last executing test programs: 11.637075889s ago: executing program 4 (id=328): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') syz_open_dev$vim2m(0x0, 0xca55, 0x2) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) 10.633066204s ago: executing program 4 (id=330): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FS_IOC_GETVERSION(r1, 0x40015b13, &(0x7f0000000040)) 9.725858677s ago: executing program 3 (id=331): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x810, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8}]}}]}, 0x38}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d00ed000000000000000000faffffff20000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="03000000010000000100"/28], 0x50) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = fsmount(0xffffffffffffffff, 0x0, 0x8f) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r8, 0x0, 0x0, @void}, 0x10) io_uring_enter(r8, 0x9c3, 0xc66b, 0x48, &(0x7f0000000180)={[0x5]}, 0x8) setregid(0xffffffffffffffff, r7) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f00000000c0)) setresgid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd98, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) fsopen(&(0x7f0000000100)='pvfs2\x00', 0x0) 9.419911541s ago: executing program 3 (id=334): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x1, @sdr={0x3542495d, 0x40c4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_setup(0x6, &(0x7f00000003c0)=0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x6, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) 8.273798529s ago: executing program 2 (id=335): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) 7.718900906s ago: executing program 1 (id=339): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 7.655473198s ago: executing program 3 (id=340): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x200, 0x2}, {0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}, {0x9}, 0x47bf, 0x0, 0x1, 0x1, 0x9833bf88d1b218f5, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x6c}, 0x0, @in=@empty, 0x40, 0x0, 0x3, 0x4, 0x8}}, 0xe8) getdents64(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) 7.566550719s ago: executing program 2 (id=341): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x3b3c03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100), 0xa, 0x700, 0x0) 7.47668138s ago: executing program 0 (id=342): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x1008001, 0x0) 7.4694742s ago: executing program 1 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/icmp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000140)="4e6a106d0103a9f1ef1bd2d08e33610b226f5a0237ccfb2d91866182b2d688a219bbe96e170c9db53b8cc13c6384db08336648be95a44ac11e312d83ea0042064d1246575e3c53038fc7c3f1ed5ba5db77b86b") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0x9) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r8, 0x7fff}, 0xc) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 7.137543155s ago: executing program 0 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x4000032f}, &(0x7f00000006c0), 0x0) syz_io_uring_setup(0x1f10, &(0x7f00000003c0)={0x0, 0x19de, 0x400, 0x0, 0x212}, 0x0, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.054830137s ago: executing program 2 (id=345): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) eventfd2(0x8004, 0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a410400000000000000000100000708000b4000000000400004803c00018008000100636d7000300002801c00038005000100f41c295a5a6a65593d89a9057aa772a7000000000800014000000500080002"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{r7, r8+60000000}, {r9, r10+10000000}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r12, 0x0, 0x0, 0x80800) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r13, 0x0, &(0x7f00000005c0)) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000001040104000000000000000005000000050001000300000089e1dab22290f395afe04ba808717612701fc5745b0ef8215e68feec835b6231ff6ba75105b9"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) 5.500906859s ago: executing program 0 (id=346): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) io_setup(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x2, 0xf5}, 0x400, 0xe, 0x4}) 5.500573609s ago: executing program 4 (id=347): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x6}}]}, 0xf8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x7, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x5, 0x3, 0x0, 0x5]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) clock_gettime(0x3, &(0x7f00000009c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000640)) connect$tipc(0xffffffffffffffff, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x0, {{0x22, 0x3}, 0x3}}, 0x10) memfd_secret(0x0) 5.419930911s ago: executing program 2 (id=348): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) listen(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000340), 0x8) 2.795132469s ago: executing program 1 (id=349): socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x9, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.645021821s ago: executing program 3 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x188, 0x30, 0x9, 0x0, 0x0, {}, [{0x174, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {}, {0x3}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x188}}, 0x0) 2.605242992s ago: executing program 0 (id=351): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x5) pipe(&(0x7f0000000080)) syz_usbip_server_init(0x3) r3 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x4, 0x25d, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.591741282s ago: executing program 1 (id=352): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x22380, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x104) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB="16d60081ab696f4db69ac88117e3cb78ae35a19ad6ef177a909565af550d31502da7f97f7846047ce08da60300a7f76780d7f830103819ff6f634cf9aa20d1e2f53013f38ff554615e156dd0ea35fabbfedaff329074d2a38035f6578212a3f6e536062278b694c112cdae1484ca319c7dd388d61e28a2818c5f42392ad0428c894a0b51f2731726e5a880eab5b244f597a6a69cb0452d9d58dd9c706abc118d548743aa59150346bbf2a5ad03d462bc7fa811b2da6f52628e6a0b213515f3ab5896ba5e17d8ae7d6c2148c3a0d701297d68fb4b251d3c04"]) ptrace(0x10, 0x1) close(0x3) read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020) 1.717120275s ago: executing program 4 (id=353): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 1.694789445s ago: executing program 2 (id=354): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x1008001, 0x0) 1.690791045s ago: executing program 3 (id=355): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x3b3c03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100), 0xa, 0x700, 0x0) 1.618471756s ago: executing program 1 (id=356): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x4000032f}, &(0x7f00000006c0), 0x0) syz_io_uring_setup(0x1f10, &(0x7f00000003c0)={0x0, 0x19de, 0x400, 0x0, 0x212}, 0x0, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.35241267s ago: executing program 4 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYRES32=0x41424344], 0x0) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x256140, 0x1cd) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, 0x0, 0x0) 1.212987752s ago: executing program 0 (id=358): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.083235384s ago: executing program 3 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/icmp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fanotify_init(0x10, 0x400) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000140)="4e6a106d0103a9f1ef1bd2d08e33610b226f5a0237ccfb2d91866182b2d688a219bbe96e170c9db53b8cc13c6384db08336648be95a44ac11e312d83ea0042064d1246575e3c53038fc7c3f1ed5ba5db77b86b") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x9) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r7, 0x7fff}, 0xc) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.063373315s ago: executing program 2 (id=360): socket(0x2b, 0x80801, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x0, 0x6, 0x2da3b9f3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) fchown(r2, 0x0, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 164.930188ms ago: executing program 4 (id=361): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) io_setup(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x2, 0xf5}, 0x400, 0xe, 0x4}) 1.04726ms ago: executing program 0 (id=362): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) 0s ago: executing program 1 (id=363): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x6}}]}, 0xf8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x7, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x5, 0x3, 0x0, 0x5]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) clock_gettime(0x3, &(0x7f00000009c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000640)) connect$tipc(0xffffffffffffffff, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x0, {{0x22, 0x3}, 0x3}}, 0x10) memfd_secret(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.166' (ED25519) to the list of known hosts. [ 57.510750][ T4171] cgroup: Unknown subsys name 'net' [ 57.643775][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.134034][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.563743][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 60.702273][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.767615][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 60.795393][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.803180][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.811712][ T4190] device bridge_slave_0 entered promiscuous mode [ 60.823424][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.830564][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.838866][ T4190] device bridge_slave_1 entered promiscuous mode [ 60.853787][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.939580][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.946679][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.955291][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.973295][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.982659][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.994888][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.002085][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.010267][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.030828][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.096109][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.103412][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.112103][ T4181] device bridge_slave_0 entered promiscuous mode [ 61.122086][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.146011][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.154042][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.162359][ T4181] device bridge_slave_1 entered promiscuous mode [ 61.171140][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.189221][ T4190] team0: Port device team_slave_0 added [ 61.224028][ T4190] team0: Port device team_slave_1 added [ 61.230236][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.237506][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.245525][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.282449][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.289862][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.298072][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.313099][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.325360][ T4189] team0: Port device team_slave_0 added [ 61.356422][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.368433][ T4189] team0: Port device team_slave_1 added [ 61.374904][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.381969][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.407932][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.428419][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.435514][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.443831][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.466910][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.474026][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.500028][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.513205][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.522656][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.530488][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.538693][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.567088][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.588462][ T4181] team0: Port device team_slave_0 added [ 61.594716][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.602160][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.628359][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.640595][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.647720][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.674731][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.706316][ T4181] team0: Port device team_slave_1 added [ 61.735278][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.746974][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.781872][ T4182] team0: Port device team_slave_0 added [ 61.795159][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.802610][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.829340][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.851966][ T4190] device hsr_slave_0 entered promiscuous mode [ 61.859039][ T4190] device hsr_slave_1 entered promiscuous mode [ 61.867604][ T4182] team0: Port device team_slave_1 added [ 61.882858][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.889938][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.915978][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.948610][ T4191] team0: Port device team_slave_0 added [ 61.974300][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.981300][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.988082][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.995832][ T4189] Cannot create hsr debugfs directory [ 62.016256][ T4191] team0: Port device team_slave_1 added [ 62.031118][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.038266][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.064332][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.079396][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.086368][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.112319][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.175798][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.182869][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.209060][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.245152][ T4181] device hsr_slave_0 entered promiscuous mode [ 62.252454][ T4181] device hsr_slave_1 entered promiscuous mode [ 62.259203][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.266770][ T4181] Cannot create hsr debugfs directory [ 62.273050][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.280142][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.308216][ T3158] Bluetooth: hci2: command 0x0409 tx timeout [ 62.311924][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.314824][ T3158] Bluetooth: hci0: command 0x0409 tx timeout [ 62.325365][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 62.337342][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 62.343884][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 62.351104][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.358625][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.365279][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.372885][ T4182] Cannot create hsr debugfs directory [ 62.486998][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.493848][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.500688][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.508330][ T4191] Cannot create hsr debugfs directory [ 62.700770][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.719480][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.729305][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.743107][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.799621][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.818367][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.834647][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.854212][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.907510][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.933516][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.972228][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.982785][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.994164][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.016615][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.030321][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.047574][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.063074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.072960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.092383][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.105248][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.143093][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.153626][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.162946][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.170211][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.180326][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.190314][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.199042][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.206101][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.214035][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.229927][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.246355][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.256272][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.272978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.293809][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.301561][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.313723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.351574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.359621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.391630][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.406642][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.415676][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.425155][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.433864][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.442791][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.451922][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.460626][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.469635][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.478587][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.485673][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.493432][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.503187][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.512491][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.519679][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.533390][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.546670][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.569580][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.577663][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.585591][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.595957][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.615416][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.640130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.653559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.675274][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.695048][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.714911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.723607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.732102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.742610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.753143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.762828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.798215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.806818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.823444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.835515][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.842620][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.851096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.859296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.868442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.878218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.886844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.896122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.904924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.915933][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.925524][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.935061][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.942296][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.952798][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.964077][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.981840][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.990846][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.000705][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.009704][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.016764][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.025262][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.046087][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.060037][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.073324][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.080483][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.104667][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.123769][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.132367][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.139955][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.150178][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.160053][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.169438][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.187263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.195988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.234913][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.252958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.263162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.274991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.284770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.294264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.302784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.313019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.339901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.349019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.357891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.365300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.373112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.383235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.391688][ T4194] Bluetooth: hci1: command 0x041b tx timeout [ 64.397878][ T4194] Bluetooth: hci3: command 0x041b tx timeout [ 64.403260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.403967][ T4194] Bluetooth: hci4: command 0x041b tx timeout [ 64.414113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.418878][ T4194] Bluetooth: hci0: command 0x041b tx timeout [ 64.436455][ T4194] Bluetooth: hci2: command 0x041b tx timeout [ 64.436788][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.459125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.474972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.494491][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.520171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.534949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.544949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.562340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.579015][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.588440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.597043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.607024][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.614143][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.622585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.633728][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.646255][ T4189] device veth0_vlan entered promiscuous mode [ 64.671959][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.689725][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.708312][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.726941][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.748144][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.755370][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.777780][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.803732][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.812304][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.830080][ T4189] device veth1_vlan entered promiscuous mode [ 64.843037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.903202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.920538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.930753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.939950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.950663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.959794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.976232][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.988133][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.016115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.024688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.033541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.044646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.053729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.063480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.072285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.081442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.089848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.097649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.105900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.114741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.123799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.131655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.150461][ T4190] device veth0_vlan entered promiscuous mode [ 65.165822][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.179294][ T4189] device veth0_macvtap entered promiscuous mode [ 65.195231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.207473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.214983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.230483][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.253945][ T4189] device veth1_macvtap entered promiscuous mode [ 65.274179][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.285098][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.294584][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.328231][ T4190] device veth1_vlan entered promiscuous mode [ 65.356524][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.377282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.385355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.395804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.404653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.414350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.423371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.445249][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.460235][ T4181] device veth0_vlan entered promiscuous mode [ 65.466799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.476511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.485305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.495826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.504981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.514592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.525065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.534199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.560068][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.569272][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.578922][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.589316][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.602226][ T4190] device veth0_macvtap entered promiscuous mode [ 65.611944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.621748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.629385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.636784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.646405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.655152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.663316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.672913][ T4191] device veth0_vlan entered promiscuous mode [ 65.695113][ T4181] device veth1_vlan entered promiscuous mode [ 65.706595][ T4190] device veth1_macvtap entered promiscuous mode [ 65.723490][ T4191] device veth1_vlan entered promiscuous mode [ 65.739281][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.803803][ T4181] device veth0_macvtap entered promiscuous mode [ 65.814936][ T4181] device veth1_macvtap entered promiscuous mode [ 65.823971][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.845338][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.856757][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.864629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.873492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.881820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.890262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.898545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.908753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.918616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.927294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.935241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.944251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.956055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.976825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.989180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.006743][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.017527][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.030776][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.041539][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.055282][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.066145][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.079206][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.091167][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.110402][ T4191] device veth0_macvtap entered promiscuous mode [ 66.122839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.131278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.140827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.150643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.161394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.175558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.184809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.198087][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.209823][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.219690][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.230974][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.242284][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.252801][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.261906][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.270974][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.280761][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.298884][ T4191] device veth1_macvtap entered promiscuous mode [ 66.313729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.322275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.332250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.343779][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.353089][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.357777][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.367275][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.369860][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.385231][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.411259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.431651][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.443534][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.453747][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.464968][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.475077][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.485994][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.486224][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 66.502980][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 66.506750][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.509522][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 66.536516][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 66.543178][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 66.566291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.575931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.586110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.594468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.603534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.611677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.624652][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.636190][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.647219][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.657913][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.668337][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.679818][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.691238][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.719794][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728631][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.739702][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.749587][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.761864][ T4182] device veth0_vlan entered promiscuous mode [ 66.768991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.778421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.807921][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.815939][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.835617][ T4182] device veth1_vlan entered promiscuous mode [ 66.865045][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.875780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.886877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.900180][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.929928][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.013718][ T4182] device veth0_macvtap entered promiscuous mode [ 67.025558][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.055647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.065430][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.068430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.096077][ T4182] device veth1_macvtap entered promiscuous mode [ 67.109691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.124324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.132800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.152154][ T4294] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1'. [ 67.189507][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.203230][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.231009][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.245540][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.254535][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.265905][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.279580][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.296192][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.306403][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.323821][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.334071][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.344934][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.359686][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.422071][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.430861][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.460915][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.477810][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.547711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.556691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.565067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.573880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.583252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.594586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.604520][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.655913][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.674016][ T4300] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7'. [ 67.799817][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.886899][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.952244][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.006419][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.071112][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.126238][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.222260][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.360280][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.382276][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.391687][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.400521][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.415174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.431407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.504314][ T4311] Zero length message leads to an empty skb [ 68.557762][ T4194] Bluetooth: hci3: command 0x0419 tx timeout [ 68.568174][ T4194] Bluetooth: hci4: command 0x0419 tx timeout [ 68.603190][ T4194] Bluetooth: hci0: command 0x0419 tx timeout [ 68.618839][ T4309] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 68.621063][ T4194] Bluetooth: hci2: command 0x0419 tx timeout [ 68.850512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.947393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.957044][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.967135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.976266][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.985430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.994584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.003794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.012934][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.022053][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 70.429133][ T4316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.557988][ T4324] dlm: dev_write: no op 0 0 [ 71.030080][ T4328] block device autoloading is deprecated and will be removed. [ 71.489892][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.496640][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.613948][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 71.960885][ T4309] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.734043][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.763219][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.896533][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 73.988940][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 75.856860][ T4304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.592050][ T4304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.592370][ T4392] overlayfs: overlapping lowerdir path [ 76.708420][ T4304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.826927][ T4404] 9pnet: Insufficient options for proto=fd [ 77.053650][ T4304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.366143][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 78.686809][ T4413] chnl_net:caif_netlink_parms(): no params data found [ 79.025733][ T4436] process 'syz.4.29' launched '/dev/fd/-1' with NULL argv: empty string added [ 79.784799][ T4185] Bluetooth: hci1: command 0x0409 tx timeout [ 81.027676][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.054592][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.091566][ T4413] device bridge_slave_0 entered promiscuous mode [ 81.175853][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.201012][ T4468] 9pnet: Insufficient options for proto=fd [ 81.217782][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.225959][ T4413] device bridge_slave_1 entered promiscuous mode [ 81.419676][ T4471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.570310][ T4413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.610143][ T4471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.37'. [ 81.717464][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 81.752420][ T4413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.918989][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 82.033242][ T4413] team0: Port device team_slave_0 added [ 82.063712][ T4413] team0: Port device team_slave_1 added [ 82.367535][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.383035][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.490444][ T4413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.508635][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.515681][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.757229][ T4413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.646957][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 84.659358][ T4413] device hsr_slave_0 entered promiscuous mode [ 84.698002][ T4413] device hsr_slave_1 entered promiscuous mode [ 84.708169][ T4413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.715889][ T4413] Cannot create hsr debugfs directory [ 85.118420][ T4304] device hsr_slave_0 left promiscuous mode [ 85.134041][ T4304] device hsr_slave_1 left promiscuous mode [ 85.242612][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.288045][ T4524] 9pnet: Insufficient options for proto=fd [ 85.297364][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.321625][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.329663][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.337725][ T4304] device bridge_slave_1 left promiscuous mode [ 85.345539][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.386021][ T4304] device bridge_slave_0 left promiscuous mode [ 85.422304][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.507238][ T4304] device veth1_macvtap left promiscuous mode [ 85.527495][ T4304] device veth0_macvtap left promiscuous mode [ 85.533733][ T4304] device veth1_vlan left promiscuous mode [ 85.558437][ T4304] device veth0_vlan left promiscuous mode [ 86.413615][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 86.430019][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 86.449647][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.474412][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.560708][ T7] cfg80211: failed to load regulatory.db [ 86.613620][ T4304] bond0 (unregistering): Released all slaves [ 86.718152][ T4185] Bluetooth: hci1: command 0x0419 tx timeout [ 86.984016][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 87.273386][ T4566] 9pnet: Insufficient options for proto=fd [ 87.707240][ T3158] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.068155][ T3158] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 88.091304][ T3158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.275091][ T3158] usb 4-1: config 0 descriptor?? [ 88.642466][ T4413] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.685310][ T4413] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.707673][ T4413] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.751929][ T4413] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.759236][ T3158] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 88.773999][ T3158] hackrf 4-1:0.0: Could not detect board [ 88.798471][ T3158] hackrf: probe of 4-1:0.0 failed with error -71 [ 88.838172][ T3158] usb 4-1: USB disconnect, device number 2 [ 89.158808][ T4413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.186409][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.201077][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.231412][ T4413] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.356174][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.392138][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.413210][ T4612] fuse: Unknown parameter '0x0000000000000003' [ 89.528441][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.535582][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.727406][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.775272][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.868608][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.927935][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.935057][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.012366][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.042887][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.083150][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.092830][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 90.127336][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.151607][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.213254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.251590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.312951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.393479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.544750][ T4413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.566288][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.577247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.588989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.228285][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.798208][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.816909][ T4413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.904799][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.917809][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.003450][ T4413] device veth0_vlan entered promiscuous mode [ 92.018270][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.030412][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.049121][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.065971][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.094743][ T4413] device veth1_vlan entered promiscuous mode [ 92.261996][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.280590][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.470057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.498543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.531008][ T4413] device veth0_macvtap entered promiscuous mode [ 92.586249][ T4413] device veth1_macvtap entered promiscuous mode [ 92.690681][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.759161][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.800857][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.863221][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.917135][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.974106][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.036825][ T4680] fuse: Unknown parameter '0x0000000000000003' [ 93.038474][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.373345][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.384981][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.393129][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.441167][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.508315][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.567769][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.607483][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 93.623188][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.658003][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.677128][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.714183][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.749598][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.760334][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.770294][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.781613][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.817830][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.850087][ T4413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.939925][ T4413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.067450][ T4413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.117413][ T4413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.203620][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.323954][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.964928][ T4714] netlink: 'syz.0.93': attribute type 20 has an invalid length. [ 95.024371][ T4717] fuse: Unknown parameter '0x0000000000000003' [ 95.749643][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.772854][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.796550][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.829603][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.844943][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.972319][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.199212][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 98.547253][ T4262] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.658568][ T4770] fuse: Unknown parameter '0x0000000000000003' [ 99.750809][ T4262] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 99.774810][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 100.190181][ T4262] usb 4-1: Product: syz [ 100.197019][ T4262] usb 4-1: SerialNumber: syz [ 100.207383][ T4262] usb 4-1: config 0 descriptor?? [ 101.007321][ T4262] ldusb 4-1:0.0: Interrupt in endpoint not found [ 101.027543][ T4262] usb 4-1: USB disconnect, device number 3 [ 101.231019][ T4786] Device name cannot be null; rc = [-22] [ 101.650281][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 102.208801][ T263] block nbd2: Attempted send on invalid socket [ 102.215921][ T263] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 102.228140][ T263] gfs2: error 10 reading superblock [ 103.645273][ T4817] fuse: Unknown parameter '0x0000000000000003' [ 104.755924][ T4833] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 105.222088][ T4829] QAT: Device 7 not found [ 105.584512][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 105.635977][ T4842] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 107.068025][ T4866] fuse: Unknown parameter '0x0000000000000003' [ 108.133168][ T4881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 109.638303][ T4900] fuse: Unknown parameter 'fd0x0000000000000003' [ 111.751974][ T4933] overlayfs: overlapping lowerdir path [ 111.883111][ T4185] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.123734][ T4945] fuse: Unknown parameter 'fd0x0000000000000003' [ 112.567515][ T4185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.679171][ T4185] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.698788][ T4185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.715875][ T4185] usb 3-1: config 0 descriptor?? [ 113.290913][ T4185] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 113.594270][ T4185] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 114.034516][ T4185] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 114.831535][ T4306] usb 3-1: USB disconnect, device number 2 [ 114.842668][ T4965] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 114.853253][ T4969] overlayfs: overlapping lowerdir path [ 114.869994][ T4965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.878132][ T4965] team0: Port device bond0 added [ 115.096255][ T4970] fido_id[4970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 115.767654][ T4986] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 115.779516][ T4986] EXT4-fs (loop2): unable to read superblock [ 117.301710][ T5009] overlayfs: overlapping lowerdir path [ 117.307649][ T4262] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.407190][ T4306] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.557229][ T4262] usb 4-1: Using ep0 maxpacket: 8 [ 117.719299][ T4262] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.763454][ T4262] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.846396][ T4262] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.929351][ T4262] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.041187][ T4262] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.117510][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.410794][ T4306] usb 2-1: Using ep0 maxpacket: 32 [ 118.588956][ T4262] usb 4-1: GET_CAPABILITIES returned 0 [ 118.594510][ T4262] usbtmc 4-1:16.0: can't read capabilities [ 118.658157][ T4306] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.447164][ T4306] usb 2-1: config 0 interface 0 altsetting 16 has an invalid endpoint with address 0xFF, skipping [ 119.478130][ T4306] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 119.487223][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.506215][ T4306] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.540483][ T4306] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 119.552349][ T4306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.588216][ T4306] usb 2-1: config 0 descriptor?? [ 119.606146][ T3158] usb 4-1: USB disconnect, device number 4 [ 120.557394][ T4306] usbhid 2-1:0.0: can't add hid device: -71 [ 120.564662][ T4306] usbhid: probe of 2-1:0.0 failed with error -71 [ 120.584909][ T5048] overlayfs: overlapping lowerdir path [ 120.605362][ T5050] fuse: Invalid rootmode [ 120.623726][ T4306] usb 2-1: USB disconnect, device number 2 [ 123.935757][ T5085] fuse: Invalid rootmode [ 123.986840][ T5088] overlayfs: overlapping lowerdir path [ 126.823305][ T5118] netlink: 'syz.3.223': attribute type 10 has an invalid length. [ 127.654169][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.662507][ T5118] team0: Port device bond0 added [ 127.759896][ T5136] fuse: Invalid rootmode [ 128.866118][ T5150] overlayfs: overlapping lowerdir path [ 129.057566][ T5160] syz.1.234 uses obsolete (PF_INET,SOCK_PACKET) [ 130.718723][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.987301][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 131.275992][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 131.307558][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.346272][ T23] usb 1-1: Product: syz [ 131.355268][ T23] usb 1-1: Manufacturer: syz [ 131.387743][ T5184] fuse: Bad value for 'rootmode' [ 131.393967][ T23] usb 1-1: SerialNumber: syz [ 131.398651][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 132.211533][ T23] usb 1-1: config 0 descriptor?? [ 132.574520][ T23] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.762548][ T5199] ubi31: attaching mtd0 [ 132.776201][ T5199] ubi31: scanning is finished [ 132.781105][ T5199] ubi31: empty MTD device detected [ 132.848091][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854736][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.973789][ T5199] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 133.967774][ T26] audit: type=1326 audit(1751961548.407:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf614929 code=0x0 [ 134.587349][ T23] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 134.605929][ T23] usb 1-1: USB disconnect, device number 2 [ 134.937913][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 135.075659][ T5233] fuse: Bad value for 'rootmode' [ 135.928870][ T5236] sctp: failed to load transform for md5: -2 [ 136.342940][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 138.459863][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 141.064746][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 142.297959][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 143.483051][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 145.724336][ T5371] ptrace attach of "./syz-executor exec"[4190] was attempted by "./syz-executor exec"[5371] [ 147.098457][ T5392] capability: warning: `syz.1.305' uses deprecated v2 capabilities in a way that may be insecure [ 148.428619][ T5408] ptrace attach of "./syz-executor exec"[4190] was attempted by "./syz-executor exec"[5408] [ 149.593845][ T5416] overlayfs: missing 'lowerdir' [ 149.654668][ T5418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 149.903147][ T5424] netlink: set zone limit has 8 unknown bytes [ 151.091841][ T5438] tipc: Started in network mode [ 151.133722][ T5438] tipc: Node identity fa2f3e61cdde, cluster identity 4711 [ 151.134381][ T5438] tipc: Enabled bearer , priority 0 [ 151.150968][ T5433] tipc: Disabling bearer [ 152.367375][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 152.603320][ T5450] ptrace attach of "./syz-executor exec"[4190] was attempted by "./syz-executor exec"[5450] [ 152.757442][ T5454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 154.567210][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 154.587107][ C0] raw-gadget.0 gadget: ignoring, device is not running [ 154.748489][ T7] usb 5-1: device descriptor read/64, error -32 [ 155.039081][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.163499][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 156.297245][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 156.448295][ T26] audit: type=1326 audit(1751961570.957:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff036ad929 code=0x7ffc0000 [ 156.540187][ T26] audit: type=1326 audit(1751961570.977:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff036ad929 code=0x7ffc0000 [ 156.563003][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.578739][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.606184][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.646105][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.664918][ T26] audit: type=1326 audit(1751961570.977:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7eff036ad929 code=0x7ffc0000 [ 156.708352][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.716475][ T26] audit: type=1326 audit(1751961570.977:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff036ad929 code=0x7ffc0000 [ 156.723474][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.754033][ T26] audit: type=1326 audit(1751961570.987:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff036ad929 code=0x7ffc0000 [ 156.776614][ T5491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'. [ 156.796451][ T26] audit: type=1326 audit(1751961570.987:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7eff036ad929 code=0x7ffc0000 [ 156.825389][ T5489] ptrace attach of "./syz-executor exec"[4189] was attempted by "./syz-executor exec"[5489] [ 156.895048][ T26] audit: type=1326 audit(1751961571.257:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff036ad929 code=0x7ffc0000 [ 157.103616][ T7] usb 5-1: usb_control_msg returned -71 [ 157.125993][ T5500] overlayfs: missing 'lowerdir' [ 157.135366][ T26] audit: type=1326 audit(1751961571.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff036ad929 code=0x7ffc0000 [ 157.161149][ T7] usbtmc 5-1:16.0: can't read capabilities [ 157.219403][ T7] usb 5-1: USB disconnect, device number 3 [ 157.429317][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 158.908848][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 162.678905][ T5531] ptrace attach of "./syz-executor exec"[4181] was attempted by "./syz-executor exec"[5531] [ 162.772840][ T5536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'. [ 162.790557][ T5540] overlayfs: unrecognized mount option "/" or missing value [ 164.498825][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 164.603053][ T5558] ================================================================== [ 164.611550][ T5558] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550 [ 164.618790][ T5558] Read of size 1 at addr ffff88802ab04c30 by task syz.3.359/5558 [ 164.626618][ T5558] [ 164.628969][ T5558] CPU: 0 PID: 5558 Comm: syz.3.359 Not tainted 5.15.186-syzkaller #0 [ 164.637055][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.647131][ T5558] Call Trace: [ 164.650430][ T5558] [ 164.653381][ T5558] dump_stack_lvl+0x168/0x230 [ 164.658097][ T5558] ? show_regs_print_info+0x20/0x20 [ 164.663334][ T5558] ? load_image+0x3b0/0x3b0 [ 164.667869][ T5558] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 164.673281][ T5558] print_address_description+0x60/0x2d0 [ 164.679008][ T5558] ? rose_get_neigh+0x17e/0x550 [ 164.683898][ T5558] kasan_report+0xdf/0x130 [ 164.688350][ T5558] ? rose_get_neigh+0x17e/0x550 [ 164.693230][ T5558] rose_get_neigh+0x17e/0x550 [ 164.697950][ T5558] rose_connect+0x412/0x1370 [ 164.702575][ T5558] ? aa_sk_perm+0x7b4/0x8f0 [ 164.707100][ T5558] ? rose_bind+0xa00/0xa00 [ 164.711539][ T5558] ? aa_af_perm+0x1c0/0x2b0 [ 164.716068][ T5558] ? tomoyo_socket_connect_permission+0x195/0x280 [ 164.722526][ T5558] ? bpf_lsm_socket_connect+0x5/0x10 [ 164.727845][ T5558] ? security_socket_connect+0x7c/0xa0 [ 164.733331][ T5558] ? rose_bind+0xa00/0xa00 [ 164.737778][ T5558] __sys_connect+0x389/0x410 [ 164.742397][ T5558] ? __sys_connect_file+0x170/0x170 [ 164.747724][ T5558] ? vtime_user_exit+0x2dc/0x400 [ 164.752705][ T5558] __x64_sys_connect+0x76/0x80 [ 164.757500][ T5558] do_syscall_64+0x4c/0xa0 [ 164.761935][ T5558] ? clear_bhb_loop+0x30/0x80 [ 164.766633][ T5558] ? clear_bhb_loop+0x30/0x80 [ 164.771327][ T5558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.777251][ T5558] RIP: 0033:0x7f09e8225929 [ 164.781686][ T5558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.801313][ T5558] RSP: 002b:00007f09e608d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 164.809769][ T5558] RAX: ffffffffffffffda RBX: 00007f09e844cfa0 RCX: 00007f09e8225929 [ 164.817758][ T5558] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000e [ 164.825742][ T5558] RBP: 00007f09e82a7b39 R08: 0000000000000000 R09: 0000000000000000 [ 164.833725][ T5558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.841709][ T5558] R13: 0000000000000000 R14: 00007f09e844cfa0 R15: 00007fff9a089b08 [ 164.849724][ T5558] [ 164.852767][ T5558] [ 164.855113][ T5558] Allocated by task 4362: [ 164.859488][ T5558] __kasan_kmalloc+0xb5/0xf0 [ 164.864110][ T5558] rose_add_node+0x227/0xdb0 [ 164.868722][ T5558] rose_rt_ioctl+0x9db/0xe20 [ 164.873343][ T5558] rose_ioctl+0x27a/0x790 [ 164.877706][ T5558] sock_do_ioctl+0xd3/0x2f0 [ 164.882510][ T5558] sock_ioctl+0x4ed/0x6e0 [ 164.886877][ T5558] __se_sys_ioctl+0xfa/0x170 [ 164.891488][ T5558] do_syscall_64+0x4c/0xa0 [ 164.895926][ T5558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.901842][ T5558] [ 164.904189][ T5558] Freed by task 5558: [ 164.908193][ T5558] kasan_set_track+0x4b/0x70 [ 164.912804][ T5558] kasan_set_free_info+0x1f/0x40 [ 164.917763][ T5558] ____kasan_slab_free+0xd5/0x110 [ 164.922810][ T5558] slab_free_freelist_hook+0xea/0x170 [ 164.928197][ T5558] kfree+0xef/0x2a0 [ 164.932020][ T5558] rose_rt_device_down+0x3e5/0x430 [ 164.937146][ T5558] rose_device_event+0x5ec/0x680 [ 164.942116][ T5558] raw_notifier_call_chain+0xcb/0x160 [ 164.947531][ T5558] __dev_notify_flags+0x178/0x2d0 [ 164.952587][ T5558] dev_change_flags+0xe3/0x1a0 [ 164.957368][ T5558] dev_ifsioc+0x147/0xe70 [ 164.961713][ T5558] dev_ioctl+0x55f/0xe50 [ 164.965973][ T5558] sock_do_ioctl+0x222/0x2f0 [ 164.970582][ T5558] sock_ioctl+0x4ed/0x6e0 [ 164.974934][ T5558] __se_sys_ioctl+0xfa/0x170 [ 164.979729][ T5558] do_syscall_64+0x4c/0xa0 [ 164.984174][ T5558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.990089][ T5558] [ 164.992431][ T5558] The buggy address belongs to the object at ffff88802ab04c00 [ 164.992431][ T5558] which belongs to the cache kmalloc-512 of size 512 [ 165.006494][ T5558] The buggy address is located 48 bytes inside of [ 165.006494][ T5558] 512-byte region [ffff88802ab04c00, ffff88802ab04e00) [ 165.019699][ T5558] The buggy address belongs to the page: [ 165.025336][ T5558] page:ffffea0000aac100 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802ab06000 pfn:0x2ab04 [ 165.036795][ T5558] head:ffffea0000aac100 order:2 compound_mapcount:0 compound_pincount:0 [ 165.045124][ T5558] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 165.053116][ T5558] raw: 00fff00000010200 ffffea0001e80f08 ffffea000187de08 ffff888016841c80 [ 165.061708][ T5558] raw: ffff88802ab06000 0000000000100008 00000001ffffffff 0000000000000000 [ 165.070285][ T5558] page dumped because: kasan: bad access detected [ 165.076699][ T5558] page_owner tracks the page as allocated [ 165.082407][ T5558] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3183, ts 18573047649, free_ts 0 [ 165.100630][ T5558] get_page_from_freelist+0x1b77/0x1c60 [ 165.106179][ T5558] __alloc_pages+0x1e1/0x470 [ 165.110759][ T5558] new_slab+0xc0/0x4b0 [ 165.114827][ T5558] ___slab_alloc+0x81e/0xdf0 [ 165.119410][ T5558] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 165.124778][ T5558] alloc_bprm+0x56/0x6a0 [ 165.129015][ T5558] kernel_execve+0x49/0x900 [ 165.133510][ T5558] call_usermodehelper_exec_async+0x207/0x350 [ 165.139569][ T5558] ret_from_fork+0x1f/0x30 [ 165.143981][ T5558] page_owner free stack trace missing [ 165.149338][ T5558] [ 165.151651][ T5558] Memory state around the buggy address: [ 165.157272][ T5558] ffff88802ab04b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.165327][ T5558] ffff88802ab04b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.173378][ T5558] >ffff88802ab04c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.181427][ T5558] ^ [ 165.187046][ T5558] ffff88802ab04c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.195107][ T5558] ffff88802ab04d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.203160][ T5558] ================================================================== [ 165.211209][ T5558] Disabling lock debugging due to kernel taint [ 165.217399][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.223417][ T5558] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.230610][ T5558] CPU: 0 PID: 5558 Comm: syz.3.359 Tainted: G B 5.15.186-syzkaller #0 [ 165.240053][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.250097][ T5558] Call Trace: [ 165.253370][ T5558] [ 165.256296][ T5558] dump_stack_lvl+0x168/0x230 [ 165.260973][ T5558] ? show_regs_print_info+0x20/0x20 [ 165.266166][ T5558] ? load_image+0x3b0/0x3b0 [ 165.270669][ T5558] panic+0x2c9/0x7f0 [ 165.274598][ T5558] ? bpf_jit_dump+0xd0/0xd0 [ 165.279093][ T5558] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 165.284987][ T5558] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 165.290870][ T5558] ? _raw_spin_unlock+0x40/0x40 [ 165.295714][ T5558] ? rose_get_neigh+0x17e/0x550 [ 165.300556][ T5558] check_panic_on_warn+0x80/0xa0 [ 165.305487][ T5558] ? rose_get_neigh+0x17e/0x550 [ 165.310330][ T5558] end_report+0x6d/0xf0 [ 165.314481][ T5558] kasan_report+0x102/0x130 [ 165.318989][ T5558] ? rose_get_neigh+0x17e/0x550 [ 165.323834][ T5558] rose_get_neigh+0x17e/0x550 [ 165.328504][ T5558] rose_connect+0x412/0x1370 [ 165.333088][ T5558] ? aa_sk_perm+0x7b4/0x8f0 [ 165.337584][ T5558] ? rose_bind+0xa00/0xa00 [ 165.341993][ T5558] ? aa_af_perm+0x1c0/0x2b0 [ 165.346487][ T5558] ? tomoyo_socket_connect_permission+0x195/0x280 [ 165.352898][ T5558] ? bpf_lsm_socket_connect+0x5/0x10 [ 165.358181][ T5558] ? security_socket_connect+0x7c/0xa0 [ 165.363633][ T5558] ? rose_bind+0xa00/0xa00 [ 165.368041][ T5558] __sys_connect+0x389/0x410 [ 165.372626][ T5558] ? __sys_connect_file+0x170/0x170 [ 165.377821][ T5558] ? vtime_user_exit+0x2dc/0x400 [ 165.382756][ T5558] __x64_sys_connect+0x76/0x80 [ 165.387514][ T5558] do_syscall_64+0x4c/0xa0 [ 165.391929][ T5558] ? clear_bhb_loop+0x30/0x80 [ 165.396595][ T5558] ? clear_bhb_loop+0x30/0x80 [ 165.401265][ T5558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.407160][ T5558] RIP: 0033:0x7f09e8225929 [ 165.411568][ T5558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.431165][ T5558] RSP: 002b:00007f09e608d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 165.439573][ T5558] RAX: ffffffffffffffda RBX: 00007f09e844cfa0 RCX: 00007f09e8225929 [ 165.447539][ T5558] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000e [ 165.455503][ T5558] RBP: 00007f09e82a7b39 R08: 0000000000000000 R09: 0000000000000000 [ 165.463463][ T5558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.471424][ T5558] R13: 0000000000000000 R14: 00007f09e844cfa0 R15: 00007fff9a089b08 [ 165.479397][ T5558] [ 165.482696][ T5558] Kernel Offset: disabled [ 165.487026][ T5558] Rebooting in 86400 seconds..