76c5bcf83362, cluster identity 4711 [ 110.683167][ T4760] tipc: Enabled bearer , priority 0 [ 111.268723][ T4778] tipc: Resetting bearer [ 111.414818][ T4757] tipc: Resetting bearer [ 111.587248][ T4785] loop2: detected capacity change from 0 to 40427 [ 111.651503][ T4757] tipc: Disabling bearer [ 111.690770][ T4785] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 111.699348][ T4785] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.789812][ T4785] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.870932][ T4785] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.878826][ T4785] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.934401][ T4803] loop3: detected capacity change from 0 to 16 [ 112.085623][ T4785] attempt to access beyond end of device [ 112.085623][ T4785] loop2: rw=2049, want=79168, limit=40427 [ 112.105324][ T4804] attempt to access beyond end of device [ 112.105324][ T4804] loop2: rw=2049, want=80424, limit=40427 [ 112.130032][ T4803] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0xea26c732, 0x02d6543f expected [ 112.198709][ T4180] udevd[4180]: incorrect erofs checksum on /dev/loop3 [ 112.426604][ T4810] [U]  [ 113.476480][ T4816] tipc: Started in network mode [ 113.481629][ T4816] tipc: Node identity ceadbf71bf2b, cluster identity 4711 [ 113.538545][ T4816] tipc: Enabled bearer , priority 0 [ 113.668709][ T4819] loop3: detected capacity change from 0 to 32768 [ 113.678912][ T4816] device syzkaller0 entered promiscuous mode [ 113.684239][ T4519] attempt to access beyond end of device [ 113.684239][ T4519] loop2: rw=1, want=45112, limit=40427 [ 113.712707][ T4817] bridge0: port 3(syz_tun) entered blocking state [ 113.719192][ T4817] bridge0: port 3(syz_tun) entered disabled state [ 113.803515][ T4817] device syz_tun entered promiscuous mode [ 113.825236][ T4819] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 113.850598][ T4817] bridge0: port 3(syz_tun) entered blocking state [ 113.857436][ T4817] bridge0: port 3(syz_tun) entered forwarding state [ 113.868679][ T4816] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 115.099064][ T1110] tipc: Node number set to 1904656241 [ 115.755319][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 115.755331][ T26] audit: type=1800 audit(1785429732.531:20): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.108" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 115.857559][ T4833] tipc: Resetting bearer [ 115.876950][ T4819] syz.3.108 (4819) used greatest stack depth: 16880 bytes left [ 115.957869][ T4833] tipc: Disabling bearer [ 116.038908][ T4200] ocfs2: Unmounting device (7,3) on (node local) [ 116.141327][ T4831] device syzkaller0 entered promiscuous mode [ 118.365541][ T4855] loop2: detected capacity change from 0 to 256 [ 119.288736][ T4855] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 121.070835][ T4876] loop1: detected capacity change from 0 to 64 [ 121.167569][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.173753][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.179852][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.185990][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.192080][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.198232][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.204354][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.210443][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.216590][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.222866][ T4878] tc action pedit 'at' offset 2 out of bounds [ 121.229140][ T4878] TC_ACT_REPEAT abuse ? [ 123.054578][ T4899] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 123.066405][ T4899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 130.435306][ T4974] loop4: detected capacity change from 0 to 8 [ 131.749482][ T4985] fuse: Unknown parameter '0x0000000000000005' [ 132.847606][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.855491][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.080179][ T4996] device syzkaller0 entered promiscuous mode [ 133.689482][ T4999] loop4: detected capacity change from 0 to 512 [ 134.014667][ T4999] EXT4-fs (loop4): inodes count not valid: 40 vs 32 [ 134.952561][ T4297] Process accounting resumed [ 135.434927][ T5008] Process accounting resumed [ 135.803307][ T5026] device syzkaller0 entered promiscuous mode [ 136.820705][ T5026] simple: bas]9oς>Q/ic_1 [ 136.826166][ T5026] simple: bas]9oς>Q/ic_2 [ 136.831036][ T5026] simple: bas]9oς>Q/ic_3 [ 136.835953][ T5026] simple: bas]9oς>Q/ic_4 [ 136.840851][ T5026] simple: bas]9oς>Q/ic_5 [ 136.845840][ T5026] simple: bas]9oς>Q/ic_6 [ 136.850702][ T5026] simple: bas]9oς>Q/ic_7 [ 136.855611][ T5026] simple: bas]9oς>Q/ic_8 [ 136.860471][ T5026] simple: bas]9oς>Q/ic_9 [ 136.865362][ T5026] simple: bas]9oς>Q/ic_10 [ 136.870302][ T5026] simple: bas]9oς>Q/ic_11 [ 136.875450][ T5026] simple: bas]9oς>Q/ic_12 [ 136.880434][ T5026] simple: bas]9oς>Q/ic_13 [ 136.885507][ T5026] simple: bas]9oς>Q/ic_14 [ 136.890539][ T5026] simple: bas]9oς>Q/ic_15 [ 136.895522][ T5026] simple: bas]9oς>Q/ic_16 [ 136.900549][ T5026] simple: bas]9oς>Q/ic_17 [ 136.905537][ T5026] simple: bas]9oς>Q/ic_18 [ 136.910581][ T5026] simple: bas]9oς>Q/ic_19 [ 136.915566][ T5026] simple: bas]9oς>Q/ic_20 [ 136.920509][ T5026] simple: bas]9oς>Q/ic_21 [ 136.925489][ T5026] simple: bas]9oς>Q/ic_22 [ 136.930435][ T5026] simple: bas]9oς>Q/ic_23 [ 136.935421][ T5026] simple: bas]9oς>Q/ic_24 [ 136.940358][ T5026] simple: bas]9oς>Q/ic_25 [ 136.945433][ T5026] simple: bas]9oς>Q/ic_26 [ 136.950377][ T5026] simple: bas]9oς>Q/ic_27 [ 136.955362][ T5026] simple: bas]9oς>Q/ic_28 [ 136.960301][ T5026] simple: bas]9oς>Q/ic_29 [ 136.965281][ T5026] simple: bas]9oς>Q/ic_30 [ 136.970224][ T5026] simple: bas]9oς>Q/ic_31 [ 136.975205][ T5026] simple: bas]9oς>Q/ic_32 [ 136.980326][ T5026] TC_ACT_REPEAT abuse ? [ 139.827232][ T26] audit: type=1326 audit(1785429756.391:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 140.002367][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.061276][ T26] audit: type=1326 audit(1785429756.391:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 140.156848][ T26] audit: type=1326 audit(1785429756.471:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 140.218203][ T26] audit: type=1326 audit(1785429756.531:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 140.272391][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 140.280097][ T26] audit: type=1326 audit(1785429756.531:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 140.304467][ T26] audit: type=1326 audit(1785429756.541:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 140.984843][ T4230] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 141.050955][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.333996][ T26] audit: type=1326 audit(1785429756.541:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 141.358658][ T5081] loop3: detected capacity change from 0 to 512 [ 141.359474][ T26] audit: type=1326 audit(1785429756.541:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 141.399926][ T5081] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.402322][ T4230] usb 3-1: config 0 descriptor?? [ 141.422437][ T5081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.432274][ T26] audit: type=1326 audit(1785429756.541:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 141.432306][ T26] audit: type=1326 audit(1785429756.541:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e3b59f99 code=0x7ffc0000 [ 141.626382][ T5087] netlink: 'syz.4.176': attribute type 9 has an invalid length. [ 141.634265][ T5087] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.176'. [ 142.656108][ T5081] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.847496][ T5081] EXT4-fs (loop3): 1 truncate cleaned up [ 142.855819][ T5081] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 142.883921][ T4230] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 142.941233][ T5091] loop4: detected capacity change from 0 to 128 [ 143.142355][ T4230] gspca_sonixj: reg_w1 err -71 [ 143.150103][ T4230] sonixj: probe of 3-1:0.0 failed with error -71 [ 143.160221][ T5099] attempt to access beyond end of device [ 143.160221][ T5099] loop4: rw=2049, want=321, limit=128 [ 143.185182][ T4230] usb 3-1: USB disconnect, device number 2 [ 143.864006][ T5091] attempt to access beyond end of device [ 143.864006][ T5091] loop4: rw=524288, want=321, limit=128 [ 143.959135][ T5091] attempt to access beyond end of device [ 143.959135][ T5091] loop4: rw=0, want=153, limit=128 [ 144.065249][ T5099] attempt to access beyond end of device [ 144.065249][ T5099] loop4: rw=0, want=151, limit=128 [ 144.194158][ T5091] attempt to access beyond end of device [ 144.194158][ T5091] loop4: rw=0, want=146, limit=128 [ 144.306686][ T5091] Buffer I/O error on dev loop4, logical block 145, async page read [ 144.327717][ T5106] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 144.443044][ T5091] attempt to access beyond end of device [ 144.443044][ T5091] loop4: rw=0, want=147, limit=128 [ 144.622110][ T5091] Buffer I/O error on dev loop4, logical block 146, async page read [ 144.707623][ T5091] attempt to access beyond end of device [ 144.707623][ T5091] loop4: rw=0, want=148, limit=128 [ 144.771563][ T5091] Buffer I/O error on dev loop4, logical block 147, async page read [ 144.822493][ T5091] attempt to access beyond end of device [ 144.822493][ T5091] loop4: rw=0, want=149, limit=128 [ 144.897879][ T5091] Buffer I/O error on dev loop4, logical block 148, async page read [ 144.950808][ T5091] attempt to access beyond end of device [ 144.950808][ T5091] loop4: rw=0, want=150, limit=128 [ 145.026236][ T5091] Buffer I/O error on dev loop4, logical block 149, async page read [ 145.111224][ T5091] attempt to access beyond end of device [ 145.111224][ T5091] loop4: rw=0, want=151, limit=128 [ 146.292365][ T5091] Buffer I/O error on dev loop4, logical block 150, async page read [ 146.330485][ T5091] Buffer I/O error on dev loop4, logical block 151, async page read [ 146.472341][ T5091] Buffer I/O error on dev loop4, logical block 152, async page read [ 150.971590][ T4297] Bluetooth: hci5: command 0x1003 tx timeout [ 150.978247][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 151.425669][ T5149] device syzkaller0 entered promiscuous mode [ 153.044773][ T4297] Bluetooth: hci5: command 0x1001 tx timeout [ 153.051747][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 153.410426][ T5175] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 153.452208][ T5175] loop4: detected capacity change from 0 to 128 [ 154.114575][ T5176] loop3: detected capacity change from 0 to 512 [ 156.601352][ T5176] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.183: inode has both inline data and extents flags [ 156.617250][ T5176] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.183: couldn't read orphan inode 15 (err -117) [ 156.632674][ T5176] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 156.678567][ T2302] Bluetooth: hci5: command 0x1009 tx timeout [ 158.088070][ T5195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.204'. [ 159.259617][ T5197] loop2: detected capacity change from 0 to 128 [ 161.598497][ T5214] loop1: detected capacity change from 0 to 512 [ 161.637656][ T5216] xt_cgroup: path and classid specified [ 164.607090][ T5214] fscrypt: Error allocating hmac(sha512): -2 [ 164.623400][ T5251] loop3: detected capacity change from 0 to 16 [ 164.645581][ T5214] EXT4-fs (loop1): Error processing option "test_dummy_encryption" [-2] [ 165.565899][ T5251] erofs: (device loop3): mounted with root inode @ nid 36. [ 166.513794][ T5265] loop4: detected capacity change from 0 to 32768 [ 167.478096][ T5281] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 167.560767][ T5280] loop3: detected capacity change from 0 to 1764 [ 167.858333][ T5265] XFS (loop4): Mounting V5 Filesystem [ 168.160586][ T5265] XFS (loop4): Ending clean mount [ 168.397071][ T5265] XFS (loop4): Quotacheck needed: Please wait. [ 168.790525][ T5265] XFS (loop4): Quotacheck: Done. [ 169.412821][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 169.412837][ T26] audit: type=1800 audit(1785429785.931:47): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.220" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 169.474834][ T4186] XFS (loop4): Unmounting Filesystem [ 177.124207][ T5339] loop4: detected capacity change from 0 to 512 [ 177.248150][ T5339] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 178.214975][ T5348] loop2: detected capacity change from 0 to 4096 [ 178.315950][ T5339] EXT4-fs (loop4): Ignoring removed orlov option [ 178.323472][ T5339] EXT4-fs (loop4): DAX unsupported by block device. [ 179.008891][ T5363] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.930912][ T5364] loop1: detected capacity change from 0 to 32768 [ 180.639547][ T5386] tipc: Enabling of bearer rejected, failed to enable media [ 180.639715][ T5364] XFS (loop1): Mounting V5 Filesystem [ 180.835346][ T5364] XFS (loop1): Ending clean mount [ 180.843581][ T5364] XFS (loop1): Quotacheck needed: Please wait. [ 180.950341][ T5364] XFS (loop1): Quotacheck: Done. [ 181.467399][ T26] audit: type=1800 audit(1785429798.151:48): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.242" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 181.509548][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.954982][ T4188] XFS (loop1): Unmounting Filesystem [ 183.367657][ T5434] device syzkaller0 entered promiscuous mode [ 186.636189][ T2302] Bluetooth: hci2: command 0x0406 tx timeout [ 186.642346][ T2302] Bluetooth: hci3: command 0x0406 tx timeout [ 186.648789][ T2302] Bluetooth: hci1: command 0x0406 tx timeout [ 186.668065][ T2302] Bluetooth: hci4: command 0x0406 tx timeout [ 187.264258][ T5456] batman_adv: batadv0: Adding interface: macvtap1 [ 187.270909][ T5456] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.296325][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.322354][ T5456] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 188.587956][ T5459] batman_adv: batadv0: Removing interface: macvtap1 [ 190.007208][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.014940][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.080257][ T5476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.004258][ T5488] loop2: detected capacity change from 0 to 16 [ 191.016204][ T5488] erofs: (device loop2): mounted with root inode @ nid 36. [ 191.084388][ T4837] Process accounting resumed [ 192.391556][ T5489] Process accounting resumed [ 195.055029][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.061367][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.630142][ T5519] loop4: detected capacity change from 0 to 8192 [ 198.288582][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 199.223810][ T4270] Process accounting resumed [ 199.246765][ T5553] Process accounting resumed [ 199.275315][ T5554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.786235][ T5564] loop1: detected capacity change from 0 to 128 [ 201.419496][ T5564] FAT-fs (loop1): Directory bread(block 414) failed [ 201.426343][ T5564] FAT-fs (loop1): Directory bread(block 415) failed [ 201.433087][ T5564] FAT-fs (loop1): Directory bread(block 416) failed [ 201.439723][ T5564] FAT-fs (loop1): Directory bread(block 417) failed [ 201.446456][ T5564] FAT-fs (loop1): Directory bread(block 418) failed [ 201.453117][ T5564] FAT-fs (loop1): Directory bread(block 419) failed [ 201.459744][ T5564] FAT-fs (loop1): Directory bread(block 420) failed [ 201.467009][ T5564] FAT-fs (loop1): Directory bread(block 421) failed [ 203.746903][ T5582] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 203.799175][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.005806][ T5592] loop2: detected capacity change from 0 to 128 [ 205.022671][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.121233][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.162787][ T5582] device bridge_slave_0 left promiscuous mode [ 205.171000][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.213259][ T5592] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.278036][ T5592] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.325621][ T5582] device bridge_slave_1 left promiscuous mode [ 205.373100][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.683559][ T5606] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 207.497282][ T5582] bond0: (slave bond_slave_0): Releasing backup interface [ 207.523158][ T5582] bond0: (slave bond_slave_1): Releasing backup interface [ 207.924990][ T5582] team0: Port device team_slave_0 removed [ 208.145192][ T5582] team0: Port device team_slave_1 removed [ 208.200417][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.331733][ T5582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.078522][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.125223][ T5582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.723874][ T5613] netlink: 'syz.4.302': attribute type 10 has an invalid length. [ 209.731735][ T5613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.302'. [ 210.267188][ T5613] team0: Port device geneve0 added [ 210.453292][ T5625] fuse: Unknown parameter '0x0000000000000005' [ 217.923209][ T5692] loop1: detected capacity change from 0 to 256 [ 221.832226][ T5736] loop3: detected capacity change from 0 to 256 [ 227.141502][ T5776] loop4: detected capacity change from 0 to 512 [ 227.197901][ T5776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.385464][ T5776] EXT4-fs (loop4): 1 truncate cleaned up [ 227.424948][ T5776] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 236.169119][ T5857] fuse: Unknown parameter 'rootmode' [ 237.886907][ T5863] device syzkaller0 entered promiscuous mode [ 238.483719][ T5873] loop4: detected capacity change from 0 to 1764 [ 238.542579][ T5863] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 239.452285][ T5886] device syzkaller0 entered promiscuous mode [ 239.502584][ T5886] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 239.555001][ T5893] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 239.563863][ T5894] [ 239.566205][ T5894] ====================================================== [ 239.571720][ T5893] device syz_tun left promiscuous mode [ 239.573232][ T5894] WARNING: possible circular locking dependency detected [ 239.573249][ T5894] syzkaller #0 Not tainted [ 239.573258][ T5894] ------------------------------------------------------ [ 239.573263][ T5894] syz.1.384/5894 is trying to acquire lock: [ 239.573273][ T5894] ffff88814080daa0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 239.573344][ T5894] [ 239.573344][ T5894] but task is already holding lock: [ 239.573349][ T5894] ffff888063252920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 239.580268][ T5893] bridge0: port 3(syz_tun) entered disabled state [ 239.585952][ T5894] [ 239.585952][ T5894] which lock already depends on the new lock. [ 239.585952][ T5894] [ 239.585971][ T5894] [ 239.585971][ T5894] the existing dependency chain (in reverse order) is: [ 239.585975][ T5894] [ 239.585975][ T5894] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 239.586013][ T5894] __mutex_lock_common+0x1e5/0x2400 [ 239.586047][ T5894] mutex_lock_nested+0x17/0x20 [ 239.586067][ T5894] tcm_set_name+0x26/0x90 [ 239.680746][ T5894] function_make+0x195/0x350 [ 239.685883][ T5894] configfs_mkdir+0x511/0x9e0 [ 239.691110][ T5894] vfs_mkdir+0x386/0x570 [ 239.695899][ T5894] do_mkdirat+0x1dd/0x5c0 [ 239.700773][ T5894] __x64_sys_mkdir+0x6a/0x80 [ 239.705935][ T5894] do_syscall_64+0x4c/0xa0 [ 239.710892][ T5894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.717325][ T5894] [ 239.717325][ T5894] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 239.725598][ T5894] __mutex_lock_common+0x1e5/0x2400 [ 239.731344][ T5894] mutex_lock_nested+0x17/0x20 [ 239.736651][ T5894] configfs_rmdir+0x638/0x980 [ 239.741872][ T5894] vfs_rmdir+0x19d/0x410 [ 239.746661][ T5894] do_rmdir+0x27f/0x710 [ 239.751361][ T5894] __x64_sys_rmdir+0x45/0x50 [ 239.756495][ T5894] do_syscall_64+0x4c/0xa0 [ 239.761463][ T5894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.767900][ T5894] [ 239.767900][ T5894] -> #0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 239.776612][ T5894] __lock_acquire+0x2c66/0x7b50 [ 239.782011][ T5894] lock_acquire+0x19e/0x400 [ 239.787058][ T5894] down_write+0x38/0x60 [ 239.791766][ T5894] configfs_depend_item_unlocked+0x14f/0x430 [ 239.798298][ T5894] usbg_make_tpg+0x1f3/0x580 [ 239.803434][ T5894] target_fabric_make_tpg+0xa0/0x6d0 [ 239.809275][ T5894] configfs_mkdir+0x511/0x9e0 [ 239.814581][ T5894] vfs_mkdir+0x386/0x570 [ 239.819368][ T5894] do_mkdirat+0x1dd/0x5c0 [ 239.824242][ T5894] __x64_sys_mkdir+0x6a/0x80 [ 239.829379][ T5894] do_syscall_64+0x4c/0xa0 [ 239.834321][ T5894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.840739][ T5894] [ 239.840739][ T5894] other info that might help us debug this: [ 239.840739][ T5894] [ 239.851045][ T5894] Chain exists of: [ 239.851045][ T5894] &sb->s_type->i_mutex_key#23 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 239.851045][ T5894] [ 239.865983][ T5894] Possible unsafe locking scenario: [ 239.865983][ T5894] [ 239.873427][ T5894] CPU0 CPU1 [ 239.878784][ T5894] ---- ---- [ 239.884227][ T5894] lock(&opts->dep_lock); [ 239.888648][ T5894] lock(gadget_subsys.su_mutex); [ 239.896180][ T5894] lock(&opts->dep_lock); [ 239.903138][ T5894] lock(&sb->s_type->i_mutex_key#23); [ 239.908586][ T5894] [ 239.908586][ T5894] *** DEADLOCK *** [ 239.908586][ T5894] [ 239.916714][ T5894] 5 locks held by syz.1.384/5894: [ 239.921721][ T5894] #0: ffff88801dbca460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 239.931018][ T5894] #1: ffff8880753f0660 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 239.941827][ T5894] #2: ffffffff8cc23e70 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 239.951557][ T5894] #3: ffffffff8cf21328 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 239.961205][ T5894] #4: ffff888063252920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 239.970804][ T5894] [ 239.970804][ T5894] stack backtrace: [ 239.976688][ T5894] CPU: 0 PID: 5894 Comm: syz.1.384 Not tainted syzkaller #0 [ 239.983965][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.994062][ T5894] Call Trace: [ 239.997364][ T5894] [ 240.000330][ T5894] dump_stack_lvl+0x188/0x250 [ 240.005028][ T5894] ? load_image+0x410/0x410 [ 240.009548][ T5894] ? show_regs_print_info+0x20/0x20 [ 240.014866][ T5894] ? print_circular_bug+0x12b/0x1a0 [ 240.020386][ T5894] check_noncircular+0x296/0x330 [ 240.025339][ T5894] ? add_chain_block+0x9b0/0x9b0 [ 240.030271][ T5894] ? lockdep_lock+0xf1/0x1f0 [ 240.034855][ T5894] ? mark_lock+0x94/0x320 [ 240.039195][ T5894] ? mark_lock+0x94/0x320 [ 240.043514][ T5894] ? _find_first_zero_bit+0xd1/0xf0 [ 240.048708][ T5894] __lock_acquire+0x2c66/0x7b50 [ 240.053568][ T5894] ? verify_lock_unused+0x140/0x140 [ 240.058775][ T5894] ? __mutex_trylock_common+0x15c/0x260 [ 240.064326][ T5894] ? rcu_lock_release+0x20/0x20 [ 240.069191][ T5894] lock_acquire+0x19e/0x400 [ 240.073699][ T5894] ? configfs_depend_item_unlocked+0x14f/0x430 [ 240.079916][ T5894] ? __might_sleep+0xf0/0xf0 [ 240.084630][ T5894] ? __kasan_kmalloc+0xc6/0xe0 [ 240.089479][ T5894] ? read_lock_is_recursive+0x10/0x10 [ 240.094850][ T5894] ? mutex_lock_io_nested+0x60/0x60 [ 240.100178][ T5894] down_write+0x38/0x60 [ 240.104369][ T5894] ? configfs_depend_item_unlocked+0x14f/0x430 [ 240.110520][ T5894] configfs_depend_item_unlocked+0x14f/0x430 [ 240.116502][ T5894] usbg_make_tpg+0x1f3/0x580 [ 240.121092][ T5894] ? mutex_lock_io_nested+0x60/0x60 [ 240.126291][ T5894] ? usbg_drop_tport+0x20/0x20 [ 240.131065][ T5894] ? vscnprintf+0x80/0x80 [ 240.135390][ T5894] target_fabric_make_tpg+0xa0/0x6d0 [ 240.140708][ T5894] ? target_fabric_release_wwn+0xa0/0xa0 [ 240.146341][ T5894] configfs_mkdir+0x511/0x9e0 [ 240.151016][ T5894] vfs_mkdir+0x386/0x570 [ 240.155254][ T5894] do_mkdirat+0x1dd/0x5c0 [ 240.159581][ T5894] ? vfs_mkdir+0x570/0x570 [ 240.164000][ T5894] ? getname_flags+0x1f9/0x4f0 [ 240.168758][ T5894] __x64_sys_mkdir+0x6a/0x80 [ 240.173431][ T5894] do_syscall_64+0x4c/0xa0 [ 240.177844][ T5894] ? clear_bhb_loop+0x30/0x80 [ 240.182532][ T5894] ? clear_bhb_loop+0x30/0x80 [ 240.187240][ T5894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.193147][ T5894] RIP: 0033:0x7f0462369f99 [ 240.197589][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.217370][ T5894] RSP: 002b:00007f04605c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 240.225825][ T5894] RAX: ffffffffffffffda RBX: 00007f04625f1fa0 RCX: 00007f0462369f99 [ 240.233899][ T5894] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 240.241860][ T5894] RBP: 00007f0462400ec4 R08: 0000000000000000 R09: 0000000000000000 [ 240.249850][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.257818][ T5894] R13: 00007f04625f2038 R14: 00007f04625f1fa0 R15: 00007ffd121e2308 [ 240.265829][ T5894] [ 240.274037][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.286872][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.298673][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.307587][ T5893] device bridge_slave_0 left promiscuous mode [ 240.314391][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.324348][ T5893] device bridge_slave_1 left promiscuous mode [ 240.330567][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.344634][ T5893] bond0: (slave bond_slave_0): Releasing backup interface [ 240.357957][ T5893] bond0: (slave bond_slave_1): Releasing backup interface [ 240.379744][ T5893] team0: Port device team_slave_0 removed [ 240.398768][ T5893] team0: Port device team_slave_1 removed [ 240.405374][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.413199][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.421098][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.429037][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1