last executing test programs: 2m36.187978796s ago: executing program 0 (id=25): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101d5010000000000000000070000046fc39a114ea35de16ed59be5bc389d12ad485d84195a7274e7d1be947aa14b6395281ba8fe46"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xff}, 0x3a, [0x8000, 0xc95b, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xe, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0xffffffff, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x4, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x5, 0x1000000a, 0x0, 0x5, 0x201c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93b, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x4fa, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x5, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m35.301012788s ago: executing program 0 (id=30): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 2m34.338553861s ago: executing program 0 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 2m33.533534461s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m33.483659292s ago: executing program 0 (id=39): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000140)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x15, 0x1f, 0x143, &(0x7f0000000040)}) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) 2m32.979131765s ago: executing program 0 (id=41): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101d5010000000000000000070000046fc39a114ea35de16ed59be5bc389d12ad485d84195a7274e7d1be947aa14b6395281ba8fe46"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xff}, 0x3a, [0x8000, 0xc95b, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xe, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0xffffffff, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x4, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x5, 0x1000000a, 0x0, 0x5, 0x201c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93b, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x4fa, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x5, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m32.913429876s ago: executing program 32 (id=41): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101d5010000000000000000070000046fc39a114ea35de16ed59be5bc389d12ad485d84195a7274e7d1be947aa14b6395281ba8fe46"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xff}, 0x3a, [0x8000, 0xc95b, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xe, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0xffffffff, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x4, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x5, 0x1000000a, 0x0, 0x5, 0x201c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93b, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x4fa, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x5, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m31.806721903s ago: executing program 1 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x9, 0x0, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2m30.761140588s ago: executing program 1 (id=53): r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) socket$inet6(0xa, 0x800000000000002, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 2m29.169737547s ago: executing program 1 (id=59): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 2m28.178662541s ago: executing program 1 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m27.863423259s ago: executing program 1 (id=65): unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12018c2e00000008"], 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88) 2m27.143161336s ago: executing program 1 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 2m27.062222718s ago: executing program 33 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 7.571170996s ago: executing program 4 (id=1391): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, '\v\x00'}}, 0x9) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 5.875240077s ago: executing program 4 (id=1396): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 5.041122197s ago: executing program 5 (id=1402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 5.038108698s ago: executing program 2 (id=1403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x0, 0x184) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 4.368051034s ago: executing program 4 (id=1404): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.346591369s ago: executing program 3 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.341446239s ago: executing program 5 (id=1408): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400000500000800"], 0x30}}, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5ef423aae44b4edce02c0000000e0a01010000000000000000048717a61ece33c473797a30000000000900010073797a31000000001400e1bd962b0100000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) 3.044509936s ago: executing program 6 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119}) io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 2.969291628s ago: executing program 4 (id=1410): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, 0x0, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) 2.259545256s ago: executing program 2 (id=1411): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2.181516607s ago: executing program 2 (id=1412): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000000c0)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 2.181159738s ago: executing program 5 (id=1413): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.179843667s ago: executing program 3 (id=1414): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 2.177786278s ago: executing program 4 (id=1415): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, 0x0}, 0x108) 2.132950638s ago: executing program 6 (id=1416): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x184000) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000480)={0x1, 0x0, 0x98, &(0x7f00000003c0)={0xc6, 0x7, 0x9}}) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="66756e6374696f6e66734013af9163310a1dbdee3b3f7c9c2e2b50336bb286deeb0416b0c1ebb6b6e8fe0a8a8cf58e36cc92b67fe68b97ea096c651273ecd8eef590ac0eb8871ebc0626fe5a18761cb0cdd88ae5127c0b8d62979092fb70be40197bfec474f5471d9ec095ea17fbde219cc35d", 0x73) read(r0, &(0x7f0000000100), 0xb) socket$netlink(0x10, 0x3, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 2.05720711s ago: executing program 6 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 1.66056982s ago: executing program 5 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(0x0, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x4a86, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x897d, 0x100000, 0x8, 0x8000, 0x3, 0x0, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x3ffffffffffffff, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x8, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r5, r6, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) 1.379062717s ago: executing program 2 (id=1419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000003c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x40003}}, 0x5c) 1.26909404s ago: executing program 3 (id=1420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 1.178195552s ago: executing program 6 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044800) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000008000400"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ipvlan0\x00'}}, 0x1e) 383.742971ms ago: executing program 3 (id=1422): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 226.514045ms ago: executing program 6 (id=1423): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000040)={0x2e, 0x3a, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81df2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) close(0x3) 185.216056ms ago: executing program 2 (id=1424): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYBLOB="0000000000000000080004000005000008001b"], 0x30}}, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5ef423aae44b4edce02c0000000e0a01010000000000000000048717a61ece33c473797a30000000000900010073797a31000000001400e1bd962b0100000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) 107.128128ms ago: executing program 3 (id=1425): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) dup(r1) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 73.040549ms ago: executing program 2 (id=1426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x375}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200593f14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 70.875149ms ago: executing program 3 (id=1427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 55.390499ms ago: executing program 5 (id=1428): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x184000) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000480)={0x1, 0x0, 0x98, &(0x7f00000003c0)={0xc6, 0x7, 0x9}}) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="66756e6374696f6e66734013af9163310a1dbdee3b3f7c9c2e2b50336bb286deeb0416b0c1ebb6b6e8fe0a8a8cf58e36cc92b67fe68b97ea096c651273ecd8eef590ac0eb8871ebc0626fe5a18761cb0cdd88ae5127c0b8d62979092fb70be40197bfec474f5471d9ec095ea17fbde219cc35d", 0x73) read(r0, &(0x7f0000000100), 0xb) socket$netlink(0x10, 0x3, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 30.14323ms ago: executing program 6 (id=1429): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f0000000280)) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 5.01082ms ago: executing program 4 (id=1430): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 0s ago: executing program 5 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119}) io_uring_register$IORING_REGISTER_FILES(r4, 0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 29.374488][ T4316] cgroup: Unknown subsys name 'net' [ 29.693831][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.993766][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.670768][ T4335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.673501][ T4338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.674839][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.676157][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.678514][ T4340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.680103][ T4340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.681440][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.682162][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.683231][ T4343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.684234][ T4340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.685326][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.687164][ T4340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.687931][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.688796][ T4340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.690244][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.692883][ T4340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.694144][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.694501][ T4340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.695456][ T4344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.697342][ T4340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.699280][ T4345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.699731][ T4340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.702415][ T4340] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.703708][ T4345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.704153][ T4340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.706538][ T4346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.707320][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.717538][ T4340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.739283][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.740919][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.853091][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.865573][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.878398][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.915327][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.916638][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.918282][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.923585][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.924873][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.926367][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.938398][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.939882][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.941752][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.945470][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.948953][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.951509][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.953191][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.958919][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.960659][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.962991][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.964708][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.971894][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.982690][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 30.985945][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.987623][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.988830][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.990404][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.995707][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.011542][ T4328] team0: Port device team_slave_0 added [ 31.013306][ T4328] team0: Port device team_slave_1 added [ 31.019076][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.020579][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.022732][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.024440][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.036305][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.037907][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.039102][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.040668][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.043977][ T4337] team0: Port device team_slave_0 added [ 31.055387][ T4337] team0: Port device team_slave_1 added [ 31.058794][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.059852][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.064563][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.067505][ T4333] team0: Port device team_slave_0 added [ 31.068846][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.070096][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.076470][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.085668][ T4333] team0: Port device team_slave_1 added [ 31.088618][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.093161][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.100724][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.102732][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.104345][ T4341] device bridge_slave_0 entered promiscuous mode [ 31.110425][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.113764][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.118026][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.122488][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.123788][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.128167][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.131316][ T4329] team0: Port device team_slave_0 added [ 31.132558][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.133762][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.135254][ T4341] device bridge_slave_1 entered promiscuous mode [ 31.137047][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.138254][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.143178][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.145442][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.146652][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.150852][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.166600][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.168787][ T4329] team0: Port device team_slave_1 added [ 31.222379][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.261321][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.305432][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.372290][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.411294][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.461174][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.462581][ T4333] Cannot create hsr debugfs directory [ 31.469354][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.470563][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.475087][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.478196][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.479536][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.486762][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.522189][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.561341][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.601205][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.602588][ T4337] Cannot create hsr debugfs directory [ 31.606162][ T4341] team0: Port device team_slave_0 added [ 31.615881][ T4341] team0: Port device team_slave_1 added [ 31.642625][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.643894][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.648104][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.712197][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.761358][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.811149][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.812260][ T4329] Cannot create hsr debugfs directory [ 31.814980][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.816095][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.820441][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.933047][ T4341] device hsr_slave_0 entered promiscuous mode [ 31.991397][ T4341] device hsr_slave_1 entered promiscuous mode [ 32.031156][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.032432][ T4341] Cannot create hsr debugfs directory [ 32.072082][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.102179][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.145695][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.185439][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.233386][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.291854][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.332584][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.372291][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.414524][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.455485][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.509736][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.542744][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.593716][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.632261][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.685959][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.721761][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 32.721765][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 32.732475][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.785952][ T4341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.801218][ T4330] Bluetooth: hci4: command 0x0409 tx timeout [ 32.801255][ T4340] Bluetooth: hci2: command 0x0409 tx timeout [ 32.802308][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 32.823879][ T4341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.866539][ T4341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.896424][ T4341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.958364][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.969835][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.974543][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.976939][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.985970][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.992049][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.994009][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.997660][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.004665][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.006774][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.008418][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.009654][ T527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.011957][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.014909][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.016688][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.017957][ T527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.019390][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.022155][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.023637][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.024863][ T527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.026325][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.027825][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.035636][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.037353][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.050812][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.052796][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.054432][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.056029][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.057593][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.067380][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.069028][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.070500][ T592] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.071774][ T592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.074137][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.076245][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.077923][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.079581][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.081703][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.086515][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.098025][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.099519][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.103479][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.105588][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.115196][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.116910][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.119942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.122415][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.124192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.125899][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.127623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.129267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.130996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.136328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.137894][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.145260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.146930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.150416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.152479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.154600][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.155848][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.164067][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.167756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.169277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.172780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.175314][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.179166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.180945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.182871][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.184121][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.190117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.194575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.196147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.197623][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.198760][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.200124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.206114][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.209791][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.218484][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.220132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.223390][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.224664][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.226143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.228510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.237073][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.238758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.249276][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.250673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.252989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.260723][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.264450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.266065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.267571][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.272682][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.277180][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.281533][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.283549][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.285115][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.287201][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.289356][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.296345][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.299356][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.300764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.303204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.305000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.306477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.307920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.309423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.317183][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.318544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.319839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.322150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.327099][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.329411][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.335805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.337410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.339016][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.340288][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.347517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.349027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.350826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.354352][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.355537][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.357033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.358803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.365550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.382575][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.389629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.391531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.393103][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.397352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.399081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.403898][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.405449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.406913][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.419480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.423656][ T4333] device veth0_vlan entered promiscuous mode [ 33.432949][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.434837][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.440581][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.443099][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.444724][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.446291][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.450042][ T4328] device veth0_vlan entered promiscuous mode [ 33.457107][ T4333] device veth1_vlan entered promiscuous mode [ 33.462730][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.465301][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.466849][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.468382][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.470346][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.472808][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.474149][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.477987][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.487985][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.489718][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.492400][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.494567][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.498718][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.500051][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.509473][ T4328] device veth1_vlan entered promiscuous mode [ 33.512216][ T4333] device veth0_macvtap entered promiscuous mode [ 33.515209][ T4333] device veth1_macvtap entered promiscuous mode [ 33.534651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.536307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.537743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.539744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.544232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.545977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.547887][ T4328] device veth0_macvtap entered promiscuous mode [ 33.550635][ T4328] device veth1_macvtap entered promiscuous mode [ 33.559419][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.563329][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.565033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.566561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.568086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.569770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.573457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.575208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.581859][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.585158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.586959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.589848][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.592529][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.593956][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.595404][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.599735][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.601922][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.604781][ T4329] device veth0_vlan entered promiscuous mode [ 33.607610][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.609143][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.613686][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.615155][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.622258][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.623986][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.626261][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.627988][ T4329] device veth1_vlan entered promiscuous mode [ 33.629998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.631842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.633442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.638947][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.646658][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.648435][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.650908][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.657635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.659132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.660828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.663376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.665639][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.682286][ T4337] device veth0_vlan entered promiscuous mode [ 33.688848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.690613][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.696895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.698468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.702477][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.704060][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.705491][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.706844][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.729976][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.732024][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.756335][ T4337] device veth1_vlan entered promiscuous mode [ 33.763778][ T4329] device veth0_macvtap entered promiscuous mode [ 33.766392][ T4329] device veth1_macvtap entered promiscuous mode [ 33.777679][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.778948][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.781883][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.785841][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.787529][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.789180][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.792101][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.795586][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.797181][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.798796][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.800389][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.803726][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.805436][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.808865][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.810778][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.816044][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.817686][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.819986][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.822080][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.823466][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.830918][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.832670][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.834549][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.836194][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.837824][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.839446][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.847096][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.848688][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.850103][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.853059][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.864349][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.865806][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.868078][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.869832][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.871594][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.873119][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.874525][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.883540][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.884992][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.886414][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.888351][ T4341] device veth0_vlan entered promiscuous mode [ 33.896307][ T4341] device veth1_vlan entered promiscuous mode [ 33.902961][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.904427][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.906381][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.929914][ T4337] device veth0_macvtap entered promiscuous mode [ 33.936449][ T4337] device veth1_macvtap entered promiscuous mode [ 33.942383][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.944283][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.945970][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.947677][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.949215][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.950912][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.956525][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.973495][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.975088][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.976773][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.996600][ T4411] Bluetooth: MGMT ver 1.22 [ 34.008500][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.009826][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.013905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.018460][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.020070][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.047051][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.048827][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.050400][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.055555][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.058399][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.065362][ T4341] device veth0_macvtap entered promiscuous mode [ 34.067813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.069604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.074169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.075855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.083037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.086581][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.088051][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.089447][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.090809][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.121501][ T4341] device veth1_macvtap entered promiscuous mode [ 34.146155][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.147601][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.149145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.150898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.159810][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.165488][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.167165][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.168759][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.170253][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.183609][ T4421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.185225][ T4421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.190407][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.192653][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.194483][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.196898][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.206831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.208549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.227184][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.228896][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.232280][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.233868][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.235511][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.237271][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.238903][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.240561][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.243923][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.246717][ T4341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.248271][ T4341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.249655][ T4341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.251869][ T4341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.257646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.259530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.267113][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.268493][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.269880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.334598][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.336031][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.339636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.355655][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.356923][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.358647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.361333][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.372821][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.374304][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.375709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.425907][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.438667][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.476091][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.477728][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.541145][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 34.544999][ T14] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 34.546803][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.548490][ T14] usb 1-1: config 1 has no interface number 0 [ 34.549450][ T14] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 34.554490][ T14] usb 1-1: config 1 interface 105 has no altsetting 0 [ 34.557733][ T14] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 34.559487][ T14] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 34.560898][ T14] usb 1-1: Product: syz [ 34.563636][ T14] usb 1-1: Manufacturer: syz [ 34.564370][ T14] usb 1-1: SerialNumber: syz [ 34.749017][ T4387] Bluetooth: hci5: Frame reassembly failed (-84) [ 34.784628][ T14] aqc111: probe of 1-1:1.105 failed with error -22 [ 34.808969][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 34.810014][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 34.884801][ T4340] Bluetooth: hci3: command 0x041b tx timeout [ 34.885945][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 34.887045][ T4340] Bluetooth: hci4: command 0x041b tx timeout [ 35.004475][ T4437] futex_wake_op: syz.4.11 tries to shift op by 144; fix this program [ 35.066897][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.070399][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.177371][ T4441] futex_wake_op: syz.4.13 tries to shift op by 144; fix this program [ 35.191515][ T3778] cfg80211: failed to load regulatory.db [ 35.377787][ T4451] overlayfs: missing 'workdir' [ 35.476981][ T4457] overlayfs: failed to clone upperpath [ 36.312553][ T4473] device syzkaller0 entered promiscuous mode [ 36.801370][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 36.801390][ T4338] Bluetooth: hci5: command 0x1003 tx timeout [ 36.881547][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 36.881554][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 36.961944][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 36.961956][ T4340] Bluetooth: hci2: command 0x040f tx timeout [ 36.961980][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 37.110975][ T14] usb 1-1: USB disconnect, device number 2 [ 38.967434][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 38.991873][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 39.046510][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 39.068810][ T4340] Bluetooth: hci4: command 0x0419 tx timeout [ 39.069979][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 39.825074][ T4523] overlayfs: missing 'workdir' [ 39.952729][ T4525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.954248][ T4525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.501744][ T4340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.503618][ T4340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.505167][ T4340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.506714][ T4340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.508499][ T4340] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 40.513756][ T4340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.618208][ T4498] Set syz1 is full, maxelem 65536 reached [ 40.636103][ T4443] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.025137][ T4443] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.134285][ T4443] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.179747][ T4533] chnl_net:caif_netlink_parms(): no params data found [ 41.240828][ T4443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.318465][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.319976][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.324175][ T4533] device bridge_slave_0 entered promiscuous mode [ 41.326817][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.328306][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.330156][ T4533] device bridge_slave_1 entered promiscuous mode [ 41.344319][ T4533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.348320][ T4533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.357112][ T4533] team0: Port device team_slave_0 added [ 41.359817][ T4533] team0: Port device team_slave_1 added [ 41.367704][ T4533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.369154][ T4533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.374462][ T4533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.379373][ T4533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.381656][ T4533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.386511][ T4533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.466649][ T4533] device hsr_slave_0 entered promiscuous mode [ 41.559779][ T4533] device hsr_slave_1 entered promiscuous mode [ 41.671956][ T4533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.673682][ T4533] Cannot create hsr debugfs directory [ 42.285444][ T4565] device syzkaller0 entered promiscuous mode [ 42.565243][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 42.616367][ T4580] overlayfs: missing 'workdir' [ 42.792476][ T4533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.825621][ T4533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.937178][ T4533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.974052][ T4533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.209367][ T4533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.233595][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.235265][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.286987][ T4533] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.294743][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.296820][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.298569][ T4561] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.299836][ T4561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.305530][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.314905][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.322777][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.330933][ T4561] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.332168][ T4561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.398721][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.401538][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.403364][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.405378][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.407439][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.418238][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.433354][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.483796][ T4533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.485644][ T4533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.488354][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.490049][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.495308][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.496946][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.501244][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.968148][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.970042][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.978016][ T4533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.641968][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 45.164396][ T4657] overlayfs: missing 'workdir' [ 45.828589][ T4533] device veth0_vlan entered promiscuous mode [ 45.844349][ T4533] device veth1_vlan entered promiscuous mode [ 45.888360][ T4533] device veth0_macvtap entered promiscuous mode [ 45.978968][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.980942][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.984042][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.985767][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.987901][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.990354][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.994688][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.998023][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.060756][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.065956][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.069665][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.075619][ T4443] device hsr_slave_0 left promiscuous mode [ 46.101376][ T4443] device hsr_slave_1 left promiscuous mode [ 46.181625][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.183066][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.185535][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.187014][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.188624][ T4443] device bridge_slave_1 left promiscuous mode [ 46.195813][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.243125][ T4443] device bridge_slave_0 left promiscuous mode [ 46.245323][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.353748][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.356843][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.359133][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.361804][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.363763][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 46.366199][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.391561][ T4443] device veth1_macvtap left promiscuous mode [ 46.392885][ T4443] device veth0_macvtap left promiscuous mode [ 46.393992][ T4443] device veth1_vlan left promiscuous mode [ 46.395027][ T4443] device veth0_vlan left promiscuous mode [ 46.721329][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 48.401692][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 48.692808][ T4443] team0 (unregistering): Port device team_slave_1 removed [ 48.801129][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 48.854037][ T4443] team0 (unregistering): Port device team_slave_0 removed [ 49.012350][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.222185][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.481112][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 50.663040][ T4443] bond0 (unregistering): Released all slaves [ 50.955253][ T4533] device veth1_macvtap entered promiscuous mode [ 50.990394][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.007976][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.009720][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.021166][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.022991][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.024847][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.026659][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.028602][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.032041][ T4533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.128195][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.130109][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.142758][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.144377][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.145904][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.147565][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.149072][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.150748][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.152644][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.154394][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.156817][ T4533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.166354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.168114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.187563][ T4728] dummy_hcd dummy_hcd.0: remove, state 4 [ 51.189375][ T4533] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.190361][ T4728] usb usb1: USB disconnect, device number 1 [ 51.190930][ T4533] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.193633][ T4533] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.195023][ T4533] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.225470][ T4728] dummy_hcd dummy_hcd.0: stopped [ 51.226314][ T4728] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 51.254345][ T4728] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 51.258700][ T4728] dummy_hcd dummy_hcd.0: Dummy host controller [ 51.269967][ T4728] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 51.283663][ T4728] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.01 [ 51.288146][ T4728] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 51.298294][ T4728] usb usb1: Product: Dummy host controller [ 51.307978][ T4728] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 51.309401][ T4728] usb usb1: SerialNumber: dummy_hcd.0 [ 51.348706][ T4728] hub 1-0:1.0: USB hub found [ 51.366934][ T4728] hub 1-0:1.0: 1 port detected [ 51.398785][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.400252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.402231][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.420900][ T4682] chnl_net:caif_netlink_parms(): no params data found [ 51.521032][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.521773][ T4330] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 51.523201][ T4330] Bluetooth: hci4: Injecting HCI hardware error event [ 51.524532][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.526394][ T4340] Bluetooth: hci4: hardware error 0x00 [ 51.539266][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.629731][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.631424][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.633412][ T4682] device bridge_slave_0 entered promiscuous mode [ 51.637026][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.638467][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.640321][ T4682] device bridge_slave_1 entered promiscuous mode [ 51.649661][ T4682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.706317][ T4682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.719397][ T4682] team0: Port device team_slave_0 added [ 51.735433][ T4682] team0: Port device team_slave_1 added [ 51.746337][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.747520][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.752836][ T4682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.757900][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.759212][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.767019][ T4682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.801300][ T4682] device hsr_slave_0 entered promiscuous mode [ 51.898892][ T4682] device hsr_slave_1 entered promiscuous mode [ 51.932291][ T4682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.933546][ T4682] Cannot create hsr debugfs directory [ 52.023050][ T4682] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.331884][ T4682] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.372384][ T4682] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.413674][ T4682] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.503640][ T4443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.539956][ T4762] overlayfs: missing 'workdir' [ 52.561184][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 52.583392][ T4443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.591528][ T4682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.596142][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.598406][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.603744][ T4682] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.608228][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.610165][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.615062][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.616362][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.621819][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.674760][ T4443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.693113][ T4682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.697171][ T4682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.705377][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.707324][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.708956][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.710119][ T4500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.725829][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.737259][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.741679][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.746376][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.749947][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.754111][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.756993][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.760483][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.764521][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.767147][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.770034][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.773968][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.843645][ T4443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.968753][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.970289][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.978411][ T4682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.081620][ T4777] Zero length message leads to an empty skb [ 53.200459][ T4788] device syzkaller0 entered promiscuous mode [ 53.404103][ T4682] device veth0_vlan entered promiscuous mode [ 53.555531][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.557481][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.559148][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.560734][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.572526][ T4682] device veth1_vlan entered promiscuous mode [ 53.590887][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.592607][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.594191][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.595617][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.597032][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.598622][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.614241][ T4682] device veth0_macvtap entered promiscuous mode [ 53.616832][ T4682] device veth1_macvtap entered promiscuous mode [ 53.679618][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.683789][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.685470][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.687193][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.688873][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.690475][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.691360][ T4340] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 53.712958][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.714630][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.716303][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.717946][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.737741][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.744707][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.746578][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.748068][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.749564][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.766892][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.768728][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.770384][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.780699][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.786182][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.788038][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.789827][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.803954][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.805604][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.811350][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.814134][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.869333][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.871580][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.879139][ T4682] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.880819][ T4682] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.884203][ T4682] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.887801][ T4682] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.892449][ T4810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.96'. [ 53.893909][ T4810] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 53.895237][ T4810] bond0: option mode: unable to set because the bond device has slaves [ 53.966149][ T4815] lo speed is unknown, defaulting to 1000 [ 53.970936][ T4815] lo speed is unknown, defaulting to 1000 [ 53.974204][ T4815] lo speed is unknown, defaulting to 1000 [ 54.001318][ T4340] Bluetooth: hci2: command 0x2016 tx timeout [ 54.037387][ T4815] infiniband syz1: set active [ 54.041950][ T4815] infiniband syz1: added lo [ 54.100871][ T4560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.102357][ T4560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.118016][ T4815] RDS/IB: syz1: added [ 54.118884][ T4815] smc: adding ib device syz1 with port count 1 [ 54.120032][ T4815] smc: ib device syz1 port 1 has pnetid [ 54.124469][ T7] lo speed is unknown, defaulting to 1000 [ 54.125666][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 54.127061][ T4825] netlink: 'syz.2.97': attribute type 10 has an invalid length. [ 54.128283][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 54.135611][ T4825] device geneve2 entered promiscuous mode [ 54.144138][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.149104][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.154269][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.205543][ T4376] lo speed is unknown, defaulting to 1000 [ 54.207331][ T4815] lo speed is unknown, defaulting to 1000 [ 54.212183][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.335630][ T4815] lo speed is unknown, defaulting to 1000 [ 54.463004][ T4815] lo speed is unknown, defaulting to 1000 [ 54.761867][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 54.806243][ T4815] lo speed is unknown, defaulting to 1000 [ 54.840495][ T4815] lo speed is unknown, defaulting to 1000 [ 54.975512][ T4815] lo speed is unknown, defaulting to 1000 [ 55.018997][ T4815] lo speed is unknown, defaulting to 1000 [ 55.368015][ T4815] lo speed is unknown, defaulting to 1000 [ 55.438303][ T4815] lo speed is unknown, defaulting to 1000 [ 55.856081][ T4815] lo speed is unknown, defaulting to 1000 [ 56.496681][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.498420][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.131719][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.153493][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.348771][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.119'. [ 57.518936][ T4928] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.520767][ T4928] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.525905][ T4928] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.527449][ T4928] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.803076][ T4443] device hsr_slave_0 left promiscuous mode [ 57.852055][ T4443] device hsr_slave_1 left promiscuous mode [ 58.011219][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.012835][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.014958][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.016476][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.018580][ T4443] device bridge_slave_1 left promiscuous mode [ 58.077918][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.161922][ T4443] device bridge_slave_0 left promiscuous mode [ 58.163060][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.312505][ T4443] device veth1_macvtap left promiscuous mode [ 58.313727][ T4443] device veth0_macvtap left promiscuous mode [ 58.315082][ T4443] device veth1_vlan left promiscuous mode [ 58.316581][ T4443] device veth0_vlan left promiscuous mode [ 60.886566][ T4443] team0 (unregistering): Port device team_slave_1 removed [ 61.061565][ T4443] team0 (unregistering): Port device team_slave_0 removed [ 61.202771][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.338152][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000015e3a74a: rx timeout, send abort [ 61.392167][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.838640][ C1] vxcan1: j1939_tp_rxtimer: 0x000000007a8f149d: rx timeout, send abort [ 61.840204][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000015e3a74a: abort rx timeout. Force session deactivation [ 62.340088][ C1] vxcan1: j1939_tp_rxtimer: 0x000000007a8f149d: abort rx timeout. Force session deactivation [ 62.822790][ T4443] bond0 (unregistering): Released all slaves [ 63.119025][ T5060] netlink: 36 bytes leftover after parsing attributes in process `syz.6.143'. [ 63.121824][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 63.492018][ T5087] device syzkaller0 entered promiscuous mode [ 64.671532][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.672727][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.952387][ T5147] 0: reclassify loop, rule prio 0, protocol 03 [ 66.490780][ T5225] device syzkaller0 entered promiscuous mode [ 66.568943][ T5225] tc action pedit 'at' offset 20 out of bounds [ 66.753274][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 67.491855][ T5304] tipc: Enabling of bearer rejected, failed to enable media [ 70.111049][ C1] sched: RT throttling activated [ 70.134409][ T5365] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 71.558661][ T5387] device syzkaller0 entered promiscuous mode [ 71.677987][ T4340] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 71.679836][ T4340] CPU: 1 PID: 4340 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 71.681041][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 71.682711][ T4340] Workqueue: hci2 hci_rx_work [ 71.683520][ T4340] Call trace: [ 71.684072][ T4340] dump_backtrace+0x1c4/0x1f0 [ 71.684870][ T4340] show_stack+0x2c/0x3c [ 71.685593][ T4340] __dump_stack+0x30/0x40 [ 71.686359][ T4340] dump_stack_lvl+0xf4/0x15c [ 71.687138][ T4340] dump_stack+0x1c/0x5c [ 71.687869][ T4340] sysfs_create_dir_ns+0x244/0x264 [ 71.688809][ T4340] kobject_add_internal+0x5a8/0xb18 [ 71.689670][ T4340] kobject_add+0x144/0x20c [ 71.690446][ T4340] device_add+0x3dc/0xe4c [ 71.691218][ T4340] hci_conn_add_sysfs+0xb8/0x1bc [ 71.692077][ T4340] le_conn_complete_evt+0xd3c/0x1300 [ 71.692997][ T4340] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 71.693986][ T4340] hci_le_meta_evt+0x2c0/0x4a8 [ 71.694806][ T4340] hci_event_packet+0x64c/0xe60 [ 71.695658][ T4340] hci_rx_work+0x320/0xa94 [ 71.696421][ T4340] process_one_work+0x7e4/0x13bc [ 71.697287][ T4340] worker_thread+0x8cc/0xfe8 [ 71.698079][ T4340] kthread+0x254/0x2e0 [ 71.698798][ T4340] ret_from_fork+0x10/0x20 [ 71.699621][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.704938][ T4340] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 71.707420][ T4340] Bluetooth: hci2: failed to register connection device [ 74.086045][ T5456] overlayfs: missing 'workdir' [ 74.113330][ T4330] Bluetooth: hci2: command 0x2016 tx timeout [ 75.202106][ T5511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.207288][ T5511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.211155][ T4340] Bluetooth: hci2: command 0x0406 tx timeout [ 76.317193][ T5539] device vlan0 entered promiscuous mode [ 76.345598][ T5547] overlayfs: missing 'workdir' [ 76.366654][ T5539] team0: Port device vlan0 added [ 76.769887][ T5572] netlink: 48 bytes leftover after parsing attributes in process `syz.6.250'. [ 76.805259][ T5573] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 77.975178][ T5605] overlayfs: missing 'workdir' [ 78.073921][ T5611] netlink: 32 bytes leftover after parsing attributes in process `syz.6.262'. [ 78.424301][ T27] audit: type=1326 audit(78.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.4.271" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad79028 code=0x0 [ 78.842162][ T5657] 9pnet_virtio: no channels available for device syz [ 81.306910][ T5740] overlayfs: missing 'workdir' [ 81.466813][ T5746] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 81.650221][ T5755] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.712706][ T5760] rt1711h 0-0004: check vid/pid fail [ 81.717892][ T5760] rt1711h: probe of 0-0004 failed with error -5 [ 81.719598][ T5760] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 81.782021][ T5766] 9pnet_virtio: no channels available for device syz [ 81.833318][ T5768] overlayfs: missing 'workdir' [ 83.556308][ T5827] overlayfs: missing 'workdir' [ 85.575649][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 85.906872][ T5889] netlink: 'syz.6.343': attribute type 2 has an invalid length. [ 85.909173][ T5889] netlink: 56 bytes leftover after parsing attributes in process `syz.6.343'. [ 86.150399][ T5831] Set syz1 is full, maxelem 65536 reached [ 86.297572][ T5905] IPVS: stopping master sync thread 5908 ... [ 86.299516][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.351'. [ 86.772847][ T5941] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 86.826981][ T5945] lo speed is unknown, defaulting to 1000 [ 87.303485][ T5975] syz.5.373 uses obsolete (PF_INET,SOCK_PACKET) [ 87.397733][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 87.515580][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'. [ 87.518438][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'. [ 88.896126][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 88.911336][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 89.286568][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.351712][ T6050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.354813][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.392'. [ 89.416225][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 89.418021][ T6059] device wlan0 entered promiscuous mode [ 89.490975][ T6076] Invalid option length (64095) for dns_resolver key [ 91.025082][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.031422][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.952251][ T6225] Set syz1 is full, maxelem 65536 reached [ 94.986883][ T6140] Set syz1 is full, maxelem 65536 reached [ 98.589962][ T6292] Set syz1 is full, maxelem 65536 reached [ 98.720321][ T6464] fuse: Bad value for 'fd' [ 99.325227][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.6.497'. [ 99.705821][ T6547] netlink: 68 bytes leftover after parsing attributes in process `syz.3.509'. [ 100.300416][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.303683][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.088102][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.108026][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.406779][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.582'. [ 102.414835][ T6766] device vlan2 entered promiscuous mode [ 102.416618][ T6766] device bond0 entered promiscuous mode [ 102.419272][ T6766] device bond_slave_0 entered promiscuous mode [ 102.424151][ T6766] device bond_slave_1 entered promiscuous mode [ 102.444194][ T6768] device syzkaller0 entered promiscuous mode [ 102.448771][ T6766] netlink: 284 bytes leftover after parsing attributes in process `syz.5.582'. [ 102.765234][ T6777] lo speed is unknown, defaulting to 1000 [ 102.973091][ T6815] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.187979][ T6846] process 'syz.2.608' launched './file1' with NULL argv: empty string added [ 103.411803][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 103.578553][ T6902] Set syz1 is full, maxelem 65536 reached [ 103.718894][ T6916] tipc: Started in network mode [ 103.719950][ T6916] tipc: Node identity 4, cluster identity 4711 [ 103.721896][ T6916] tipc: Node number set to 4 [ 104.081315][ T6963] tipc: Enabling of bearer rejected, failed to enable media [ 104.134927][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 104.901101][ T7060] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.903180][ T7060] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 104.990997][ T7075] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 105.010621][ T7075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.018795][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.685'. [ 105.039003][ T7075] bond1: (slave dummy0): making interface the new active one [ 105.041695][ T7075] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 106.248228][ T7005] Set syz1 is full, maxelem 65536 reached [ 108.973820][ T7174] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 108.980359][ T7174] tipc: Enabled bearer , priority 10 [ 109.068464][ T7181] netlink: 'syz.5.725': attribute type 1 has an invalid length. [ 109.078824][ T7181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.103421][ T7181] bond1: (slave dummy0): making interface the new active one [ 109.106057][ T7181] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 109.107741][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 109.660712][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 109.720772][ T7198] binder: 7197:7198 tried to acquire reference to desc 0, got 1 instead [ 109.728851][ T7198] binder: 7197:7198 got transaction with too large buffer [ 109.730478][ T7198] binder: 7197:7198 transaction async to 7197:0 failed 6/29201/-22, size 88-24 line 3521 [ 109.733322][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.104041][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.108680][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.141237][ T7227] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 111.148747][ T7227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.155028][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'. [ 113.205606][ T7266] Set syz1 is full, maxelem 65536 reached [ 113.237434][ T7269] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 113.243155][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.250622][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 113.473975][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 113.650448][ T7331] netlink: 'syz.4.770': attribute type 1 has an invalid length. [ 113.691947][ T7331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.702665][ T7331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.770'. [ 114.653692][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 114.661085][ T7407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.669468][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 114.671964][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 114.675980][ T7407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.761675][ T7414] device syzkaller0 entered promiscuous mode [ 114.953187][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.802'. [ 114.977412][ T7423] device syzkaller0 entered promiscuous mode [ 115.113985][ T7425] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 115.120175][ T7425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.128030][ T7425] bond2: (slave dummy0): making interface the new active one [ 115.130169][ T7425] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 115.131909][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 115.223884][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 115.225785][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 115.341228][ T7454] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 115.356504][ T7454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.378617][ T7454] bond2: (slave dummy0): making interface the new active one [ 115.384189][ T7454] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 115.388081][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 115.415146][ T7459] device syzkaller0 entered promiscuous mode [ 115.494670][ T7467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.496228][ T7467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.843217][ T7486] device syzkaller0 entered promiscuous mode [ 116.014745][ T7490] netlink: 'syz.6.831': attribute type 1 has an invalid length. [ 116.024476][ T7490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.044187][ T7490] bond1: (slave dummy0): making interface the new active one [ 116.046621][ T7490] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 116.048526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 116.116522][ T7500] RDS: rds_bind could not find a transport for ::ffff:172.20.20.60, load rds_tcp or rds_rdma? [ 116.140964][ T7502] Set syz1 is full, maxelem 65536 reached [ 116.190003][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.192065][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.497087][ T7531] __nla_validate_parse: 3 callbacks suppressed [ 116.497100][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 116.500160][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 116.583796][ T7547] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 116.590184][ T7547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.599393][ T7550] fuse: Bad value for 'fd' [ 116.613300][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.853'. [ 116.618687][ T7547] bond2: (slave dummy0): Releasing active interface [ 116.714171][ T7547] bond3: (slave dummy0): making interface the new active one [ 116.716158][ T7547] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 116.726537][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 116.795295][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.866'. [ 117.013778][ T7597] netlink: 'syz.5.876': attribute type 1 has an invalid length. [ 117.033922][ T7597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.039204][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.876'. [ 117.048157][ T7597] bond1: (slave dummy0): Releasing active interface [ 117.084784][ T7597] bond2: (slave dummy0): making interface the new active one [ 117.088085][ T7597] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 117.089933][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 118.463167][ T7712] overlayfs: failed to clone upperpath [ 119.543804][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.548742][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.754426][ T7807] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 119.762869][ T7807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.769584][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.959'. [ 119.777098][ T7807] bond1: (slave dummy0): Releasing active interface [ 119.814465][ T7807] bond3: (slave dummy0): making interface the new active one [ 119.816908][ T7807] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 119.818719][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 120.457765][ T7822] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 121.905232][ T7914] device syzkaller0 entered promiscuous mode [ 122.095315][ T7932] ======================================================= [ 122.095315][ T7932] WARNING: The mand mount option has been deprecated and [ 122.095315][ T7932] and is ignored by this kernel. Remove the mand [ 122.095315][ T7932] option from the mount to silence this warning. [ 122.095315][ T7932] ======================================================= [ 122.119192][ T7935] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 122.439285][ T7983] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.440997][ T7983] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.846531][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.850521][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.862661][ T8002] ªªªªªª: renamed from bond0 [ 123.087733][ T4330] Bluetooth: min 460 > max 4 [ 123.387926][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.389764][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.914524][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 125.131202][ T4330] Bluetooth: hci0: command 0x2021 tx timeout [ 126.496022][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.497144][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.617866][ T8139] device syzkaller0 entered promiscuous mode [ 126.655234][ T4330] Bluetooth: hci3: unexpected cc 0x0c2d length: 5 > 4 [ 127.617971][ T8165] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 127.769184][ T4330] Bluetooth: hci1: unexpected event 0x04 length: 6 < 10 [ 127.822150][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 128.343661][ T8214] overlayfs: failed to clone upperpath [ 128.898388][ T8233] overlayfs: failed to clone upperpath [ 129.935826][ T8248] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 129.937522][ T8248] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 130.315296][ T8257] device syzkaller0 entered promiscuous mode [ 130.426001][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 133.653615][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1150'. [ 136.526519][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1168'. [ 136.536456][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.607479][ T8372] Invalid ELF header magic: != ELF [ 136.981803][ T8371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.776880][ T8383] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 137.790648][ T8383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.795679][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1174'. [ 137.801798][ T8393] bond2: (slave dummy0): Releasing active interface [ 140.254619][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.258638][ T8448] 8021q: adding VLAN 0 to HW filter on device ªªªªªª [ 140.262178][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.301864][ T8448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.847055][ T8471] overlayfs: failed to clone upperpath [ 141.143184][ T8478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1189'. [ 141.446511][ T8477] loop6: detected capacity change from 0 to 131072 [ 141.466945][ T8477] F2FS-fs (loop6): invalid crc value [ 141.495246][ T8477] F2FS-fs (loop6): Found nat_bits in checkpoint [ 141.505396][ T8477] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 141.561726][ T8477] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 141.663598][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 142.351408][ T8509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 142.543838][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'. [ 143.112764][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 143.252500][ T8538] fuse: Bad value for 'fd' [ 143.673193][ T8559] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 143.819630][ T8570] overlayfs: failed to clone upperpath [ 144.720819][ T8614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 146.355170][ T8628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.272053][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'. [ 148.766963][ T8667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'. [ 148.768565][ T8667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'. [ 148.959158][ T8677] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1237'. [ 148.973892][ T8677] bond1: (slave dummy0): Releasing active interface [ 149.109756][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 149.300354][ T8693] fuse: Bad value for 'fd' [ 150.034471][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1246'. [ 150.036349][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1246'. [ 151.087390][ T8720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1251'. [ 151.096576][ T8720] bond2: (slave dummy0): Releasing active interface [ 152.618630][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1256'. [ 152.987864][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1258'. [ 152.994132][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1258'. [ 153.500872][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.225462][ T8767] overlayfs: failed to clone upperpath [ 154.651260][ T4340] Bluetooth: hci0: command 0x0406 tx timeout [ 154.652744][ T4340] Bluetooth: hci3: command 0x0406 tx timeout [ 158.925327][ T8810] netlink: 'syz.3.1278': attribute type 1 has an invalid length. [ 159.465552][ T8810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.467302][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1278'. [ 159.479923][ T8824] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 159.548365][ T8828] loop6: detected capacity change from 0 to 512 [ 159.574117][ T8828] EXT4-fs: Ignoring removed bh option [ 159.596156][ T8828] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.1282: corrupted in-inode xattr [ 159.608810][ T8828] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1282: couldn't read orphan inode 15 (err -117) [ 159.627897][ T8828] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 160.460381][ T4682] EXT4-fs (loop6): unmounting filesystem. [ 160.664183][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 162.340288][ T8865] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 162.346943][ T8865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.348790][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1292'. [ 162.353632][ T8871] bond3: (slave dummy0): Releasing active interface [ 162.451680][ T8882] overlayfs: failed to clone upperpath [ 164.349109][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1303'. [ 164.476554][ T4340] Bluetooth: hci2: command 0x0406 tx timeout [ 164.918524][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 165.294132][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 168.889316][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1320'. [ 169.164963][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 170.354918][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1328'. [ 171.849560][ T9056] loop6: detected capacity change from 0 to 512 [ 171.865811][ T9056] EXT4-fs: Ignoring removed bh option [ 171.955758][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1337'. [ 173.977451][ T9056] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.1338: corrupted in-inode xattr [ 173.979883][ T9056] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1338: couldn't read orphan inode 15 (err -117) [ 174.034589][ T9056] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 174.946315][ T4682] EXT4-fs (loop6): unmounting filesystem. [ 175.564365][ T9098] device syzkaller0 entered promiscuous mode [ 178.963544][ T9140] loop6: detected capacity change from 0 to 512 [ 178.965698][ T9140] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.287751][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.615146][ T9203] loop6: detected capacity change from 0 to 512 [ 183.616681][ T9203] EXT4-fs: Ignoring removed bh option [ 183.838540][ T9203] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.1375: corrupted in-inode xattr [ 183.841013][ T9203] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1375: couldn't read orphan inode 15 (err -117) [ 183.850119][ T9203] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 184.193791][ T9203] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.1375: Unrecognised inode hash code 4 [ 184.196159][ T9203] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1375: Corrupt directory, running e2fsck is recommended [ 184.198843][ T9203] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.1375: Unrecognised inode hash code 4 [ 184.200684][ T9203] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1375: Corrupt directory, running e2fsck is recommended [ 184.216079][ T4682] EXT4-fs (loop6): unmounting filesystem. [ 185.326089][ T9238] tipc: Enabling of bearer rejected, failed to enable media [ 185.598520][ T9247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1386'. [ 185.695698][ T9254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1390'. [ 187.394372][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 187.419032][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.420067][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.570774][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 187.577902][ T9284] infiniband syz1: set active [ 187.953654][ T4382] lo speed is unknown, defaulting to 1000 [ 188.250971][ T9291] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1400'. [ 188.658242][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1402'. [ 188.660161][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 188.672182][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.741646][ T9299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.817798][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 188.833497][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.901425][ T9297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.990118][ T9303] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1404'. [ 190.748233][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 190.757877][ T9325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.801360][ T9325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.481635][ T9366] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 193.166993][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1424'. [ 193.378717][ T9394] ================================================================== [ 193.380097][ T9394] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x210/0x214 [ 193.381772][ T9394] Read of size 2 at addr ffff0000d9c0adfb by task syz.2.1426/9394 [ 193.383213][ T9394] [ 193.383637][ T9394] CPU: 0 PID: 9394 Comm: syz.2.1426 Not tainted syzkaller #0 [ 193.384935][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 193.386643][ T9394] Call trace: [ 193.387217][ T9394] dump_backtrace+0x1c4/0x1f0 [ 193.388046][ T9394] show_stack+0x2c/0x3c [ 193.388727][ T9394] __dump_stack+0x30/0x40 [ 193.389497][ T9394] dump_stack_lvl+0xf4/0x15c [ 193.390320][ T9394] print_address_description+0x88/0x218 [ 193.391307][ T9394] print_report+0x50/0x68 [ 193.392065][ T9394] kasan_report+0xa8/0xfc [ 193.392846][ T9394] __asan_report_load2_noabort+0x2c/0x38 [ 193.393814][ T9394] ieee80211_monitor_select_queue+0x210/0x214 [ 193.394872][ T9394] netdev_core_pick_tx+0x130/0x320 [ 193.395746][ T9394] __dev_queue_xmit+0x730/0x3154 [ 193.396586][ T9394] dev_queue_xmit+0x24/0x34 [ 193.397366][ T9394] packet_sendmsg+0x3034/0x40ac [ 193.398188][ T9394] ____sys_sendmsg+0x588/0x90c [ 193.399051][ T9394] __sys_sendmsg+0x288/0x374 [ 193.399849][ T9394] __arm64_sys_sendmsg+0x80/0x94 [ 193.400701][ T9394] invoke_syscall+0x98/0x290 [ 193.401508][ T9394] el0_svc_common+0x13c/0x258 [ 193.402320][ T9394] do_el0_svc+0x5c/0x134 [ 193.403053][ T9394] el0_svc+0x58/0x128 [ 193.403757][ T9394] el0t_64_sync_handler+0x84/0xf0 [ 193.404566][ T9394] el0t_64_sync+0x18c/0x190 [ 193.405323][ T9394] [ 193.405690][ T9394] Allocated by task 8782: [ 193.406386][ T9394] kasan_set_track+0x4c/0x80 [ 193.407120][ T9394] kasan_save_alloc_info+0x24/0x30 [ 193.407991][ T9394] __kasan_kmalloc+0xa0/0xb8 [ 193.408788][ T9394] __kmalloc_node_track_caller+0xcc/0x174 [ 193.409797][ T9394] __alloc_skb+0x260/0x728 [ 193.410583][ T9394] nsim_dev_trap_report_work+0x204/0x94c [ 193.411596][ T9394] process_one_work+0x7e4/0x13bc [ 193.412447][ T9394] worker_thread+0x8cc/0xfe8 [ 193.413240][ T9394] kthread+0x254/0x2e0 [ 193.413939][ T9394] ret_from_fork+0x10/0x20 [ 193.414665][ T9394] [ 193.415053][ T9394] Freed by task 8782: [ 193.415726][ T9394] kasan_set_track+0x4c/0x80 [ 193.416503][ T9394] kasan_save_free_info+0x38/0x5c [ 193.417343][ T9394] ____kasan_slab_free+0x148/0x1b0 [ 193.418230][ T9394] __kasan_slab_free+0x18/0x28 [ 193.419035][ T9394] slab_free_freelist_hook+0x16c/0x1e8 [ 193.419903][ T9394] __kmem_cache_free+0xbc/0x21c [ 193.420674][ T9394] kfree+0xd0/0x1a8 [ 193.421323][ T9394] skb_release_data+0x3d8/0x63c [ 193.422121][ T9394] consume_skb+0xa0/0x104 [ 193.422858][ T9394] nsim_dev_trap_report_work+0x618/0x94c [ 193.423826][ T9394] process_one_work+0x7e4/0x13bc [ 193.424701][ T9394] worker_thread+0x8cc/0xfe8 [ 193.425467][ T9394] kthread+0x254/0x2e0 [ 193.426177][ T9394] ret_from_fork+0x10/0x20 [ 193.426926][ T9394] [ 193.427292][ T9394] The buggy address belongs to the object at ffff0000d9c0a000 [ 193.427292][ T9394] which belongs to the cache kmalloc-4k of size 4096 [ 193.429647][ T9394] The buggy address is located 3579 bytes inside of [ 193.429647][ T9394] 4096-byte region [ffff0000d9c0a000, ffff0000d9c0b000) [ 193.431878][ T9394] [ 193.432268][ T9394] The buggy address belongs to the physical page: [ 193.433341][ T9394] page:000000002368db31 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119c08 [ 193.435088][ T9394] head:000000002368db31 order:3 compound_mapcount:0 compound_pincount:0 [ 193.436464][ T9394] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 193.437876][ T9394] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002a80 [ 193.439346][ T9394] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 193.440827][ T9394] page dumped because: kasan: bad access detected [ 193.441908][ T9394] [ 193.442317][ T9394] Memory state around the buggy address: [ 193.443352][ T9394] ffff0000d9c0ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.444781][ T9394] ffff0000d9c0ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.446255][ T9394] >ffff0000d9c0ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.447595][ T9394] ^ [ 193.448936][ T9394] ffff0000d9c0ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.450272][ T9394] ffff0000d9c0ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.451627][ T9394] ================================================================== [ 193.453042][ T9394] Disabling lock debugging due to kernel taint