last executing test programs: 2m52.956668291s ago: executing program 2 (id=3): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x4) sendfile(r0, r0, 0x0, 0xf2) 2m52.802204591s ago: executing program 2 (id=9): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m49.734189686s ago: executing program 2 (id=17): syz_open_procfs(0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) unlink(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x5) 2m48.532226611s ago: executing program 2 (id=18): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) 2m33.369897253s ago: executing program 32 (id=18): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) 2m24.341851995s ago: executing program 3 (id=57): r0 = creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000002600)=[{&(0x7f0000000300)="d88b2da57872c5", 0x7}], 0x1) timer_settime(0x0, 0x1, &(0x7f00000038c0), &(0x7f0000003900)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = open(0x0, 0x145142, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x3e8, 0x4d8, 0x4d8, 0x168, 0x248, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40) 2m23.324982786s ago: executing program 3 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r1]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) ioctl$TCXONC(r2, 0x4b3a, 0x3) syz_emit_ethernet(0x6e, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x8) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r5, r4, 0x7}) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2m19.977593387s ago: executing program 3 (id=63): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 2m19.447773475s ago: executing program 3 (id=65): r0 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305829, 0x0) 2m19.17776853s ago: executing program 3 (id=67): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}], 0x18}, 0x40880) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1}, 0xfe}, 0x18) 2m16.637525917s ago: executing program 3 (id=69): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2m1.153916101s ago: executing program 33 (id=69): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 1m55.699638053s ago: executing program 1 (id=120): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x7, 0x53}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m53.605428893s ago: executing program 1 (id=122): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x20199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 1m47.468521563s ago: executing program 1 (id=128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x93, 0x89, 0x3f, 0x10, 0x46d, 0x900, 0xfa5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0xf0, 0xd5, 0x9a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m44.398321178s ago: executing program 1 (id=134): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x40102) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) ioctl$int_in(r1, 0x5421, 0x0) shutdown(r1, 0x1) syz_io_uring_setup(0x10b, 0x0, &(0x7f0000000340), 0x0) syz_clone(0x80000000, &(0x7f0000000140)="3a1ce2ffbe423fe0d32869b5f5368e31", 0x10, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000400)="cbd9cfccdb3a975bd8864c6535db5e6f4cc0be8110bc7d3d87ce2ca3ba21c80a63e146e31435c80dfb2d0b3f697ec937b1d37bc97bc7c78c02cd84233b67417e28fbe44186ca073eaf5edb8aaa4a07eabf14321a5c5faac3aa3a5f20f6240700be69d3d3386224f735") r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r3 = syz_open_dev$sg(&(0x7f0000000100), 0xf3c, 0x8630644572849689) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)=0x8000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7, 0x600000c, 0x0, 0x3}) 1m43.630947737s ago: executing program 1 (id=135): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0x4, 0x4, 0x418, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffa, 0x8}}}, {{@ipv6={@private1, @private2, [], [0xffffff00, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x3, 0x5}, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x16, 0xb7, 0xe, 0x8, 0x7, @local, @private2, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 0x604, 0x208}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "cf3523f6abea0ac59f38e4cee2d4e02b4433ada4369fbb16cedc9b2a2cbc46c2804dc8c41ce7aba48504d24e8bc4e7d304000000db2882bc827158e95f1a87e8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) futex(0x0, 0x4, 0x1, 0x0, 0x0, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x41c98, 0x0) 1m36.799697317s ago: executing program 1 (id=147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8004, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x81) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) unshare(0x64000600) 1m20.440881043s ago: executing program 34 (id=147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8004, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x81) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) unshare(0x64000600) 22.550084167s ago: executing program 5 (id=279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x497c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xbf) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80, 0xfe}, 'port1\x00', 0x8, 0x140477, 0x7fff, 0x800004, 0x1ff, 0x0, 0x80000000, 0x0, 0x6}) 17.528801213s ago: executing program 6 (id=289): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb25210000000800", @ANYRES32, @ANYBLOB="0600eb"], 0x44}}, 0x28000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 17.030967787s ago: executing program 6 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0, 0x46}], 0x100000ad, 0x10dd3, 0x1ff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) 15.556155287s ago: executing program 7 (id=295): socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 14.441809831s ago: executing program 5 (id=297): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0), 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 13.28075432s ago: executing program 5 (id=298): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') rt_sigprocmask(0x1, &(0x7f0000000580)={[0x800]}, &(0x7f00000005c0), 0x8) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x8200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 13.190801112s ago: executing program 7 (id=300): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {'\x00\x00\x00\x00\a\x00'}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 11.145706305s ago: executing program 5 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0xffff, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x18}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="03", 0x1}], 0x1}, 0x4) 10.922019594s ago: executing program 6 (id=303): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) shutdown(r0, 0x0) 10.845845144s ago: executing program 6 (id=304): socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.801119658s ago: executing program 6 (id=307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x497c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xbf) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80, 0xfe}, 'port1\x00', 0x8, 0x140477, 0x7fff, 0x800004, 0x1ff, 0x0, 0x80000000, 0x0, 0x6}) 9.800893288s ago: executing program 4 (id=308): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0), 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.252081778s ago: executing program 4 (id=310): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}}, 0x4000010) 7.771614789s ago: executing program 4 (id=311): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') rt_sigprocmask(0x1, &(0x7f0000000580)={[0x800]}, &(0x7f00000005c0), 0x8) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x8200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 7.209850612s ago: executing program 7 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000001b000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="20000000002800002c0034801400350064766d72703000000000000000000000d9ff3500776c616e3000000000000000000000001400350062726964676530000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x4044081) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r4, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) 5.737729641s ago: executing program 4 (id=314): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x2000000, 0x3, 0x8}}) 4.205627699s ago: executing program 0 (id=315): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 4.204537139s ago: executing program 7 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) 3.954083611s ago: executing program 0 (id=317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, 0x0) 3.18697351s ago: executing program 0 (id=318): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 3.18646886s ago: executing program 0 (id=319): socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.175130352s ago: executing program 7 (id=320): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.112329s ago: executing program 6 (id=321): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000a00)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000ac0)=0x1, 0x616e9570) 3.11148778s ago: executing program 5 (id=322): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {'\x00\x00\x00\x00\a\x00'}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 1.951831519s ago: executing program 4 (id=323): process_vm_readv(0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)=""/48, 0x30}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000cc0)=""/223, 0xdf}], 0x1, 0x0) 1.888275927s ago: executing program 7 (id=324): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') rt_sigprocmask(0x1, &(0x7f0000000580)={[0x800]}, &(0x7f00000005c0), 0x8) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x8200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 1.881684258s ago: executing program 0 (id=325): r0 = creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000002600)=[{0x0}], 0x1) timer_settime(0x0, 0x1, &(0x7f00000038c0), &(0x7f0000003900)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = open(0x0, 0x145142, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x3e8, 0x4d8, 0x4d8, 0x168, 0x248, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40) 1.610007233s ago: executing program 4 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0, 0x46}], 0x100000ad, 0x10dd3, 0x1ff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) 832.772453ms ago: executing program 0 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000001b000)=ANY=[@ANYBLOB="600000006c0001db10b9f62d31ce7a2fc13d7900ce7ee2aa885bef01bfb6dbddfd293da4074c3d91922a099ce85351e53584880f024f2c398d56726140e73d6f95e6f32d95a0a8cfb8fc634b7ef181f58a239148dab452a8f51acc85f382650eb405192d9e0ea51f41bbb957343bae060972d859fee129d49f556c77ea9cc772a3cad3d02fe9a7e84d1493db35e7707171c04584f5df032d5844c69bb2cee8d45f3a4005786656dfc08c37ed5b56689baaf7af7be7b5431bbbfa38a340ec4434af2a08a96e114ccc789b286a66646f6bf2f70830b102757e02b775da13e76c5e1da7c3bd221101c15e741bcef93688aa0bf5a6f4666557e562cd4f6a48d5e8ba02f090f7", @ANYRES32=0x0, @ANYBLOB="20000000002800002c0034801400350064766d72703000000000000000000000d9ff3500776c616e3000000000000000000000001400350062726964676530000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x4044081) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r5, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) 0s ago: executing program 5 (id=328): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x40102) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) ioctl$int_in(r1, 0x5421, 0x0) shutdown(r1, 0x1) syz_io_uring_setup(0x10b, 0x0, &(0x7f0000000340), 0x0) syz_clone(0x80000000, &(0x7f0000000140)="3a1ce2ffbe423fe0d32869b5f5368e31fce2865ccaf341", 0x17, &(0x7f00000001c0), 0x0, &(0x7f0000000400)="cbd9cfccdb3a975bd8864c6535db5e6f4cc0be8110bc7d3d87ce2ca3ba21c80a63e146e31435c80dfb2d0b3f697ec937b1d37bc97bc7c78c02cd84233b67417e28fbe44186ca073eaf5edb8aaa4a07eabf14321a5c5faac3aa3a5f20f6240700be69d3d3386224f735") r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r3 = syz_open_dev$sg(&(0x7f0000000100), 0xf3c, 0x8630644572849689) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)=0x8000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7, 0x600000c, 0x0, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 58.313120][ T4171] cgroup: Unknown subsys name 'net' [ 58.476541][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.935189][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.782595][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.888622][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.906186][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 61.950442][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.964815][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.972091][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.980760][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.995029][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.002204][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.010394][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.098900][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.135498][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.179384][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.186763][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.194996][ T4193] device bridge_slave_0 entered promiscuous mode [ 62.203710][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 62.214276][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.221600][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.229464][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.244332][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.251630][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.259710][ T4192] device bridge_slave_0 entered promiscuous mode [ 62.267699][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.274832][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.283038][ T4193] device bridge_slave_1 entered promiscuous mode [ 62.294745][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.301974][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.310616][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.320228][ T4185] team0: Port device team_slave_0 added [ 62.326445][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.333947][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.342404][ T4192] device bridge_slave_1 entered promiscuous mode [ 62.375167][ T4185] team0: Port device team_slave_1 added [ 62.389119][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.407260][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.456004][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.473742][ T4193] team0: Port device team_slave_0 added [ 62.480505][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.487481][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.513391][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.527746][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.542553][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.552951][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.560417][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.586583][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.598788][ T4193] team0: Port device team_slave_1 added [ 62.610864][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.663796][ T4192] team0: Port device team_slave_0 added [ 62.673438][ T4184] team0: Port device team_slave_0 added [ 62.687171][ T4184] team0: Port device team_slave_1 added [ 62.695905][ T4192] team0: Port device team_slave_1 added [ 62.715443][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.722770][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.749179][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.773573][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.780783][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.788899][ T4195] device bridge_slave_0 entered promiscuous mode [ 62.811851][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.818824][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.845037][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.874730][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.882092][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.890332][ T4195] device bridge_slave_1 entered promiscuous mode [ 62.897727][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.905015][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.931109][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.943963][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.951058][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.977576][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.994259][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.001419][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.008624][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.015745][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.041866][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.059474][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.066637][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.092651][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.150675][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.182281][ T4193] device hsr_slave_0 entered promiscuous mode [ 63.189258][ T4193] device hsr_slave_1 entered promiscuous mode [ 63.196391][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.204707][ T4193] Cannot create hsr debugfs directory [ 63.212046][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.226060][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.232924][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.239637][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.247649][ T4184] Cannot create hsr debugfs directory [ 63.332020][ T4195] team0: Port device team_slave_0 added [ 63.352378][ T4192] device hsr_slave_0 entered promiscuous mode [ 63.359052][ T4192] device hsr_slave_1 entered promiscuous mode [ 63.366057][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.374032][ T4192] Cannot create hsr debugfs directory [ 63.392933][ T4195] team0: Port device team_slave_1 added [ 63.486288][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.493577][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.513107][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 63.520222][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 63.529118][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 63.537972][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.576728][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.583798][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.591004][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 63.611082][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.631759][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.733961][ T4195] device hsr_slave_0 entered promiscuous mode [ 63.740994][ T4195] device hsr_slave_1 entered promiscuous mode [ 63.748084][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.755924][ T4195] Cannot create hsr debugfs directory [ 63.794826][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.810970][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.820225][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.833794][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.903102][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.948585][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.967751][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.979090][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.988895][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.003672][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.013403][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.022761][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.110758][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.133558][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.146551][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.170575][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.179775][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.225872][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.235430][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.257823][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.273667][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.292741][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.307658][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.316721][ T1684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.325797][ T1684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.336114][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.352488][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.370601][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.379548][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.389694][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.397034][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.407228][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.416517][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.425481][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.432692][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.442027][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.457028][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.464241][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.483446][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.492813][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.502323][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.511713][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.518812][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.532820][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.541071][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.588018][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.596269][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.606546][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.617140][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.626396][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.635667][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.643898][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.652464][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.662178][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.670911][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.677985][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.685942][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.718898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.728484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.737887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.747578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.757346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.766569][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.773704][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.782614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.791678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.800585][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.807672][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.815667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.824663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.836165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.845068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.889698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.899531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.909790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.920294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.928734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.937821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.947440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.956005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.964661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.974142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.982976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.993832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.003722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.012954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.024198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.032480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.057039][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.075007][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.093989][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.108643][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.135773][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.146674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.155836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.165443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.174131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.214505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.232449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.245696][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.266185][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.284776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.295750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.307523][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.314708][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.341626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.373144][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.391795][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.410262][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.418297][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.430886][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.451048][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.458172][ T4262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.501123][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.512607][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.521725][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.530888][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.537963][ T4262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.547727][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.560891][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.569423][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.576543][ T4262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.591988][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.608004][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 65.614338][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 65.627711][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.636030][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 65.638065][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.651502][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.662234][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.670433][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 65.673910][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.686211][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.689029][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 65.697339][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.707903][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.715911][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.724545][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.734819][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.743258][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.771635][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.788646][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.799375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.815263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.825645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.839271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.848905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.862322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.874745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.884850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.895366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.903202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.911639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.942555][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.951699][ T1684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.966957][ T1684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.976055][ T1684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.992064][ T1684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.013967][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.034274][ T1684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.050536][ T1684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.096803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.115331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.128770][ T4185] device veth0_vlan entered promiscuous mode [ 66.143115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.160877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.180313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.205468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.227847][ T4185] device veth1_vlan entered promiscuous mode [ 66.289597][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.308839][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.318772][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.327668][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.367712][ T4193] device veth0_vlan entered promiscuous mode [ 66.376215][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.386474][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.414103][ T4185] device veth0_macvtap entered promiscuous mode [ 66.426624][ T4193] device veth1_vlan entered promiscuous mode [ 66.437604][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.447389][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.455513][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.464620][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.474618][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.484855][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.498345][ T4185] device veth1_macvtap entered promiscuous mode [ 66.516134][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.525611][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.534230][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.543418][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.551856][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.559285][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.568508][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.612767][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.623929][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.634986][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.644997][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.653824][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.661908][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.672734][ T4184] device veth0_vlan entered promiscuous mode [ 66.681533][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.696173][ T4193] device veth0_macvtap entered promiscuous mode [ 66.709621][ T4184] device veth1_vlan entered promiscuous mode [ 66.717603][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.726471][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.739267][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.748510][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.757406][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.767960][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.777263][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.790994][ T4193] device veth1_macvtap entered promiscuous mode [ 66.801510][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.809582][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.818620][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.828030][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.837016][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.849377][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.859445][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.868586][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.878037][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.946797][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.966689][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.978916][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.002856][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.014250][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.026076][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.038362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.048676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.057731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.066038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.074781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.084275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.093150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.102321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.111731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.120957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.129650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.138823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.157856][ T4184] device veth0_macvtap entered promiscuous mode [ 67.169528][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.179240][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.188456][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.207247][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.220486][ T4192] device veth0_vlan entered promiscuous mode [ 67.259294][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.276325][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.287780][ T4184] device veth1_macvtap entered promiscuous mode [ 67.311976][ T4192] device veth1_vlan entered promiscuous mode [ 67.319565][ T4195] device veth0_vlan entered promiscuous mode [ 67.332123][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.341159][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.349205][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.359711][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.367841][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.376691][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.399117][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.412260][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.425413][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.436578][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.448153][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.458543][ T4195] device veth1_vlan entered promiscuous mode [ 67.467921][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.476254][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.484964][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.493377][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.503061][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.519982][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.528013][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.545726][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.565615][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.575830][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.586583][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.598594][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.620731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.630604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.638600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.646804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.661624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.670296][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 67.676391][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 67.683136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.691216][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 67.697946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.732009][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.747774][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.762761][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 67.769950][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.778681][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.780751][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 67.814755][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.827175][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.840340][ T4195] device veth0_macvtap entered promiscuous mode [ 67.859451][ T4192] device veth0_macvtap entered promiscuous mode [ 67.876320][ T4195] device veth1_macvtap entered promiscuous mode [ 67.920048][ T1684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.928020][ T1684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.956633][ T4192] device veth1_macvtap entered promiscuous mode [ 67.965726][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.985172][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.996205][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.005657][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.015301][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.479836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.489856][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.499831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.699840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.709833][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.719848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.729857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.739843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.749845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.759860][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 69.760178][ T4257] Bluetooth: hci1: command 0x0419 tx timeout [ 69.766436][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 69.779924][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 69.826927][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.839775][ T1324] Bluetooth: hci2: command 0x0419 tx timeout [ 69.850761][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 69.856839][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.871813][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.885688][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.897982][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.912352][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.929559][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.953113][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.964823][ T1684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.972194][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.983476][ T1684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.999723][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.010266][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.019473][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.032973][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.051098][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.065702][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.077257][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.087936][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.098032][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.108960][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.129240][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.151737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.167324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.177127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.194069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.207783][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.219292][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.229562][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.241201][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.251416][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.262278][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.275320][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.304317][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.317283][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.328114][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.338936][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.349309][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.360118][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.370324][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.381087][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.404582][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.419693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.431033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.442402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.455479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.468805][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.482955][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.492037][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.501018][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.532993][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.579346][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.589497][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.599024][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.621272][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.657971][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.695251][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.777733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.868878][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.913664][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.955638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.996884][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.009031][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.032194][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.041739][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.064442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.084381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.109056][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.174552][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.222356][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.274264][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.281055][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.410725][ T4287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.451409][ T4312] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 71.660138][ T4287] usb 5-1: Using ep0 maxpacket: 32 [ 71.810074][ T4287] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 71.847178][ T4287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.893456][ T4287] usb 5-1: config 0 has no interface number 0 [ 71.910400][ T4287] usb 5-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.955214][ T4287] usb 5-1: config 0 interface 196 has no altsetting 0 [ 72.140008][ T4287] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 72.165854][ T4287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.222129][ T4173] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 72.253882][ T4287] usb 5-1: Product: syz [ 72.258405][ T4287] usb 5-1: Manufacturer: syz [ 72.263600][ T4287] usb 5-1: SerialNumber: syz [ 72.283960][ T4287] usb 5-1: config 0 descriptor?? [ 72.342933][ T4287] ipheth 5-1:0.196: Unable to find endpoints [ 72.590100][ T4173] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.617401][ T4173] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.671972][ T4173] usb 3-1: config 0 interface 0 has no altsetting 0 [ 72.704622][ T4173] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 72.747260][ T4287] usb 5-1: USB disconnect, device number 2 [ 72.765002][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.891314][ T4173] usb 3-1: config 0 descriptor?? [ 74.086397][ T4173] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 74.135056][ T4173] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 74.175186][ T4173] hid-steam 0003:28DE:1102.0001: item fetching failed at offset 2/5 [ 74.227142][ T4173] hid-steam 0003:28DE:1102.0001: steam_probe:parse of hid interface failed [ 74.312549][ T4173] hid-steam: probe of 0003:28DE:1102.0001 failed with error -22 [ 74.410704][ T4173] usb 3-1: USB disconnect, device number 2 [ 75.946917][ T4347] input: syz0 as /devices/virtual/input/input5 [ 77.127044][ T4356] Cannot find add_set index 0 as target [ 78.560195][ T4186] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.140257][ T4186] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 79.149354][ T4186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.187894][ T4186] usb 4-1: Product: syz [ 79.198014][ T4186] usb 4-1: Manufacturer: syz [ 79.209636][ T4186] usb 4-1: SerialNumber: syz [ 79.820738][ T4371] netlink: 277 bytes leftover after parsing attributes in process `syz.1.24'. [ 80.000486][ T4186] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 80.070480][ T4186] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 80.136829][ T4186] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 81.534374][ T4186] lan78xx: probe of 4-1:1.0 failed with error -71 [ 81.576784][ T4186] usb 4-1: USB disconnect, device number 2 [ 83.591246][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 83.598707][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 83.765783][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.774123][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.066361][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 86.132342][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 86.632063][ T2057] cfg80211: failed to load regulatory.db [ 87.581578][ T4410] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 87.589399][ T4370] Bluetooth: hci6: Frame reassembly failed (-84) [ 87.755033][ T4414] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 88.526343][ T4404] Bluetooth: hci5: command 0x1009 tx timeout [ 90.465440][ T4338] Bluetooth: hci6: command 0x1003 tx timeout [ 90.475767][ T146] Bluetooth: hci6: sending frame failed (-49) [ 90.613077][ T4423] device syzkaller0 entered promiscuous mode [ 91.363896][ T4441] netlink: 277 bytes leftover after parsing attributes in process `syz.3.41'. [ 91.467994][ T4436] chnl_net:caif_netlink_parms(): no params data found [ 91.596035][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.606777][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.625142][ T4436] device bridge_slave_0 entered promiscuous mode [ 91.657790][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.684272][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.704467][ T4436] device bridge_slave_1 entered promiscuous mode [ 91.737549][ T1684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.901729][ T4436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.922486][ T4436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.997371][ T1684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.055268][ T4436] team0: Port device team_slave_0 added [ 92.074529][ T4436] team0: Port device team_slave_1 added [ 92.140847][ T1684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.197093][ T4449] loop7: detected capacity change from 0 to 7 [ 92.209117][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.226512][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.270165][ T4449] Dev loop7: unable to read RDB block 7 [ 92.276669][ T144] loop: Write error at byte offset 7, length 3584. [ 92.284464][ T4436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.289994][ T4449] loop7: unable to read partition table [ 92.309371][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.321485][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 92.322447][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.333172][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 92.361106][ T4449] loop7: partition table beyond EOD, truncated [ 92.396685][ T4449] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 92.446254][ T4436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.450400][ T3560] Dev loop7: unable to read RDB block 7 [ 92.494606][ T1684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.507076][ T3560] loop7: unable to read partition table [ 92.513877][ T3560] loop7: partition table beyond EOD, truncated [ 92.537248][ T4436] device hsr_slave_0 entered promiscuous mode [ 92.545668][ T4436] device hsr_slave_1 entered promiscuous mode [ 92.553226][ T4436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.561261][ T4404] Bluetooth: hci6: command 0x1001 tx timeout [ 92.567399][ T4191] Bluetooth: hci6: sending frame failed (-49) [ 92.570022][ T4436] Cannot create hsr debugfs directory [ 92.656678][ T4452] netlink: 64 bytes leftover after parsing attributes in process `syz.3.46'. [ 92.738268][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 93.009886][ T1107] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.280328][ T4404] Bluetooth: hci7: command 0x0409 tx timeout [ 95.007215][ T23] Bluetooth: hci6: command 0x1009 tx timeout [ 95.837312][ T4436] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.064399][ T23] Bluetooth: hci7: command 0x041b tx timeout [ 98.102985][ T4436] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.426069][ T4436] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.557531][ T4436] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.309118][ T4506] Zero length message leads to an empty skb [ 100.216414][ T23] Bluetooth: hci7: command 0x040f tx timeout [ 100.334437][ T4516] Cannot find add_set index 0 as target [ 101.273506][ T4526] 9pnet: Insufficient options for proto=fd [ 101.410112][ T4436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.353078][ T23] Bluetooth: hci7: command 0x0419 tx timeout [ 102.419992][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.454749][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.651556][ T4530] IPv6: NLM_F_REPLACE set, but no existing node found! [ 102.699427][ T4519] syz.3.58 (4519): attempted to duplicate a private mapping with mremap. This is not supported. [ 102.799306][ T4436] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.919523][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.938050][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.956339][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.963487][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.411645][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.455188][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.480736][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.516848][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.523981][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.557037][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.597522][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.640825][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.666380][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.687109][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.710807][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.719464][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.778397][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.790775][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.811584][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.830326][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.851813][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.978350][ T1684] device hsr_slave_0 left promiscuous mode [ 106.000273][ T1684] device hsr_slave_1 left promiscuous mode [ 106.040056][ T1684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.066512][ T1684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.096800][ T1684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.143181][ T1684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.182607][ T1684] device bridge_slave_1 left promiscuous mode [ 106.193657][ T1684] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.248784][ T1684] device bridge_slave_0 left promiscuous mode [ 106.262760][ T1684] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.405054][ T4594] netlink: 277 bytes leftover after parsing attributes in process `syz.1.55'. [ 106.428099][ T1684] device veth1_macvtap left promiscuous mode [ 106.434607][ T1684] device veth0_macvtap left promiscuous mode [ 106.440806][ T1684] device veth1_vlan left promiscuous mode [ 106.510157][ T1684] device veth0_vlan left promiscuous mode [ 107.307718][ T1684] team0 (unregistering): Port device team_slave_1 removed [ 107.348353][ T1684] team0 (unregistering): Port device team_slave_0 removed [ 107.390628][ T1684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.419837][ T1684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.597722][ T1684] bond0 (unregistering): Released all slaves [ 107.687837][ T4585] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.847420][ T4436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.855280][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.872214][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.144001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.297471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.614266][ T4645] infiniband syz2: set active [ 110.619219][ T4645] infiniband syz2: added syz_tun [ 110.630250][ T4645] infiniband syz2: Couldn't open port 1 [ 110.653172][ T4645] RDS/IB: syz2: added [ 110.657480][ T4645] smc: adding ib device syz2 with port count 1 [ 110.663893][ T4645] smc: ib device syz2 port 1 has pnetid [ 110.810709][ T4436] device veth0_vlan entered promiscuous mode [ 110.873093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.894147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.936132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.019704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.139192][ T4436] device veth1_vlan entered promiscuous mode [ 111.361667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.370598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.190738][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.199418][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.263288][ T4436] device veth0_macvtap entered promiscuous mode [ 112.309572][ T4436] device veth1_macvtap entered promiscuous mode [ 112.402864][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.457734][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.496385][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.739922][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.770036][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.916559][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.190281][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.240699][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.299878][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.320330][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.941169][ T4436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.101269][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.123149][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.176720][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.201065][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.356238][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.407298][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.209952][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.236198][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.266809][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.308303][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.344624][ T4436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.384588][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.406670][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.478994][ T4436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.517046][ T4436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.555688][ T4436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.596021][ T4436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.906116][ T4536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.956385][ T4536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.016880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.631312][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.645788][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.717860][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.059117][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.066667][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.186842][ T4747] tipc: Enabling of bearer rejected, failed to enable media [ 121.318869][ T4749] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 126.637241][ T4828] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.644576][ T4828] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.080998][ T4835] device syzkaller0 entered promiscuous mode [ 127.610164][ T2057] Bluetooth: hci3: command 0x0409 tx timeout [ 128.297187][ T4812] chnl_net:caif_netlink_parms(): no params data found [ 129.304041][ T4876] tipc: Enabling of bearer rejected, failed to enable media [ 129.381389][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.433923][ T4812] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.475076][ T4812] device bridge_slave_0 entered promiscuous mode [ 129.535336][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.572624][ T4812] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.623778][ T4812] device bridge_slave_1 entered promiscuous mode [ 129.669948][ T4404] Bluetooth: hci3: command 0x041b tx timeout [ 129.798677][ T4812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.931360][ T4812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.117170][ T4812] team0: Port device team_slave_0 added [ 130.152857][ T4812] team0: Port device team_slave_1 added [ 130.853266][ T4812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.870151][ T4812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.097509][ T4812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.236608][ T4812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.455521][ T4812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.679637][ T4812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.750139][ T4404] Bluetooth: hci3: command 0x040f tx timeout [ 132.723708][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730886][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.829923][ T4223] Bluetooth: hci3: command 0x0419 tx timeout [ 137.269982][ T4404] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.529871][ T4404] usb 2-1: Using ep0 maxpacket: 16 [ 138.479978][ T4404] usb 2-1: config 0 has an invalid interface number: 60 but max is 0 [ 138.489068][ T4404] usb 2-1: config 0 has no interface number 0 [ 138.660061][ T4404] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 138.699924][ T4404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.708066][ T4404] usb 2-1: Product: syz [ 138.739869][ T4404] usb 2-1: Manufacturer: syz [ 138.744529][ T4404] usb 2-1: SerialNumber: syz [ 138.780402][ T4404] usb 2-1: config 0 descriptor?? [ 138.835115][ T4404] gspca_main: spca500-2.14.0 probing 046d:0900 [ 139.390120][ T4404] gspca_spca500: reg write: error -71 [ 139.410078][ T4404] gspca_spca500: reg write: error -71 [ 139.432237][ T4404] gspca_spca500: reg write: error -71 [ 139.470107][ T4404] gspca_spca500: reg write: error -71 [ 139.519928][ T4404] gspca_spca500: reg write: error -71 [ 139.540113][ T4404] gspca_spca500: reg write: error -71 [ 139.559923][ T4404] gspca_spca500: reg write: error -71 [ 139.580065][ T4404] gspca_spca500: reg write: error -71 [ 139.599988][ T4404] gspca_spca500: reg write: error -71 [ 139.620826][ T4404] gspca_spca500: reg write: error -71 [ 139.640053][ T4404] gspca_spca500: reg write: error -71 [ 139.656262][ T4928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.126'. [ 139.670338][ T4404] gspca_spca500: reg write: error -71 [ 139.709979][ T4404] gspca_spca500: reg write: error -71 [ 139.783231][ T4404] usb 2-1: USB disconnect, device number 2 [ 139.892460][ T4946] tipc: Enabling of bearer rejected, failed to enable media [ 140.057710][ T4812] device hsr_slave_0 entered promiscuous mode [ 140.167780][ T4812] device hsr_slave_1 entered promiscuous mode [ 140.283000][ T4812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.440013][ T4812] Cannot create hsr debugfs directory [ 141.346201][ T4969] syz.0.137 (4969) used greatest stack depth: 20816 bytes left [ 141.419630][ T4812] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.467224][ T4812] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 141.522379][ T4812] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.562395][ T4812] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.711038][ T4977] device syzkaller0 entered promiscuous mode [ 143.679746][ T4812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.772649][ T4998] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 143.801430][ T4812] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.860711][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.870906][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.928592][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.964051][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.023505][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.030629][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.137066][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.216874][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.423018][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.430392][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.479815][ C0] sched: RT throttling activated [ 145.531652][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.490117][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.677958][ T5042] tipc: Enabling of bearer rejected, failed to enable media [ 148.721504][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.790665][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.805536][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.890995][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.922029][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.958641][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.011808][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.051601][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.110999][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.148948][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.199272][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.977964][ T5083] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.367397][ T4812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.419237][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.442831][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.941464][ T5087] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 152.074872][ T5129] fuse: Bad value for 'fd' [ 153.410446][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.430267][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.524484][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.560386][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.623588][ T4812] device veth0_vlan entered promiscuous mode [ 153.649114][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.681887][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.724156][ T4812] device veth1_vlan entered promiscuous mode [ 153.831127][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.851296][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.943775][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.004887][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.037763][ T4812] device veth0_macvtap entered promiscuous mode [ 154.050216][ T5142] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 154.098559][ T4812] device veth1_macvtap entered promiscuous mode [ 154.161139][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.228591][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.288336][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.326491][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.389131][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.490021][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.562798][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.633146][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.750148][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.862749][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.921681][ T4812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.966679][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.990461][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.039338][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.077388][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.129306][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.510253][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.558765][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.594683][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.645904][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.803924][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.922245][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.998831][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.058464][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.105149][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.155818][ T4812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.211466][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.246812][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.297807][ T4812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.327294][ T4812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.374319][ T4812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.416652][ T4812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.815150][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.869881][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.879746][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.976979][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.001960][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.084151][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.570058][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.577641][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.884080][ T5168] Cannot find add_set index 0 as target [ 158.601447][ T5170] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.965628][ T5177] netlink: 64 bytes leftover after parsing attributes in process `syz.6.167'. [ 165.421833][ T5226] Cannot find add_set index 0 as target [ 166.371633][ T5051] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 166.432642][ T5051] infiniband syz2: set down [ 166.500869][ T4404] infiniband syz2: ib_query_port failed (-19) [ 166.524001][ T4262] smc: removing ib device syz2 [ 167.359488][ T5246] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 167.696872][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 168.209040][ T5260] netlink: 64 bytes leftover after parsing attributes in process `syz.0.179'. [ 168.258703][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.309882][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 168.318057][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.549510][ T5228] device bridge_slave_0 entered promiscuous mode [ 169.063039][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.090045][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.141419][ T5228] device bridge_slave_1 entered promiscuous mode [ 169.461675][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.506458][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.618072][ T5228] team0: Port device team_slave_0 added [ 169.727344][ T5228] team0: Port device team_slave_1 added [ 169.847281][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.879225][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.563838][ T4186] Bluetooth: hci4: command 0x041b tx timeout [ 170.820037][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.986649][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.009862][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.249511][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.125019][ T4266] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.448463][ T4185] syz-executor (4185) used greatest stack depth: 20688 bytes left [ 172.756683][ T4266] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.800261][ T4186] Bluetooth: hci4: command 0x040f tx timeout [ 172.913992][ T5228] device hsr_slave_0 entered promiscuous mode [ 173.903691][ T5228] device hsr_slave_1 entered promiscuous mode [ 173.968417][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.999881][ T5228] Cannot create hsr debugfs directory [ 174.016478][ T5320] netlink: 64 bytes leftover after parsing attributes in process `syz.6.191'. [ 174.210738][ T4266] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.362306][ T4266] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.754789][ T5312] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 174.919183][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 175.022907][ T5228] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 175.152841][ T5228] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 175.230730][ T5228] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.380855][ T5228] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 176.748946][ T5360] device syzkaller0 entered promiscuous mode [ 177.795928][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.558484][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.585005][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.731678][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.830962][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.858337][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.915114][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.922302][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.570380][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.902701][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.635841][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.642972][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.690467][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.700597][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.739977][ T4466] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 180.980206][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.034039][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.070069][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.103636][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.149562][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.200140][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.220124][ T4466] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.254023][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.262310][ T4466] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.309948][ T4466] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.320090][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.343372][ T4466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.358848][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.410402][ T5401] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.430034][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.446779][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.475638][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.609992][ T4266] device hsr_slave_0 left promiscuous mode [ 181.655741][ T4266] device hsr_slave_1 left promiscuous mode [ 181.688277][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.706591][ T4466] usb 1-1: USB disconnect, device number 2 [ 181.722211][ T4266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.771001][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.778459][ T4266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.848188][ T4266] device bridge_slave_1 left promiscuous mode [ 181.872530][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.934407][ T4266] device bridge_slave_0 left promiscuous mode [ 181.948587][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.073083][ T5449] Cannot find add_set index 0 as target [ 185.042396][ T4266] device veth1_macvtap left promiscuous mode [ 185.048579][ T4266] device veth0_macvtap left promiscuous mode [ 185.069262][ T4266] device veth1_vlan left promiscuous mode [ 185.094944][ T4266] device veth0_vlan left promiscuous mode [ 185.489254][ T5464] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 185.758405][ T4266] team0 (unregistering): Port device team_slave_1 removed [ 185.813226][ T4266] team0 (unregistering): Port device team_slave_0 removed [ 185.850263][ T4266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.879744][ T4266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.122656][ T4266] bond0 (unregistering): Released all slaves [ 186.150067][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 186.158402][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 186.697814][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.547563][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.592920][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.108858][ T5487] netlink: 277 bytes leftover after parsing attributes in process `syz.0.214'. [ 189.700293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.827898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.354537][ T5228] device veth0_vlan entered promiscuous mode [ 190.706931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.719952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.745227][ T5228] device veth1_vlan entered promiscuous mode [ 190.774638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.866910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.471448][ T5228] device veth0_macvtap entered promiscuous mode [ 191.590218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.612729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.651932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.793863][ T5228] device veth1_macvtap entered promiscuous mode [ 192.233849][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.364485][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.583342][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.679972][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.759935][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.876320][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.906170][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.826285][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.870550][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.924646][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.957379][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.986429][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.057623][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.106858][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.143448][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.161340][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169972][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.199883][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.230084][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.248223][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.259916][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.296010][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.336154][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.383870][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.415681][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.484238][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.525232][ T26] audit: type=1326 audit(1768696552.332:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff307099cb9 code=0x7ffc0000 [ 194.575766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.611140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.648847][ T5539] Set syz1 is full, maxelem 6117 reached [ 194.664188][ T26] audit: type=1326 audit(1768696552.332:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff307099cb9 code=0x7ffc0000 [ 194.686498][ T5228] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.848283][ T26] audit: type=1326 audit(1768696552.332:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff307099cb9 code=0x7ffc0000 [ 194.866947][ T5228] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.053846][ T5228] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.232567][ T5228] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.704354][ T26] audit: type=1326 audit(1768696552.332:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff307099cb9 code=0x7ffc0000 [ 195.865760][ T5567] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 196.020888][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.029117][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.119534][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.702109][ T4527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.752175][ T4527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.983947][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.288450][ T5601] device syzkaller0 entered promiscuous mode [ 207.599946][ T5675] netlink: 64 bytes leftover after parsing attributes in process `syz.5.254'. [ 211.719996][ T5700] device bond_slave_0 entered promiscuous mode [ 211.726575][ T5700] device bond_slave_1 entered promiscuous mode [ 211.815668][ T5700] device vlan2 entered promiscuous mode [ 211.877288][ T5700] device bond0 entered promiscuous mode [ 216.974281][ T4173] Bluetooth: hci7: command 0x0406 tx timeout [ 218.599943][ T5769] netlink: 64 bytes leftover after parsing attributes in process `syz.4.272'. [ 218.873350][ T5774] device syzkaller0 entered promiscuous mode [ 220.560882][ T5788] loop4: detected capacity change from 0 to 1024 [ 220.679774][ T5788] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 220.710787][ T5788] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 220.815731][ T5788] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #5: comm syz.4.275: unexpected bad inode w/o EXT4_IGET_BAD [ 220.998635][ T5799] netlink: 277 bytes leftover after parsing attributes in process `syz.6.271'. [ 221.025748][ T5788] EXT4-fs (loop4): no journal found [ 221.390111][ T5788] EXT4-fs (loop4): can't get journal size [ 221.599027][ T5788] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 222.119863][ T5814] Cannot find add_set index 0 as target [ 224.903842][ T5837] netlink: 64 bytes leftover after parsing attributes in process `syz.6.285'. [ 226.930061][ T5848] device syzkaller0 entered promiscuous mode [ 231.215577][ T5898] netlink: 64 bytes leftover after parsing attributes in process `syz.4.299'. [ 238.573009][ T5958] netlink: 64 bytes leftover after parsing attributes in process `syz.7.312'. [ 239.501592][ T5973] netlink: 277 bytes leftover after parsing attributes in process `syz.0.313'. [ 239.790846][ T5974] device syzkaller0 entered promiscuous mode [ 242.773902][ T6020] Cannot find add_set index 0 as target [ 243.542037][ T6024] netlink: 64 bytes leftover after parsing attributes in process `syz.0.327'. [ 244.351724][ T6027] ================================================================== [ 244.360123][ T6027] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 244.367709][ T6027] Read of size 1 at addr ffff8880286d6832 by task syz.0.327/6027 [ 244.375424][ T6027] [ 244.377781][ T6027] CPU: 1 PID: 6027 Comm: syz.0.327 Not tainted syzkaller #0 [ 244.385054][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.395110][ T6027] Call Trace: [ 244.398384][ T6027] [ 244.401324][ T6027] dump_stack_lvl+0x188/0x250 [ 244.406061][ T6027] ? show_regs_print_info+0x20/0x20 [ 244.411293][ T6027] ? _printk+0xda/0x130 [ 244.415498][ T6027] ? rose_transmit_link+0x5b0/0x730 [ 244.420735][ T6027] ? load_image+0x400/0x400 [ 244.425266][ T6027] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 244.430770][ T6027] print_address_description+0x60/0x2d0 [ 244.436344][ T6027] ? rose_transmit_link+0x5b0/0x730 [ 244.441577][ T6027] kasan_report+0xdf/0x130 [ 244.446030][ T6027] ? rose_transmit_link+0x5b0/0x730 [ 244.451275][ T6027] rose_transmit_link+0x5b0/0x730 [ 244.456337][ T6027] ? skb_put+0x117/0x210 [ 244.460617][ T6027] rose_write_internal+0x680/0x1e90 [ 244.465851][ T6027] ? rose_validate_nr+0x120/0x120 [ 244.470905][ T6027] ? del_timer+0x11a/0x1b0 [ 244.475349][ T6027] ? skb_queue_purge+0x62/0x290 [ 244.480249][ T6027] rose_release+0x22a/0x4e0 [ 244.484790][ T6027] sock_close+0xd5/0x240 [ 244.489067][ T6027] ? sock_mmap+0x90/0x90 [ 244.493336][ T6027] __fput+0x234/0x930 [ 244.497358][ T6027] task_work_run+0x125/0x1a0 [ 244.501977][ T6027] get_signal+0x1222/0x12c0 [ 244.506530][ T6027] arch_do_signal_or_restart+0xe7/0x12c0 [ 244.512201][ T6027] ? kick_process+0xd4/0x140 [ 244.516832][ T6027] ? task_work_add+0x1a7/0x1d0 [ 244.521635][ T6027] ? get_sigframe_size+0x10/0x10 [ 244.526606][ T6027] ? __sys_connect+0x278/0x450 [ 244.531418][ T6027] ? exit_to_user_mode_loop+0x3b/0x130 [ 244.536914][ T6027] exit_to_user_mode_loop+0x9e/0x130 [ 244.542227][ T6027] exit_to_user_mode_prepare+0xee/0x180 [ 244.547802][ T6027] syscall_exit_to_user_mode+0x16/0x40 [ 244.553295][ T6027] do_syscall_64+0x58/0xa0 [ 244.557746][ T6027] ? clear_bhb_loop+0x30/0x80 [ 244.562449][ T6027] ? clear_bhb_loop+0x30/0x80 [ 244.567164][ T6027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.573092][ T6027] RIP: 0033:0x7ff307099cb9 [ 244.577537][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.597387][ T6027] RSP: 002b:00007ff3052b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 244.605917][ T6027] RAX: fffffffffffffe00 RBX: 00007ff307315180 RCX: 00007ff307099cb9 [ 244.613919][ T6027] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000000b [ 244.621931][ T6027] RBP: 00007ff307107bf7 R08: 0000000000000000 R09: 0000000000000000 [ 244.630017][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.638044][ T6027] R13: 00007ff307315218 R14: 00007ff307315180 R15: 00007ffef0145be8 [ 244.646072][ T6027] [ 244.649120][ T6027] [ 244.651490][ T6027] Allocated by task 4452: [ 244.655886][ T6027] __kasan_kmalloc+0xb5/0xf0 [ 244.660504][ T6027] rose_add_node+0x227/0xdb0 [ 244.665133][ T6027] rose_rt_ioctl+0xa2b/0xe70 [ 244.669769][ T6027] rose_ioctl+0x2a7/0x7d0 [ 244.674125][ T6027] sock_do_ioctl+0xfb/0x320 [ 244.678648][ T6027] sock_ioctl+0x4df/0x720 [ 244.683004][ T6027] __se_sys_ioctl+0xfa/0x170 [ 244.687629][ T6027] do_syscall_64+0x4c/0xa0 [ 244.692071][ T6027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.698089][ T6027] [ 244.700428][ T6027] Freed by task 6025: [ 244.704423][ T6027] kasan_set_track+0x4b/0x70 [ 244.709062][ T6027] kasan_set_free_info+0x1f/0x40 [ 244.714033][ T6027] ____kasan_slab_free+0xd5/0x110 [ 244.719087][ T6027] slab_free_freelist_hook+0xea/0x170 [ 244.724483][ T6027] kfree+0xef/0x2a0 [ 244.728418][ T6027] rose_rt_device_down+0x4e2/0x530 [ 244.733557][ T6027] rose_device_event+0x61b/0x6d0 [ 244.738622][ T6027] raw_notifier_call_chain+0xcb/0x160 [ 244.744018][ T6027] __dev_notify_flags+0x158/0x300 [ 244.749070][ T6027] dev_change_flags+0xe3/0x1a0 [ 244.753882][ T6027] dev_ifsioc+0x14b/0xf90 [ 244.758237][ T6027] dev_ioctl+0x55f/0xe50 [ 244.762595][ T6027] sock_do_ioctl+0x245/0x320 [ 244.767208][ T6027] sock_ioctl+0x4df/0x720 [ 244.771647][ T6027] __se_sys_ioctl+0xfa/0x170 [ 244.776279][ T6027] do_syscall_64+0x4c/0xa0 [ 244.780731][ T6027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.786667][ T6027] [ 244.789011][ T6027] The buggy address belongs to the object at ffff8880286d6800 [ 244.789011][ T6027] which belongs to the cache kmalloc-512 of size 512 [ 244.803106][ T6027] The buggy address is located 50 bytes inside of [ 244.803106][ T6027] 512-byte region [ffff8880286d6800, ffff8880286d6a00) [ 244.816317][ T6027] The buggy address belongs to the page: [ 244.822004][ T6027] page:ffffea0000a1b500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880286d6c00 pfn:0x286d4 [ 244.833478][ T6027] head:ffffea0000a1b500 order:2 compound_mapcount:0 compound_pincount:0 [ 244.841803][ T6027] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 244.849811][ T6027] raw: 00fff00000010200 ffffea0000a67a08 ffffea00017fed08 ffff888016c41c80 [ 244.858405][ T6027] raw: ffff8880286d6c00 0000000000100009 00000001ffffffff 0000000000000000 [ 244.866984][ T6027] page dumped because: kasan: bad access detected [ 244.873407][ T6027] page_owner tracks the page as allocated [ 244.879138][ T6027] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4287, ts 70519724822, free_ts 69729366684 [ 244.899034][ T6027] get_page_from_freelist+0x1bbd/0x1ca0 [ 244.904593][ T6027] __alloc_pages+0x1ee/0x480 [ 244.909184][ T6027] new_slab+0xc0/0x4b0 [ 244.913253][ T6027] ___slab_alloc+0x80a/0xdd0 [ 244.917861][ T6027] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 244.923663][ T6027] __alloc_skb+0x22c/0x750 [ 244.928081][ T6027] __ipv6_ifa_notify+0x203/0xe60 [ 244.933033][ T6027] addrconf_dad_completed+0x184/0xc80 [ 244.938408][ T6027] addrconf_dad_work+0xc8c/0x1540 [ 244.943456][ T6027] process_one_work+0x85f/0x1010 [ 244.948414][ T6027] worker_thread+0xaa6/0x1290 [ 244.953122][ T6027] kthread+0x436/0x520 [ 244.957223][ T6027] ret_from_fork+0x1f/0x30 [ 244.961659][ T6027] page last free stack trace: [ 244.966350][ T6027] free_unref_page_prepare+0x637/0x6c0 [ 244.971829][ T6027] free_unref_page+0x8f/0x2a0 [ 244.976533][ T6027] __unfreeze_partials+0x1a5/0x200 [ 244.981670][ T6027] put_cpu_partial+0x12d/0x190 [ 244.986461][ T6027] qlist_free_all+0x35/0x90 [ 244.990980][ T6027] kasan_quarantine_reduce+0x150/0x160 [ 244.996467][ T6027] __kasan_slab_alloc+0x2f/0xd0 [ 245.001343][ T6027] slab_post_alloc_hook+0x4c/0x380 [ 245.006490][ T6027] kmem_cache_alloc_node+0x12d/0x2d0 [ 245.011813][ T6027] __alloc_skb+0xf4/0x750 [ 245.016142][ T6027] alloc_skb_with_frags+0xa7/0x730 [ 245.021248][ T6027] sock_alloc_send_pskb+0x87f/0x9a0 [ 245.026434][ T6027] unix_dgram_sendmsg+0x5fc/0x18a0 [ 245.031539][ T6027] __sys_sendto+0x46d/0x620 [ 245.036041][ T6027] __x64_sys_sendto+0xda/0xf0 [ 245.040713][ T6027] do_syscall_64+0x4c/0xa0 [ 245.045120][ T6027] [ 245.047458][ T6027] Memory state around the buggy address: [ 245.053082][ T6027] ffff8880286d6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.061139][ T6027] ffff8880286d6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.069195][ T6027] >ffff8880286d6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.077253][ T6027] ^ [ 245.082889][ T6027] ffff8880286d6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.090940][ T6027] ffff8880286d6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 245.098991][ T6027] ================================================================== [ 245.107043][ T6027] Disabling lock debugging due to kernel taint [ 246.076821][ T6027] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 246.084147][ T6027] CPU: 0 PID: 6027 Comm: syz.0.327 Tainted: G B syzkaller #0 [ 246.092855][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.102941][ T6027] Call Trace: [ 246.106249][ T6027] [ 246.109189][ T6027] dump_stack_lvl+0x188/0x250 [ 246.113888][ T6027] ? show_regs_print_info+0x20/0x20 [ 246.119118][ T6027] ? load_image+0x400/0x400 [ 246.123671][ T6027] panic+0x2e5/0x810 [ 246.127598][ T6027] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 246.133806][ T6027] ? bpf_jit_dump+0xd0/0xd0 [ 246.138309][ T6027] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 246.144288][ T6027] ? _raw_spin_unlock+0x40/0x40 [ 246.149145][ T6027] ? rose_transmit_link+0x5b0/0x730 [ 246.154350][ T6027] check_panic_on_warn+0x80/0xa0 [ 246.159351][ T6027] ? rose_transmit_link+0x5b0/0x730 [ 246.164552][ T6027] end_report+0x6d/0xf0 [ 246.168731][ T6027] kasan_report+0x102/0x130 [ 246.173253][ T6027] ? rose_transmit_link+0x5b0/0x730 [ 246.178470][ T6027] rose_transmit_link+0x5b0/0x730 [ 246.183494][ T6027] ? skb_put+0x117/0x210 [ 246.187735][ T6027] rose_write_internal+0x680/0x1e90 [ 246.192931][ T6027] ? rose_validate_nr+0x120/0x120 [ 246.197958][ T6027] ? del_timer+0x11a/0x1b0 [ 246.202379][ T6027] ? skb_queue_purge+0x62/0x290 [ 246.207242][ T6027] rose_release+0x22a/0x4e0 [ 246.211741][ T6027] sock_close+0xd5/0x240 [ 246.215978][ T6027] ? sock_mmap+0x90/0x90 [ 246.220234][ T6027] __fput+0x234/0x930 [ 246.224215][ T6027] task_work_run+0x125/0x1a0 [ 246.228798][ T6027] get_signal+0x1222/0x12c0 [ 246.233320][ T6027] arch_do_signal_or_restart+0xe7/0x12c0 [ 246.239082][ T6027] ? kick_process+0xd4/0x140 [ 246.243698][ T6027] ? task_work_add+0x1a7/0x1d0 [ 246.248486][ T6027] ? get_sigframe_size+0x10/0x10 [ 246.253456][ T6027] ? __sys_connect+0x278/0x450 [ 246.258254][ T6027] ? exit_to_user_mode_loop+0x3b/0x130 [ 246.263748][ T6027] exit_to_user_mode_loop+0x9e/0x130 [ 246.269064][ T6027] exit_to_user_mode_prepare+0xee/0x180 [ 246.274652][ T6027] syscall_exit_to_user_mode+0x16/0x40 [ 246.280111][ T6027] do_syscall_64+0x58/0xa0 [ 246.284521][ T6027] ? clear_bhb_loop+0x30/0x80 [ 246.289187][ T6027] ? clear_bhb_loop+0x30/0x80 [ 246.293855][ T6027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.299763][ T6027] RIP: 0033:0x7ff307099cb9 [ 246.304188][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.323790][ T6027] RSP: 002b:00007ff3052b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 246.332201][ T6027] RAX: fffffffffffffe00 RBX: 00007ff307315180 RCX: 00007ff307099cb9 [ 246.340863][ T6027] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000000b [ 246.348834][ T6027] RBP: 00007ff307107bf7 R08: 0000000000000000 R09: 0000000000000000 [ 246.356811][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.364773][ T6027] R13: 00007ff307315218 R14: 00007ff307315180 R15: 00007ffef0145be8 [ 246.372811][ T6027] [ 246.376302][ T6027] Kernel Offset: disabled [ 246.380643][ T6027] Rebooting in 86400 seconds..