last executing test programs: 2m49.877796874s ago: executing program 0 (id=594): socket$can_raw(0x1d, 0x3, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x700) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblcr\x00', 0xd, 0x4, 0x5d}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) preadv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000002680)=""/236, 0xec}], 0x1, 0x2, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x100001, &(0x7f0000000780)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fowner_lt}, {@subj_type={'subj_type', 0x3d, '\xf37\xf9r\x7f\xd4\xca\xec)\xaa\xce\x91#\xc90\xe9\xb1\x84\x80\xee:|\x9a\x16yO\x18H\xc2\xbf&5\xe1\x93\x8f\xe2\x89\xa7\x82\xfc\x8d{f\xf1\rF\xf2\x16\xea\xf7O|\xa6\x05?|\xbf`@1\x9d\xf6Z\xf2\x80\x1aI\x8d\xec\xe2\x1a\xf5\xf9O\xe8}\xde\xe2zW\xd2D\xb7jwo\xb5\x0fQ\x8fI\xe1\xd2.\x923t!T0\xc0\xb1\xe4\xf8+\xcc\x99_\xa0\xe9x\xc5<*\x15\xb3N\xd8\xbf5\x04\x9d\xd3\xb1}\x8f\xf6\xc2~5\xd1\'\xb6x\xc9a\xc0\xf6\xf4\x965t\xd3c\xa0xg\x8c\x94u\x7f\x03Y96\xe1\x9fmW\xad\'\x04\xcb\xfd(\xd9\xdc.s\xf4\x87q|\x05\xc2\x1aE~*\x15\xe6\xdf\xc1\x99\a\xbc[\xbb\xef<\xfc\a\xf1k\xad>n\x19D(Y\xbe\xdf\x1d\x87\xc9t\\\xdbA\\0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000845}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000207010100ba21a0cede5dc5b8150ad2823727a0000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r4, 0xbc7ae000) 2m42.637368006s ago: executing program 0 (id=614): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) semget(0x0, 0x1cd984a8fc881fea, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[], 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) 2m31.230579056s ago: executing program 0 (id=642): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001414030129bd70000000ec3e0000080001000000000015d2f9341a090200000096add7a79b873439b14b46b6389c800d4475976bf29a28bdfeda9647facf8a9d5fbe"], 0x18}}, 0x4000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4) 2m29.870923218s ago: executing program 0 (id=648): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@allocspi={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@dev}, {@in=@remote}, @in6=@empty}}}, 0xf8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x80000000000000a, 0x2, 0xfffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2m28.653940326s ago: executing program 0 (id=650): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000b00000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2m13.371810705s ago: executing program 32 (id=650): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000b00000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 31.60160086s ago: executing program 4 (id=930): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) gettid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x7ff, 0x1, 0x3, 0x8}, 0x5, 0xb3}, [{0x2, 0x2, 0x8a, 0x5, 0x1, 0xc}, {0x8, 0x2, 0xa6b, 0x3, 0x9, 0xd}, {0x8, 0x7, 0xee9, 0xfffffff8, 0x7, 0xffff7fff}, {0xf1, 0x3, 0x6, 0x4, 0x9, 0x1667e918}, {0x2, 0x1, 0x101, 0x6, 0xd3, 0x3ff}, {0x2, 0x401, 0x2, 0x8, 0x3, 0x5}, {0xff, 0x2, 0x3, 0x6, 0x5, 0x5}, {0x3511, 0x6, 0x8, 0x401, 0x400, 0xcb}, {0x9, 0x6, 0xe96, 0x3ff, 0x1a5e, 0x5f}, {0x7, 0x5, 0x2, 0x6, 0x3d, 0x1ff}, {0x6, 0x6e, 0x2, 0x6, 0x1ff, 0x101}, {0x101, 0x5, 0x0, 0x4, 0xfffffffa, 0x7f}, {0x5, 0x6, 0x0, 0x0, 0x3, 0x8}, {0xff, 0x100, 0x2, 0x7fffffff, 0x2, 0xc}, {0x96f, 0x3, 0x7ff, 0x9, 0xfff, 0x7}, {0x400, 0xff, 0x2, 0x5, 0x2, 0x3e97ca11}, {0x2, 0xfffffffd, 0xffff, 0x2d, 0x6, 0x7}, {0xd, 0x1, 0x6, 0xfffffffb, 0x1ac5, 0x3}, {0x9, 0xb6, 0x2, 0xfffffffb, 0x1, 0x7}, {0x0, 0x8, 0x1, 0x200, 0x8, 0x7fffffff}, {0x8, 0x1000, 0x13a00, 0x0, 0x5, 0x9}, {0x400, 0x2, 0x4, 0xffffff7f, 0x9, 0x1}, {0x5, 0x9, 0x2, 0xffff2552, 0xfffffff9, 0x7fff}, {0x6, 0x632, 0x10001, 0xfffff676, 0x5, 0x6}, {0x8, 0xffff8484, 0x3, 0x0, 0x6, 0x2}, {0x2, 0x2, 0x84, 0x1, 0x3, 0x2}, {0x80, 0x5f64, 0xc, 0xf, 0x0, 0x6}, {0x2, 0xfa6, 0x2, 0xb, 0x6, 0x8}, {0x60, 0x36eb959b, 0x8, 0x0, 0xe, 0x8}, {0xac, 0x2, 0x2, 0x2, 0xfffffff8, 0x101}, {0x9e, 0xd, 0x5, 0xe, 0xfffff3ce, 0x6}, {0x3404, 0x2, 0xead, 0x800, 0x8, 0x3}, {0x5, 0x800, 0x3, 0x8, 0x100, 0x49c836d6}, {0xd38, 0x6, 0x7ff, 0x3, 0x8, 0x5}, {0x10, 0x5, 0x4, 0x3, 0x9}, {0x6, 0x101, 0x7, 0x1, 0x4, 0x3}, {0x7, 0xe9ab, 0x0, 0x4, 0x1, 0x8}, {0xfffffffb, 0x80000001, 0x7, 0xfffffffb, 0x10, 0x3}, {0xffffffff, 0x4, 0xffff4e30, 0x0, 0x5}, {0x3, 0x4, 0xfffffffd, 0x797, 0xcf, 0xfff}, {0x3ff, 0x8, 0x1, 0x7, 0x0, 0x8}, {0x7ff, 0xa, 0x9, 0x6, 0x4, 0x5}, {0x4, 0x4, 0xba7d, 0x6, 0x9, 0x5}, {0x2, 0x9, 0x4, 0x80000001, 0x7, 0xb4d}, {0x2, 0x7, 0x3, 0x8, 0x3, 0xb7}, {0x6, 0x401, 0xf, 0x40, 0x546e, 0x11c}, {0xffff, 0xa215, 0x18, 0x4, 0x5, 0x3}, {0xfffffffe, 0x400, 0x5, 0x4, 0x8001, 0x6}, {0x8a, 0x4c2e, 0x795e, 0x8, 0x3, 0x3}, {0x5, 0x6, 0x94, 0xffff, 0x9, 0x1}, {0x2, 0x72f3, 0x7, 0x2, 0xb7b, 0xfffffc01}, {0x2, 0x7, 0x3, 0x6, 0x9, 0x3}, {0x4, 0x0, 0x7, 0x4, 0xffffff7f, 0x5ddc}, {0x5735, 0x9b93, 0x959, 0x10001, 0x100, 0x2}, {0x9c, 0x400, 0xb1ee, 0x5, 0x7, 0x8544}, {0x1ff, 0xffffffff, 0xffffffff, 0x363, 0x7ff, 0x1}, {0xa, 0x9, 0x4, 0xffffffff, 0x2, 0xf}, {0x7, 0x2, 0x80000000, 0x3ff, 0xfffffff4, 0xb}, {0xe, 0x5, 0x1, 0x2, 0xfff, 0x5}, {0x7, 0x5, 0x0, 0x3, 0x8001, 0x5f16}, {0x7, 0x6, 0x0, 0x8, 0x9, 0x3e}, {0x4, 0x7, 0x7fffffff, 0x6, 0xfffff287, 0x3}, {0x10001, 0x979, 0x40, 0x6, 0x2, 0xff}, {0x6, 0x40, 0xef, 0x0, 0xf9c0, 0x3}, {0x101, 0x5, 0xfe, 0xc7, 0x32, 0x1}, {0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0xb0a}, {0x1fd6, 0x7, 0x6, 0x2, 0x7, 0x5}, {0xffff, 0x9, 0xc, 0xf06, 0x8, 0x2}, {0x9, 0x5, 0xbd, 0x275, 0x7, 0x3}, {0x4, 0x1ff, 0x5, 0x88, 0x2, 0x8}, {0xb, 0x8, 0x3, 0x3cc3, 0x80000001}, {0x1, 0x743, 0x2, 0x57, 0x6, 0x1}, {0x5, 0xc, 0x2, 0x6, 0x4b0, 0x3}, {0x0, 0x401, 0x8, 0x8, 0x6}, {0x3, 0x8, 0x3, 0xb3, 0x1a327d9d, 0x39e}, {0x4, 0x5, 0xce, 0x1, 0x8001, 0x888f}, {0xfffffff7, 0x7, 0x8be7, 0x4, 0x81, 0x8}, {0xfc, 0x9, 0x200, 0x3, 0x6, 0x81}, {0x9, 0x6, 0x100, 0x6, 0x1, 0x7fff}, {0x5, 0x5, 0x40, 0x7a, 0x7, 0x1000}, {0x7, 0x5, 0x9, 0x400, 0x5, 0x4}, {0xd, 0x19, 0x773d, 0x2c1, 0x81, 0x1}, {0x3, 0x9, 0xfff, 0x7, 0x4}, {0x6, 0x9, 0x40, 0x2, 0x7, 0x6}, {0x7, 0x5d9, 0x3, 0x80000001, 0x6, 0x4}, {0x80000000, 0x101, 0x5, 0x0, 0x10001, 0x6}, {0xbb, 0x4, 0x8001, 0x4, 0x8001, 0x7}, {0x8, 0x2616, 0x3, 0x4, 0xffffffff, 0x2f4f}, {0x3, 0x7ff, 0x2, 0x6, 0x10, 0x8}, {0x951, 0xc, 0x7, 0x3, 0xfffffffb, 0x40}, {0x7, 0x40, 0xff, 0x193, 0x8, 0xc0000000}, {0x7, 0xe978, 0x8, 0x7, 0x7, 0x7}, {0x9, 0x81, 0x5, 0x6, 0x9, 0x400}, {0x0, 0x101, 0x0, 0x32d62169, 0x167ddc9, 0x9}, {0x4393a33, 0x0, 0xfff, 0x3, 0x7fff, 0x3}, {0xffffffff, 0x6, 0xfffffff7, 0x8, 0x30000000, 0x4}, {0x5, 0x6, 0x400, 0x6, 0xfffffff7, 0x7fff}, {0x200, 0x8, 0x53, 0x2dc, 0x3, 0xe}, {0x6, 0x9, 0x309085d1, 0x1ff, 0x3, 0x7}, {0x7, 0x7f, 0x101, 0x4d23, 0xb, 0xfff}, {0x7, 0x6, 0xcd, 0xcb93571e, 0xa, 0x5}, {0x800, 0x8, 0x2, 0x9, 0x7f, 0xfffffe00}, {0x0, 0x2, 0x7, 0x8, 0xffff}, {0xa, 0x7ffb, 0xfffffffe, 0x3d, 0x8, 0x7}, {0x5, 0x10001, 0x9130, 0x264, 0x4, 0x2}, {0x7ff, 0x1, 0x3, 0x400, 0x2, 0xdac00000}, {0x2, 0x51, 0x5, 0x0, 0x405, 0x7fff}, {0x1f, 0x3, 0x9, 0x6, 0x68d96f84, 0x10001}, {0xa, 0x9, 0x4, 0x567b, 0xff}, {0x29, 0x0, 0x0, 0x6, 0x75e, 0x9c}, {0x0, 0x401, 0x0, 0x7, 0xd1, 0x5}, {0x4, 0x1, 0x4f27, 0x101, 0x9, 0xfffffffd}, {0x1, 0x8, 0xf, 0x0, 0x6, 0x2}, {0x9, 0x4, 0x4, 0x7fffffff, 0x1, 0x5}, {0x80000001, 0x6, 0x5252, 0x5, 0x7, 0x100}, {0x0, 0x90, 0xf, 0x1, 0x4, 0x8}, {0x2, 0x67, 0xefa, 0x7, 0x2f87, 0xfffffffa}, {0x413c07b2, 0x7, 0x7, 0xcf33, 0x1, 0x9}, {0x5, 0x9, 0x1, 0x7, 0x401, 0x6}, {0x3, 0x0, 0x6c4, 0x4, 0x6, 0x1ff}, {0x9, 0x80000001, 0x9, 0xd, 0x2, 0x3}, {0x447fb3a9, 0x8001, 0x200, 0x10, 0x2, 0x5}, {0x7, 0x1, 0x1, 0xe, 0x7}, {0x3, 0x7, 0x88e, 0x0, 0x6, 0x7}, {0xffffffff, 0xffffffde, 0x81, 0x0, 0x7fff, 0xffff}, {0xd43, 0x855, 0x4, 0x41aa, 0x2, 0xf09c}, {0xaf, 0x61f784e8, 0xed, 0xea, 0x400, 0x5}, {0x7, 0xa, 0x1, 0x6656, 0xfff, 0xb}], [{}, {0x3}, {0x4, 0x1}, {0x0, 0x3aa157f48d3b3bb3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0xd26d20c064367a2c}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 30.476020164s ago: executing program 4 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000900)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\xd8\xf2\xe6\"K1Y\xb5%2\xcb\xf5!\x8c\xd5I\xa3~w\b\x1ao\xbd\xa43z\xd5\xbe\x14\x05\x9b\x05\xf8\r?\x9f\xc6\x0e\xd8\xd3\xc4*\xbc\xf0\x1a\xd1Ob*\x8a\xbf\x92@\xb1\x9fq\xd5\x84\x12\xe2\xad5\x03\xec\xb0@\x7f\x9f}\x17\x87\v\xf0\x99\xf7\xc5\x82C\x14\xd3\x05\xba\xd6F-\x06\xfa\x81\x1a\x1eW', 0x0) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7442ff8f99b8233b0100145274da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x20000080) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0) 28.67195562s ago: executing program 4 (id=941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe4, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xe4}}, 0x20040084) 28.469412906s ago: executing program 4 (id=942): unshare(0x22020600) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, 0x0) 27.380820049s ago: executing program 4 (id=943): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 27.009397831s ago: executing program 4 (id=946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfd, 0x9}, 0xe) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xdd7, 0x4) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 12.36936457s ago: executing program 2 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7442ff8f99b8233b0100145274da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x20000080) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) 11.691515081s ago: executing program 1 (id=978): socket$can_raw(0x1d, 0x3, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblcr\x00', 0xd, 0x4, 0x5d}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) preadv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000002680)=""/236, 0xec}], 0x1, 0x2, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x100001, &(0x7f0000000780)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fowner_lt}, {@subj_type={'subj_type', 0x3d, '\xf37\xf9r\x7f\xd4\xca\xec)\xaa\xce\x91#\xc90\xe9\xb1\x84\x80\xee:|\x9a\x16yO\x18H\xc2\xbf&5\xe1\x93\x8f\xe2\x89\xa7\x82\xfc\x8d{f\xf1\rF\xf2\x16\xea\xf7O|\xa6\x05?|\xbf`@1\x9d\xf6Z\xf2\x80\x1aI\x8d\xec\xe2\x1a\xf5\xf9O\xe8}\xde\xe2zW\xd2D\xb7jwo\xb5\x0fQ\x8fI\xe1\xd2.\x923t!T0\xc0\xb1\xe4\xf8+\xcc\x99_\xa0\xe9x\xc5<*\x15\xb3N\xd8\xbf5\x04\x9d\xd3\xb1}\x8f\xf6\xc2~5\xd1\'\xb6x\xc9a\xc0\xf6\xf4\x965t\xd3c\xa0xg\x8c\x94u\x7f\x03Y96\xe1\x9fmW\xad\'\x04\xcb\xfd(\xd9\xdc.s\xf4\x87q|\x05\xc2\x1aE~*\x15\xe6\xdf\xc1\x99\a\xbc[\xbb\xef<\xfc\a\xf1k\xad>n\x19D(Y\xbe\xdf\x1d\x87\xc9t\\\xdbA\\0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f000000000004000000240011"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 7.800779751s ago: executing program 2 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7442ff8f99b8233b0100145274da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x20000080) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) 7.537351648s ago: executing program 3 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x24, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x884) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0xf0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0xd0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000019", @ANYRES16=r3, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f626174616476001c000380180003801400018008000100020000000500020000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) mq_notify(r5, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) r7 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000000)=""/103) mq_notify(r5, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r8, 0x40043311, &(0x7f0000000340)) pipe(&(0x7f0000000600)) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 7.530655029s ago: executing program 3 (id=996): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 6.788712392s ago: executing program 3 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) 6.541115849s ago: executing program 2 (id=999): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000340)="580000001400192340834b80043f679a1070f7e433ff3d425f9c00f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c70", 0x58}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xf4}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 6.072905044s ago: executing program 3 (id=1001): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f000000000004000000240011"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 5.954993057s ago: executing program 2 (id=1002): io_uring_setup(0x7c8d, &(0x7f0000000300)={0x0, 0x80001, 0x1000, 0x40003, 0x2c1}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000021) socket(0x2, 0xa, 0x300) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$xdp(r1, 0x0, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x42, 0x7fff800000000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 5.878270039s ago: executing program 1 (id=1003): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000b0370000000000be2fc72689ac8bbece7830030bb86d27d5e9aeca0f4aa2df34bac7ffed094fa5e98fb2e0f3d1c019d0018f63955a41e7fe353935281c8f7c"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="57010000000000000000000000000c00030001"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000000)=ANY=[@ANYRES64=r5]) 5.583580608s ago: executing program 5 (id=1004): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 5.368349865s ago: executing program 5 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x30, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x884) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0xf0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0xd0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000019", @ANYRES16=r3, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f626174616476001c000380180003801400018008000100020000000500020000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) mq_notify(r5, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) r7 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000000)=""/103) mq_notify(r5, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r8, 0x40043311, &(0x7f0000000340)) pipe(&(0x7f0000000600)) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 5.057444175s ago: executing program 5 (id=1006): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x300060c1) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x8]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xc000000b}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x44004054}, 0x810) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x41) 4.998669966s ago: executing program 5 (id=1007): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x5000)=nil, &(0x7f0000bdc000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000bd9000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x353d, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0x342}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) open(0x0, 0x400103842, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.56192159s ago: executing program 1 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7442ff8f99b8233b0100145274da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x20000080) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) 2.817395764s ago: executing program 1 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xa0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r6, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = fcntl$dupfd(r7, 0x406, r7) sendto$packet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 2.59524584s ago: executing program 5 (id=1010): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) semget(0x0, 0x1cd984a8fc881fea, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) 1.596945351s ago: executing program 1 (id=1011): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000340)="580000001400192340834b80043f679a1070f7e433ff3d425f9c00f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c70", 0x58}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xf4}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.109996676s ago: executing program 3 (id=1012): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblcr\x00', 0xd, 0x4, 0x5d}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) preadv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000002680)=""/236, 0xec}], 0x1, 0x2, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x100001, &(0x7f0000000780)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fowner_lt}, {@subj_type={'subj_type', 0x3d, '\xf37\xf9r\x7f\xd4\xca\xec)\xaa\xce\x91#\xc90\xe9\xb1\x84\x80\xee:|\x9a\x16yO\x18H\xc2\xbf&5\xe1\x93\x8f\xe2\x89\xa7\x82\xfc\x8d{f\xf1\rF\xf2\x16\xea\xf7O|\xa6\x05?|\xbf`@1\x9d\xf6Z\xf2\x80\x1aI\x8d\xec\xe2\x1a\xf5\xf9O\xe8}\xde\xe2zW\xd2D\xb7jwo\xb5\x0fQ\x8fI\xe1\xd2.\x923t!T0\xc0\xb1\xe4\xf8+\xcc\x99_\xa0\xe9x\xc5<*\x15\xb3N\xd8\xbf5\x04\x9d\xd3\xb1}\x8f\xf6\xc2~5\xd1\'\xb6x\xc9a\xc0\xf6\xf4\x965t\xd3c\xa0xg\x8c\x94u\x7f\x03Y96\xe1\x9fmW\xad\'\x04\xcb\xfd(\xd9\xdc.s\xf4\x87q|\x05\xc2\x1aE~*\x15\xe6\xdf\xc1\x99\a\xbc[\xbb\xef<\xfc\a\xf1k\xad>n\x19D(Y\xbe\xdf\x1d\x87\xc9t\\\xdbA\\0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) 0s ago: executing program 3 (id=1016): setfsgid(0xee00) r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x10, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 66.487749][ T4176] cgroup: Unknown subsys name 'net' [ 66.636234][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.198737][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.658116][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 69.672217][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 69.746572][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.801385][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 69.845434][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 69.899657][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.906906][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.915887][ T4198] device bridge_slave_0 entered promiscuous mode [ 69.928979][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.936146][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.944006][ T4189] device bridge_slave_0 entered promiscuous mode [ 69.957779][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.965223][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.973304][ T4189] device bridge_slave_1 entered promiscuous mode [ 69.988470][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.995954][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.004677][ T4198] device bridge_slave_1 entered promiscuous mode [ 70.050653][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.077174][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.087001][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.094470][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.102923][ T4190] device bridge_slave_0 entered promiscuous mode [ 70.112514][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.136942][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.157178][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.164561][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.173043][ T4190] device bridge_slave_1 entered promiscuous mode [ 70.210403][ T4189] team0: Port device team_slave_0 added [ 70.220654][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.227734][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.235858][ T4199] device bridge_slave_0 entered promiscuous mode [ 70.253841][ T4198] team0: Port device team_slave_0 added [ 70.261782][ T4189] team0: Port device team_slave_1 added [ 70.269341][ T4198] team0: Port device team_slave_1 added [ 70.281854][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.289121][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.297530][ T4199] device bridge_slave_1 entered promiscuous mode [ 70.306845][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.343139][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.365201][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.372367][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.399036][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.411163][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.418379][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.426615][ T4197] device bridge_slave_0 entered promiscuous mode [ 70.449469][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.456613][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.483093][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.495127][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.502372][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.528487][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.540051][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.547138][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.555409][ T4197] device bridge_slave_1 entered promiscuous mode [ 70.564243][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.585001][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.592174][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.618828][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.642981][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.660680][ T4190] team0: Port device team_slave_0 added [ 70.669123][ T4190] team0: Port device team_slave_1 added [ 70.687412][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.734703][ T4199] team0: Port device team_slave_0 added [ 70.742800][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.752736][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.760105][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.786390][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.808987][ T4189] device hsr_slave_0 entered promiscuous mode [ 70.816158][ T4189] device hsr_slave_1 entered promiscuous mode [ 70.825291][ T4199] team0: Port device team_slave_1 added [ 70.844060][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.851241][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.877426][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.913883][ T4197] team0: Port device team_slave_0 added [ 70.937094][ T4197] team0: Port device team_slave_1 added [ 70.947379][ T4198] device hsr_slave_0 entered promiscuous mode [ 70.954884][ T4198] device hsr_slave_1 entered promiscuous mode [ 70.963321][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.971291][ T4198] Cannot create hsr debugfs directory [ 70.992867][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.000101][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.026195][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.054943][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.062049][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.088099][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.106247][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.113356][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.139851][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.152012][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.158983][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.185341][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.248537][ T4190] device hsr_slave_0 entered promiscuous mode [ 71.255848][ T4190] device hsr_slave_1 entered promiscuous mode [ 71.262881][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.270599][ T4190] Cannot create hsr debugfs directory [ 71.300501][ T4197] device hsr_slave_0 entered promiscuous mode [ 71.307916][ T4197] device hsr_slave_1 entered promiscuous mode [ 71.315120][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.323081][ T4197] Cannot create hsr debugfs directory [ 71.365158][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.370650][ T4200] Bluetooth: hci4: command 0x0409 tx timeout [ 71.372526][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.384189][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 71.389848][ T4200] Bluetooth: hci1: command 0x0409 tx timeout [ 71.439893][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 71.446067][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 71.464021][ T4199] device hsr_slave_0 entered promiscuous mode [ 71.471297][ T4199] device hsr_slave_1 entered promiscuous mode [ 71.478094][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.485884][ T4199] Cannot create hsr debugfs directory [ 71.693565][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.717475][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.728638][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.771246][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.795511][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.827472][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.842845][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.858288][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.883930][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.894154][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.912579][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.932592][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.996933][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.012027][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.026498][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.038874][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.103848][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.141970][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.150696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.161408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.171105][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.182851][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.200739][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.219106][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.247572][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.258761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.271039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.282755][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.290067][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.300584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.311841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.320601][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.327681][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.336603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.345805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.355923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.365759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.377110][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.399060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.408144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.417763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.427509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.456636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.466284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.475225][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.482548][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.491780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.501386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.511039][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.518125][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.526155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.536127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.545261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.554491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.563629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.573371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.599280][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.614574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.625251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.635461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.645684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.655354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.665796][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.684308][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.703065][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.716320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.725566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.733866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.744880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.769912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.779022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.794194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.805935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.817384][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.824648][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.835016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.845983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.854996][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.862162][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.903677][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.923607][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.937894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.948916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.962844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.972614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.989552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.004579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.014825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.032881][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.052524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.066705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.075879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.118466][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.128405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.143892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.156241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.165802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.175683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.183592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.200034][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.222720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.236654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.249850][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.263979][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.283222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.300624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.325528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.356886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.373112][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.380317][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.391086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.400160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.408621][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.416007][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.426117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.439655][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 73.449774][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 73.457351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.471025][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.484093][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 73.494646][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.514906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.522698][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 73.528826][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 73.536083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.545837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.555900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.565062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.574735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.611464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.623471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.633260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.642313][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.649625][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.659375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.668267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.677471][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.684600][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.693362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.702697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.711392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.720429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.729148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.738629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.746621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.755585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.765393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.773566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.781832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.789860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.803782][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.832574][ T4189] device veth0_vlan entered promiscuous mode [ 73.869258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.885839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.906956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.917215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.926652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.936229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.945170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.954988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.964932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.973707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.985041][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.997208][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.042771][ T4189] device veth1_vlan entered promiscuous mode [ 74.074016][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.110032][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.117574][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.190248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.198975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.231223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.244014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.276969][ T4189] device veth0_macvtap entered promiscuous mode [ 74.292265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.310718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.319319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.330879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.338954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.354602][ T4189] device veth1_macvtap entered promiscuous mode [ 74.369246][ T4190] device veth0_vlan entered promiscuous mode [ 74.406896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.421558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.434775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.452896][ T4190] device veth1_vlan entered promiscuous mode [ 74.473002][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.488100][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.497665][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.511224][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.528740][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.548726][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.557749][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.566990][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.578714][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.594955][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.613332][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.623135][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.632184][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.643184][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.673366][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.683206][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.691048][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.705136][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.719371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.728252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.760250][ T4198] device veth0_vlan entered promiscuous mode [ 74.778599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.786913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.795744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.805929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.819709][ T4190] device veth0_macvtap entered promiscuous mode [ 74.837099][ T4198] device veth1_vlan entered promiscuous mode [ 74.866073][ T4190] device veth1_macvtap entered promiscuous mode [ 74.887196][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.895819][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.904897][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.913895][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.922711][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.932062][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.945301][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.954792][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.003166][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.014786][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.024708][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.033647][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.044999][ T4199] device veth0_vlan entered promiscuous mode [ 75.071977][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.083241][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.095781][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.110909][ T4197] device veth0_vlan entered promiscuous mode [ 75.127184][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.136536][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.146450][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.157201][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.166242][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.170735][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.188193][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.196485][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.205238][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.213944][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.223515][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.235572][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.247903][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.259337][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.285318][ T4197] device veth1_vlan entered promiscuous mode [ 75.296129][ T4198] device veth0_macvtap entered promiscuous mode [ 75.307838][ T4199] device veth1_vlan entered promiscuous mode [ 75.315387][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.324326][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.333008][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.341275][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.350368][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.361344][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370606][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.379348][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.388774][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.405968][ T4198] device veth1_macvtap entered promiscuous mode [ 75.443058][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.451859][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.465291][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.479374][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.489534][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.500602][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.512735][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.520580][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 75.526692][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.535968][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 75.542768][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 75.550659][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.558745][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.567265][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.575700][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.585217][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.594350][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.603311][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 75.609794][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 75.616699][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.650169][ T4197] device veth0_macvtap entered promiscuous mode [ 75.659377][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.678745][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.702497][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.713705][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.725801][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.740143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.748681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.757658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.768202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.777795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.792523][ T4197] device veth1_macvtap entered promiscuous mode [ 75.821647][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.839040][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.851886][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.876214][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.888573][ T4199] device veth0_macvtap entered promiscuous mode [ 75.928161][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.947036][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.962817][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.974020][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.984267][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.995297][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.028566][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.128263][ T4199] device veth1_macvtap entered promiscuous mode [ 76.147512][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.158060][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.168553][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.180725][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.191275][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.202038][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.212371][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.224563][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.270934][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.306519][ T4275] UBIFS error (pid: 4275): cannot open "c:::", error -22 [ 77.017111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.034978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.049301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.058977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.068073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.078979][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.090532][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.100821][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.111363][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.121571][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.133178][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.145091][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.159492][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.167450][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.178290][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.185797][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.193427][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.201624][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.239693][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.256497][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.267068][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.286171][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.297714][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.314287][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.324767][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.341130][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.359739][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.371375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.406582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.415634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.429230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.447116][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.457621][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.469106][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.490289][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.518602][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.529955][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.538805][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.549207][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.608161][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 77.623863][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 77.631762][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 77.666996][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.680864][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 77.702733][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.714777][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 77.734570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.772780][ T4279] mmap: syz.1.6 (4279) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.802930][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.843480][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.859603][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.867474][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.911147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.921030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.981361][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.999101][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.012917][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.049843][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.063905][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.089706][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.118838][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.177708][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.272732][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.284839][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.315160][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.338253][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.420042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.405223][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.415339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.977425][ T4293] ODEBUG: Out of memory. ODEBUG disabled [ 82.107512][ T4314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.616823][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.769443][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 84.139431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 86.529778][ T4389] vivid-000: kernel_thread() failed [ 86.851986][ T7] cfg80211: failed to load regulatory.db [ 87.218845][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 88.721699][ T4421] ======================================================= [ 88.721699][ T4421] WARNING: The mand mount option has been deprecated and [ 88.721699][ T4421] and is ignored by this kernel. Remove the mand [ 88.721699][ T4421] option from the mount to silence this warning. [ 88.721699][ T4421] ======================================================= [ 88.763587][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.069586][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 89.399904][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.513694][ T4434] capability: warning: `syz.2.38' uses 32-bit capabilities (legacy support in use) [ 89.880054][ T7] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 89.929014][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.134460][ T7] usb 1-1: Product: syz [ 90.139178][ T7] usb 1-1: Manufacturer: syz [ 90.144169][ T7] usb 1-1: SerialNumber: syz [ 90.374381][ T4446] NILFS (nullb0): couldn't find nilfs on the device [ 90.791536][ T7] usb 1-1: config 0 descriptor?? [ 90.809843][ T7] usb 1-1: can't set config #0, error -71 [ 90.830745][ T7] usb 1-1: USB disconnect, device number 2 [ 92.351809][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 93.049425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.069422][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.079424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.099433][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.109430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.119426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.129426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.139426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.395396][ T4477] IPv6: NLM_F_REPLACE set, but no existing node found! [ 98.862479][ T4527] sched: RT throttling activated [ 99.109549][ T4529] vivid-000: kernel_thread() failed [ 100.478448][ T4548] Zero length message leads to an empty skb [ 102.807029][ T4576] IPv6: NLM_F_REPLACE set, but no existing node found! [ 104.949851][ T4597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 107.416972][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 109.411718][ T4635] IPv6: NLM_F_REPLACE set, but no existing node found! [ 109.670498][ T154] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.692331][ T4640] NILFS (nullb0): couldn't find nilfs on the device [ 110.165925][ T4659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 114.305626][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 115.984287][ T1238] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.265570][ T4709] NILFS (nullb0): couldn't find nilfs on the device [ 116.817612][ T4722] vivid-000: kernel_thread() failed [ 125.683702][ T4780] vivid-000: kernel_thread() failed [ 129.896972][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 130.748971][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 132.119849][ T4819] IPv6: NLM_F_REPLACE set, but no existing node found! [ 133.049077][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.065312][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.209076][ T4830] vivid-000: kernel_thread() failed [ 135.887383][ T4863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 136.381301][ T4870] IPv6: NLM_F_REPLACE set, but no existing node found! [ 142.196923][ T4913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 143.536000][ T4925] NILFS (nullb0): couldn't find nilfs on the device [ 145.899796][ T4940] vivid-000: kernel_thread() failed [ 147.363639][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 149.029003][ T4965] NILFS (nullb0): couldn't find nilfs on the device [ 149.589875][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 150.411492][ T4983] NILFS (nullb0): couldn't find nilfs on the device [ 152.319613][ T4991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.175'. [ 154.409599][ T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 155.709556][ T21] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 160, setting to 64 [ 155.729659][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.919725][ T21] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 155.928830][ T21] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.078038][ T21] usb 1-1: Product: syz [ 156.082403][ T21] usb 1-1: Manufacturer: syz [ 156.087042][ T21] usb 1-1: SerialNumber: syz [ 156.093698][ T21] usb 1-1: config 0 descriptor?? [ 156.156895][ T21] usb 1-1: selecting invalid altsetting 0 [ 157.601619][ T21] usb 1-1: USB disconnect, device number 3 [ 157.863161][ T5026] NILFS (nullb0): couldn't find nilfs on the device [ 157.952422][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.206757][ T5028] IPv6: NLM_F_REPLACE set, but no existing node found! [ 158.774494][ T5041] NILFS (nullb0): couldn't find nilfs on the device [ 160.539514][ T5051] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 160.549029][ T5051] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 160.558586][ T5051] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 160.658872][ T5051] syz.0.192 (5051) used greatest stack depth: 20664 bytes left [ 160.719718][ T26] audit: type=1800 audit(1778994288.955:2): pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.192" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 161.684920][ T5064] IPv6: NLM_F_REPLACE set, but no existing node found! [ 164.852311][ T5084] NILFS (nullb0): couldn't find nilfs on the device [ 165.315276][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 167.342665][ T5116] IPv6: NLM_F_REPLACE set, but no existing node found! [ 167.435649][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 167.536377][ T5118] UBIFS error (pid: 5118): cannot open "(null)", error -22 [ 168.818507][ T5125] NILFS (nullb0): couldn't find nilfs on the device [ 169.280604][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 173.145821][ T5161] IPv6: NLM_F_REPLACE set, but no existing node found! [ 174.095894][ T5173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 178.186549][ T5215] NILFS (nullb0): couldn't find nilfs on the device [ 189.805664][ T5291] syz.2.257 (5291) used greatest stack depth: 18096 bytes left [ 194.244667][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257837][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.345293][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 196.382287][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 196.740340][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 196.959127][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 197.189468][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 202.859682][ T5407] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 202.866593][ T5407] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.889500][ T5404] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 202.896270][ T5404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.068054][ T5415] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 203.074732][ T5415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 203.163747][ T5404] vhci_hcd vhci_hcd.0: Device attached [ 203.519725][ T5407] vhci_hcd vhci_hcd.0: Device attached [ 203.746779][ T5415] vhci_hcd vhci_hcd.0: Device attached [ 203.996873][ T5404] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(6) [ 204.003491][ T5404] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.019691][ T4231] usb 42-1: SetAddress Request (2) to port 0 [ 204.026280][ T4231] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 204.059593][ T5404] vhci_hcd vhci_hcd.0: Device attached [ 204.154813][ T5404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 206.069882][ T5408] vhci_hcd: connection reset by peer [ 206.069913][ T5406] vhci_hcd: connection closed [ 206.075510][ T5416] vhci_hcd: connection closed [ 206.075542][ T5429] vhci_hcd: connection closed [ 206.160067][ T154] vhci_hcd: stop threads [ 206.223531][ T154] vhci_hcd: release socket [ 206.314640][ T154] vhci_hcd: disconnect device [ 206.410756][ T154] vhci_hcd: stop threads [ 206.415088][ T154] vhci_hcd: release socket [ 206.509509][ T154] vhci_hcd: disconnect device [ 206.719029][ T154] vhci_hcd: stop threads [ 207.227036][ T154] vhci_hcd: release socket [ 207.601291][ T154] vhci_hcd: disconnect device [ 207.656224][ T154] vhci_hcd: stop threads [ 207.672002][ T154] vhci_hcd: release socket [ 207.898812][ T154] vhci_hcd: disconnect device [ 209.129761][ T4231] usb 42-1: device descriptor read/8, error -110 [ 209.472365][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 209.748359][ T4231] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 209.969577][ T4231] usb usb42-port1: attempt power cycle [ 210.063953][ T4200] vhci_hcd: vhci_device speed not set [ 211.321557][ T4231] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 212.570172][ T4231] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 212.651846][ T4231] usb usb42-port1: unable to enumerate USB device [ 214.418185][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'. [ 216.508546][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 217.874692][ T5555] tmpfs: Unknown parameter 'usrquota' [ 218.062401][ T5556] overlayfs: './file0' not a directory [ 218.871840][ T5565] Cannot find set identified by id 0 to match [ 218.891698][ T5565] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 218.978381][ T5565] syz.0.333 uses obsolete (PF_INET,SOCK_PACKET) [ 219.434808][ T5576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.335'. [ 223.160272][ T5599] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 223.166944][ T5599] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 223.182152][ T5597] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 223.188735][ T5597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.225607][ T5597] vhci_hcd vhci_hcd.0: Device attached [ 223.240326][ T5603] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.250625][ T5599] vhci_hcd vhci_hcd.0: Device attached [ 223.290509][ T5597] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 223.297217][ T5597] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 223.358747][ T5597] vhci_hcd vhci_hcd.0: Device attached [ 223.372654][ T5599] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.489620][ T23] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 223.562690][ T5597] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14) [ 223.562760][ T5597] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.562920][ T5597] vhci_hcd vhci_hcd.0: Device attached [ 224.140043][ T5597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.353550][ T26] audit: type=1326 audit(1778994353.775:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 225.379413][ T5637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 225.415008][ T26] audit: type=1326 audit(1778994353.775:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 225.482349][ T26] audit: type=1326 audit(1778994353.775:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 225.623090][ T26] audit: type=1326 audit(1778994353.785:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 225.670921][ T26] audit: type=1326 audit(1778994353.785:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 225.848494][ T26] audit: type=1326 audit(1778994353.785:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 225.911379][ T26] audit: type=1326 audit(1778994353.785:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 226.099639][ T26] audit: type=1326 audit(1778994353.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 226.196914][ T5652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 226.799303][ T5600] vhci_hcd: connection closed [ 226.799888][ T5607] vhci_hcd: connection closed [ 226.804828][ T5614] vhci_hcd: connection closed [ 226.814770][ T26] audit: type=1326 audit(1778994353.795:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 226.846673][ T154] vhci_hcd: stop threads [ 226.854358][ T154] vhci_hcd: release socket [ 226.879274][ T154] vhci_hcd: disconnect device [ 226.919696][ T154] vhci_hcd: stop threads [ 226.929596][ T5598] vhci_hcd: connection reset by peer [ 226.999456][ T154] vhci_hcd: release socket [ 227.017661][ T154] vhci_hcd: disconnect device [ 227.025050][ T5530] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 227.033926][ T26] audit: type=1326 audit(1778994353.825:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.1.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efd6e4e9e59 code=0x7ffc0000 [ 227.230029][ T154] vhci_hcd: stop threads [ 227.378316][ T154] vhci_hcd: release socket [ 227.459565][ T5530] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 227.471594][ T5530] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.485369][ T5530] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.495177][ T5530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.506548][ T5530] usb 5-1: config 0 descriptor?? [ 227.552792][ T5530] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 227.570347][ T154] vhci_hcd: disconnect device [ 227.612912][ T154] vhci_hcd: stop threads [ 227.619835][ T154] vhci_hcd: release socket [ 227.655661][ T154] vhci_hcd: disconnect device [ 229.568254][ T23] vhci_hcd: vhci_device speed not set [ 229.651636][ T4280] usb 5-1: USB disconnect, device number 2 [ 230.999634][ T21] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 231.319571][ T21] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 231.340583][ T21] usb usb40-port1: attempt power cycle [ 232.759557][ T21] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 233.179741][ T21] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 233.251308][ T21] usb usb40-port1: unable to enumerate USB device [ 233.941780][ T5747] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 233.950109][ T5747] UDF-fs: Scanning with blocksize 512 failed [ 234.144983][ T5747] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 234.153415][ T5747] UDF-fs: Scanning with blocksize 1024 failed [ 234.160680][ T5747] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 234.168230][ T5747] UDF-fs: Scanning with blocksize 2048 failed [ 234.178752][ T5747] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 234.194226][ T5747] UDF-fs: Scanning with blocksize 4096 failed [ 237.289036][ T5769] IPv6: NLM_F_REPLACE set, but no existing node found! [ 239.221891][ T5801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 241.340063][ T5821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 244.877909][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'. [ 247.052018][ T5861] IPv6: NLM_F_REPLACE set, but no existing node found! [ 251.465381][ T5897] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 252.997327][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 253.863127][ T5948] overlayfs: missing 'lowerdir' [ 255.682385][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688845][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.509086][ T5985] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 257.521067][ T5985] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 258.964749][ T6000] netlink: 'syz.4.443': attribute type 3 has an invalid length. [ 259.231804][ T6006] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 266.052638][ T6054] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 266.061232][ T6054] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 266.078769][ T6054] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 266.088270][ T6054] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 266.097502][ T6054] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 270.739753][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 271.949673][ T4235] usb 2-1: device descriptor read/all, error -71 [ 273.591923][ T6135] netlink: 'syz.2.488': attribute type 2 has an invalid length. [ 273.610351][ T6135] netlink: 'syz.2.488': attribute type 8 has an invalid length. [ 273.629464][ T6135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.488'. [ 277.471488][ T6177] netlink: 'syz.1.501': attribute type 39 has an invalid length. [ 277.504138][ T6177] device veth0_macvtap left promiscuous mode [ 279.543475][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.510'. [ 279.552821][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.510'. [ 279.563508][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.510'. [ 279.585330][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.510'. [ 279.830084][ T6208] NILFS (nullb0): couldn't find nilfs on the device [ 281.106842][ T6227] netlink: 164 bytes leftover after parsing attributes in process `syz.0.516'. [ 283.690300][ T6263] netlink: 'syz.0.529': attribute type 3 has an invalid length. [ 288.351382][ T6314] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.545'. [ 290.196286][ T6345] netlink: 'syz.3.556': attribute type 3 has an invalid length. [ 290.984499][ T6351] netlink: 'syz.0.558': attribute type 3 has an invalid length. [ 291.636354][ T6354] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 293.374437][ T6367] netlink: 'syz.2.560': attribute type 3 has an invalid length. [ 293.429516][ T6367] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.560'. [ 295.844628][ T6406] netlink: 'syz.1.573': attribute type 3 has an invalid length. [ 296.026677][ T6408] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 300.702657][ T6446] netlink: 'syz.3.586': attribute type 3 has an invalid length. [ 300.919662][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 301.255058][ T6456] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 306.586354][ T6507] netlink: 'syz.3.602': attribute type 3 has an invalid length. [ 306.726032][ T6510] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 308.980140][ T6536] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.608'. [ 311.779260][ T6564] netlink: 'syz.1.615': attribute type 10 has an invalid length. [ 311.883747][ T6564] device hsr0 entered promiscuous mode [ 311.952242][ T6564] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 312.077860][ T6564] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 312.088548][ T6564] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 312.126280][ T6564] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 313.288973][ T6576] netlink: 'syz.4.618': attribute type 3 has an invalid length. [ 313.389180][ T6578] loop2: detected capacity change from 0 to 512 [ 314.186248][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 316.379914][ T6578] EXT4-fs: error -4 creating inode table initialization thread [ 316.850079][ T6578] EXT4-fs (loop2): mount failed [ 317.121886][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.128361][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.337839][ T6606] netlink: 'syz.4.627': attribute type 39 has an invalid length. [ 318.555889][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 319.017508][ T6616] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 319.284696][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.293436][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.691518][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.698655][ T6616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.707364][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.714533][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.802419][ T6616] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 321.593032][ T6643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.637'. [ 321.923690][ T6650] netlink: 'syz.3.641': attribute type 39 has an invalid length. [ 321.949807][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 322.406606][ T6659] loop2: detected capacity change from 0 to 4096 [ 322.712393][ T6659] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 323.641487][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 324.412339][ T6686] loop4: detected capacity change from 0 to 512 [ 324.532781][ T6686] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 326.056547][ T6699] loop4: detected capacity change from 0 to 128 [ 326.392046][ T4292] attempt to access beyond end of device [ 326.392046][ T4292] loop4: rw=1, want=281, limit=128 [ 326.421179][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 326.553066][ T6708] NILFS (nullb0): couldn't find nilfs on the device [ 330.781845][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'. [ 331.710500][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 336.681656][ T6784] UBIFS error (pid: 6784): cannot open "(null)", error -22 [ 336.820376][ T6787] loop1: detected capacity change from 0 to 512 [ 337.067203][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 337.880320][ T6794] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 338.004432][ T6794] device bond1 entered promiscuous mode [ 338.075411][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.138793][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 338.162927][ T6796] bond1: (slave erspan1): making interface the new active one [ 338.177945][ T6796] device erspan1 entered promiscuous mode [ 338.194504][ T6796] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 338.203843][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 344.282214][ T6822] chnl_net:caif_netlink_parms(): no params data found [ 344.575006][ T4246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.729525][ T4236] Bluetooth: hci5: command 0x0409 tx timeout [ 345.026164][ T4246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.542583][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.549878][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.558079][ T6822] device bridge_slave_0 entered promiscuous mode [ 346.654393][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.661872][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.676113][ T6822] device bridge_slave_1 entered promiscuous mode [ 346.809541][ T6458] Bluetooth: hci5: command 0x041b tx timeout [ 346.963681][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.087378][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.212447][ T6859] netlink: 'syz.1.704': attribute type 3 has an invalid length. [ 347.373560][ T4246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.559711][ T6872] UBIFS error (pid: 6872): cannot open "(null)", error -22 [ 347.572602][ T4246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.692426][ T6822] team0: Port device team_slave_0 added [ 347.718613][ T6822] team0: Port device team_slave_1 added [ 347.847578][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.881568][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.995942][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.125729][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.139468][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.267114][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.918502][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 349.611445][ T6822] device hsr_slave_0 entered promiscuous mode [ 349.819778][ T6822] device hsr_slave_1 entered promiscuous mode [ 349.839242][ T6822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.847428][ T6822] Cannot create hsr debugfs directory [ 350.296148][ T6822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.355757][ T6822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.427184][ T6822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.719840][ T6822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.969445][ T6458] Bluetooth: hci5: command 0x0419 tx timeout [ 351.206569][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.436980][ T6822] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.472794][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.481214][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.500081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.518210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.608714][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.616118][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.759730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.779694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.804100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.830135][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.837302][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.879785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.000351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.024113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.064073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.124173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.166720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.221756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.408097][ T6822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.441032][ T6822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.468616][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.483942][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.612453][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.630350][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.723220][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.857403][ T4246] device hsr_slave_0 left promiscuous mode [ 353.889811][ T4246] device hsr_slave_1 left promiscuous mode [ 353.919066][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.949429][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.985971][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.019826][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.030664][ T4246] device bridge_slave_1 left promiscuous mode [ 354.038581][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.147331][ T4246] device bridge_slave_0 left promiscuous mode [ 354.184474][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.523439][ T4246] device veth1_macvtap left promiscuous mode [ 354.563399][ T4246] device veth0_macvtap left promiscuous mode [ 354.602755][ T4246] device veth1_vlan left promiscuous mode [ 354.634248][ T4246] device veth0_vlan left promiscuous mode [ 356.084735][ T6972] UBIFS error (pid: 6972): cannot open "(null)", error -22 [ 356.339614][ T4246] team0 (unregistering): Port device team_slave_1 removed [ 356.386618][ T4246] team0 (unregistering): Port device team_slave_0 removed [ 356.440131][ T4246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.476912][ T4246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.723558][ T4246] bond0 (unregistering): Released all slaves [ 357.788313][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.800558][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.847008][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.552548][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.571326][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.693380][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.720124][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.744107][ T6822] device veth0_vlan entered promiscuous mode [ 359.761931][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.782623][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.831301][ T6822] device veth1_vlan entered promiscuous mode [ 359.980524][ T6822] device veth0_macvtap entered promiscuous mode [ 360.013361][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.030223][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.064734][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.104638][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.152702][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.167909][ T6822] device veth1_macvtap entered promiscuous mode [ 360.234233][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.270469][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.314742][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.384990][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.489384][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.540535][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.763932][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.901751][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.130621][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.185204][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.453265][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.463292][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.484348][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.524020][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.561484][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.583712][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.474489][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.560024][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.862688][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.877075][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.888296][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.898240][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.024796][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.037771][ T6822] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.047105][ T6822] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.056532][ T6822] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.109703][ T6822] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.621133][ T7074] UBIFS error (pid: 7074): cannot open "(null)", error -22 [ 365.471301][ T4450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.479180][ T4450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.564298][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 365.630893][ T4451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.685278][ T4451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.732385][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 365.825777][ T7083] netlink: 'syz.3.748': attribute type 3 has an invalid length. [ 366.005562][ T7084] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 372.166271][ T7144] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 372.358450][ T7145] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 373.565777][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 378.352449][ T7209] netlink: 'syz.2.773': attribute type 3 has an invalid length. [ 378.561608][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568468][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.597900][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 383.003677][ T7256] UBIFS error (pid: 7256): cannot open "(null)", error -22 [ 384.188605][ T7275] netlink: 'syz.5.790': attribute type 3 has an invalid length. [ 386.421609][ T7286] netlink: 44 bytes leftover after parsing attributes in process `syz.1.793'. [ 387.630177][ T7299] netlink: 'syz.2.797': attribute type 39 has an invalid length. [ 389.590581][ T7337] netlink: 'syz.3.805': attribute type 3 has an invalid length. [ 391.966004][ T7363] netlink: 'syz.2.813': attribute type 39 has an invalid length. [ 393.606791][ T7385] UBIFS error (pid: 7385): cannot open "(null)", error -22 [ 393.700352][ T7386] netlink: 'syz.3.818': attribute type 3 has an invalid length. [ 396.219977][ T7409] netlink: 'syz.3.824': attribute type 39 has an invalid length. [ 397.743131][ T7439] netlink: 'syz.5.831': attribute type 3 has an invalid length. [ 400.596798][ T7479] netlink: 'syz.5.840': attribute type 39 has an invalid length. [ 402.710605][ T7504] netlink: 'syz.5.847': attribute type 3 has an invalid length. [ 403.304852][ T7507] UBIFS error (pid: 7507): cannot open "(null)", error -22 [ 403.825262][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.849'. [ 408.380996][ T7582] netlink: 'syz.5.859': attribute type 3 has an invalid length. [ 409.155122][ T7593] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 411.269781][ T7610] UBIFS error (pid: 7610): cannot open "(null)", error -22 [ 416.071901][ T7658] netlink: 'syz.5.874': attribute type 3 has an invalid length. [ 416.254108][ T7660] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 420.563691][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.882'. [ 423.342084][ T7743] netlink: 'syz.1.888': attribute type 3 has an invalid length. [ 424.374349][ T7752] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 427.970249][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 428.843239][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 433.933336][ T7843] netlink: 'syz.3.904': attribute type 3 has an invalid length. [ 434.388576][ T7851] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 434.809916][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'. [ 435.051458][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 438.594506][ T7883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.700998][ T7883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.775608][ T7888] netlink: 'syz.5.924': attribute type 3 has an invalid length. [ 438.933057][ T7890] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 440.872314][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.878765][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.569618][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.576917][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.583818][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.590758][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.597549][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.604377][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.611202][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.617986][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.624840][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.631663][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.638537][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.645367][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.652210][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.659011][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.665861][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.672691][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.679531][ T7916] tc action pedit offset must be on 32 bit boundaries [ 441.686356][ T7916] 0: reclassify loop, rule prio 0, protocol 800 [ 442.012770][ T7928] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 443.614510][ T7940] loop1: detected capacity change from 0 to 512 [ 444.065113][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.936'. [ 444.085621][ T7940] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.938: iget: bad i_size value: 38620345925642 [ 444.168877][ T7940] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.938: couldn't read orphan inode 15 (err -117) [ 444.309408][ T7940] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 445.618849][ T144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 445.683013][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1288 with error 28 [ 445.747049][ T144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 445.747049][ T144] [ 445.788659][ T144] EXT4-fs (loop1): Total free blocks count 0 [ 445.815223][ T144] EXT4-fs (loop1): Free/Dirty block details [ 445.855834][ T144] EXT4-fs (loop1): free_blocks=0 [ 445.938931][ T144] EXT4-fs (loop1): dirty_blocks=1288 [ 445.974737][ T144] EXT4-fs (loop1): Block reservation details [ 446.013063][ T144] EXT4-fs (loop1): i_reserved_data_blocks=1288 [ 448.172654][ T7995] loop2: detected capacity change from 0 to 1024 [ 450.303133][ T7998] netlink: 'syz.1.953': attribute type 3 has an invalid length. [ 450.573131][ T7995] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 451.372539][ T8002] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 454.717306][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 455.987104][ T8043] netlink: 'syz.5.966': attribute type 3 has an invalid length. [ 456.236256][ T8047] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 458.459763][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.969'. [ 460.738395][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 462.926824][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 463.391890][ T8095] chnl_net:caif_netlink_parms(): no params data found [ 463.546907][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.561938][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.570407][ T8095] device bridge_slave_0 entered promiscuous mode [ 463.578979][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.590204][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.598452][ T8095] device bridge_slave_1 entered promiscuous mode [ 463.625870][ T8095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.637767][ T8095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.672136][ T8122] netlink: 'syz.5.989': attribute type 39 has an invalid length. [ 463.704132][ T8095] team0: Port device team_slave_0 added [ 463.748727][ T8095] team0: Port device team_slave_1 added [ 463.873888][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.901010][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.919726][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 464.103326][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.116586][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.123686][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.150420][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.166878][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.991'. [ 464.260150][ T8095] device hsr_slave_0 entered promiscuous mode [ 464.299765][ T8095] device hsr_slave_1 entered promiscuous mode [ 464.309805][ T8095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.355212][ T8095] Cannot create hsr debugfs directory [ 464.604923][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.990'. [ 465.145427][ T8095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 465.194492][ T8095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 465.284315][ T8095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 465.437256][ T8095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 466.761941][ T2239] Bluetooth: hci2: command 0x041b tx timeout [ 466.786888][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 467.000462][ T8154] netlink: 'syz.5.1000': attribute type 39 has an invalid length. [ 467.048507][ T8095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.259511][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.276941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.325264][ T8095] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.403458][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.422490][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.452947][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.460159][ T5020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.581483][ T8163] device syzkaller0 entered promiscuous mode [ 467.643118][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.670256][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.679348][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 467.708538][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.739634][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.746753][ T5020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.769748][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.785952][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.810341][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.869485][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.892277][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.917592][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.993369][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 468.343770][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.102314][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 470.083264][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.114088][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.296633][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.306031][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.323611][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 471.182789][ T4474] Bluetooth: hci2: command 0x0419 tx timeout [ 471.982373][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 472.038359][ T8198] loop5: detected capacity change from 0 to 512 [ 472.811936][ T8198] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #11: block 327694: comm syz.5.1013: lblock 0 mapped to illegal pblock 327694 (length 1) [ 472.910817][ T8198] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 472.925130][ T8198] ------------[ cut here ]------------ [ 472.968425][ T8198] EA inode 11 i_nlink=2 [ 472.968706][ T8198] WARNING: CPU: 1 PID: 8198 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 473.087983][ T8198] Modules linked in: [ 473.112810][ T8198] CPU: 1 PID: 8198 Comm: syz.5.1013 Not tainted syzkaller #0 [ 473.151619][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.162451][ T8198] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 473.171265][ T8198] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7a e7 a1 ff 49 8b 37 48 c7 c7 80 a6 3d 8a 89 da e8 e9 6b 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 5c a0 07 [ 473.369818][ T8198] RSP: 0018:ffffc90002fdf380 EFLAGS: 00010246 [ 473.513088][ T8198] RAX: dd6ed02857d58a00 RBX: 0000000000000002 RCX: 0000000000080000 [ 473.828722][ T8198] RDX: ffffc900185c0000 RSI: 000000000002d02c RDI: 000000000002d02d [ 473.872809][ T8198] RBP: ffffc90002fdf470 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 473.909340][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.917294][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.939575][ T8198] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff888060042a80 [ 473.992536][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.001925][ T8198] R13: 1ffff1100c00858f R14: dffffc0000000000 R15: ffff888060042ac0 [ 474.010072][ T8198] FS: 00007f530e2e76c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 474.019401][ T8198] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.026046][ T8198] CR2: 0000200000faa030 CR3: 0000000047558000 CR4: 00000000003506f0 [ 474.035488][ T8198] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.045211][ T8198] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.069283][ T8198] Call Trace: [ 474.072648][ T8198] [ 474.075632][ T8198] ? ext4_xattr_block_csum+0x560/0x560 [ 474.091531][ T8198] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 474.097715][ T8198] ext4_xattr_inode_dec_ref_all+0x960/0xfc0 [ 474.129287][ T8198] ? errseq_check+0x3c/0x70 [ 474.133971][ T8198] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 474.143077][ T8198] ? __ext4_journal_ensure_credits+0x450/0x450 [ 474.159662][ T8198] ? ext4_get_inode_loc+0xf6/0x120 [ 474.164873][ T8198] ext4_xattr_delete_inode+0xad1/0xca0 [ 474.179573][ T8198] ? ext4_expand_extra_isize_ea+0x19b0/0x19b0 [ 474.185774][ T8198] ext4_evict_inode+0xc53/0x1090 [ 474.209269][ T8198] ? _raw_spin_unlock+0x24/0x40 [ 474.214278][ T8198] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 474.222402][ T8198] ? do_raw_spin_unlock+0x11d/0x230 [ 474.227678][ T8198] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 474.249491][ T8198] evict+0x4c9/0x8d0 [ 474.253486][ T8198] ? proc_nr_inodes+0x320/0x320 [ 474.258399][ T8198] ? do_raw_spin_unlock+0x11d/0x230 [ 474.279575][ T8198] ? _raw_spin_unlock+0x24/0x40 [ 474.284527][ T8198] ? iput+0x706/0x8a0 [ 474.288575][ T8198] ext4_orphan_cleanup+0xad2/0x1320 [ 474.305587][ T8198] ? ext4_orphan_del+0xbf0/0xbf0 [ 474.319347][ T8198] ? errseq_check_and_advance+0x62/0x120 [ 474.325097][ T8198] ext4_fill_super+0x8d6e/0x94f0 [ 474.340850][ T8198] ? format_decode+0x898/0x1300 [ 474.345827][ T8198] ? ext4_mount+0x40/0x40 [ 474.367237][ T8198] ? set_blocksize+0x1f3/0x370 [ 474.379275][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 474.395277][ T8198] ? sb_set_blocksize+0xa5/0xe0 [ 474.400265][ T8198] mount_bdev+0x287/0x3c0 [ 474.404650][ T8198] ? ext4_mount+0x40/0x40 [ 474.409026][ T8198] legacy_get_tree+0xe6/0x180 [ 474.422010][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.458677][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.459906][ T8198] ? ext4_errno_to_code+0x160/0x160 [ 474.473354][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.482274][ T8198] vfs_get_tree+0x88/0x270 [ 474.487229][ T8198] do_new_mount+0x24a/0xa40 [ 474.496509][ T8095] device veth0_vlan entered promiscuous mode [ 474.497962][ T8198] __se_sys_mount+0x2e3/0x3d0 [ 474.511424][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.513404][ T8198] ? __x64_sys_mount+0xc0/0xc0 [ 474.523909][ T8198] ? lockdep_hardirqs_on+0x94/0x140 [ 474.530417][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.547836][ T8095] device veth1_vlan entered promiscuous mode [ 474.554968][ T8198] ? __x64_sys_mount+0x1c/0xc0 [ 474.572221][ T8198] do_syscall_64+0x4c/0xa0 [ 474.577939][ T8198] ? clear_bhb_loop+0x30/0x80 [ 474.583653][ T8198] ? clear_bhb_loop+0x30/0x80 [ 474.588404][ T8198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 474.598498][ T8198] RIP: 0033:0x7f531008f0ca [ 474.606729][ T8198] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.634212][ T8198] RSP: 002b:00007f530e2e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 474.644158][ T8198] RAX: ffffffffffffffda RBX: 00007f530e2e6ee0 RCX: 00007f531008f0ca [ 474.658672][ T8198] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 00007f530e2e6ea0 [ 474.667270][ T8198] RBP: 0000200000000080 R08: 00007f530e2e6ee0 R09: 0000000000800718 [ 474.677449][ T8198] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 474.686752][ T8198] R13: 00007f530e2e6ea0 R14: 000000000000048a R15: 0000200000000000 [ 474.695702][ T8198] [ 474.698879][ T8198] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 474.706288][ T8198] CPU: 1 PID: 8198 Comm: syz.5.1013 Not tainted syzkaller #0 [ 474.713695][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.724055][ T8198] Call Trace: [ 474.727369][ T8198] [ 474.730341][ T8198] dump_stack_lvl+0x188/0x250 [ 474.730964][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 474.735150][ T8198] ? show_regs_print_info+0x20/0x20 [ 474.746897][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 474.747918][ T8198] ? load_image+0x400/0x400 [ 474.759932][ T8198] panic+0x2e5/0x810 [ 474.763877][ T8198] ? bpf_jit_dump+0xd0/0xd0 [ 474.768429][ T8198] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 474.772738][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 474.774456][ T8198] __warn+0x248/0x2b0 [ 474.786362][ T8198] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 474.790564][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.792475][ T8198] report_bug+0x1b7/0x2e0 [ 474.805350][ T8198] handle_bug+0x3a/0x70 [ 474.809564][ T8198] exc_invalid_op+0x16/0x40 [ 474.814101][ T8198] asm_exc_invalid_op+0x16/0x20 [ 474.818990][ T8198] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 474.825724][ T8198] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7a e7 a1 ff 49 8b 37 48 c7 c7 80 a6 3d 8a 89 da e8 e9 6b 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 5c a0 07 [ 474.838567][ T8095] device veth0_macvtap entered promiscuous mode [ 474.845481][ T8198] RSP: 0018:ffffc90002fdf380 EFLAGS: 00010246 [ 474.845507][ T8198] RAX: dd6ed02857d58a00 RBX: 0000000000000002 RCX: 0000000000080000 [ 474.845523][ T8198] RDX: ffffc900185c0000 RSI: 000000000002d02c RDI: 000000000002d02d [ 474.873968][ T8198] RBP: ffffc90002fdf470 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 474.882100][ T8198] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff888060042a80 [ 474.885580][ T8095] device veth1_macvtap entered promiscuous mode [ 474.890114][ T8198] R13: 1ffff1100c00858f R14: dffffc0000000000 R15: ffff888060042ac0 [ 474.890156][ T8198] ? ext4_xattr_block_csum+0x560/0x560 [ 474.909984][ T8198] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 474.916103][ T8198] ext4_xattr_inode_dec_ref_all+0x960/0xfc0 [ 474.922067][ T8198] ? errseq_check+0x3c/0x70 [ 474.926621][ T8198] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 474.932314][ T8198] ? __ext4_journal_ensure_credits+0x450/0x450 [ 474.938514][ T8198] ? ext4_get_inode_loc+0xf6/0x120 [ 474.943675][ T8198] ext4_xattr_delete_inode+0xad1/0xca0 [ 474.949283][ T8198] ? ext4_expand_extra_isize_ea+0x19b0/0x19b0 [ 474.955526][ T8198] ext4_evict_inode+0xc53/0x1090 [ 474.960509][ T8198] ? _raw_spin_unlock+0x24/0x40 [ 474.965409][ T8198] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 474.970570][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 474.971341][ T8198] ? do_raw_spin_unlock+0x11d/0x230 [ 474.984024][ T8198] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 474.989953][ T8198] evict+0x4c9/0x8d0 [ 474.991802][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 474.993896][ T8198] ? proc_nr_inodes+0x320/0x320 [ 475.006138][ T8198] ? do_raw_spin_unlock+0x11d/0x230 [ 475.011466][ T8198] ? _raw_spin_unlock+0x24/0x40 [ 475.016358][ T8198] ? iput+0x706/0x8a0 [ 475.020379][ T8198] ext4_orphan_cleanup+0xad2/0x1320 [ 475.025357][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.025760][ T8198] ? ext4_orphan_del+0xbf0/0xbf0 [ 475.039700][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.041758][ T8198] ? errseq_check_and_advance+0x62/0x120 [ 475.057209][ T8198] ext4_fill_super+0x8d6e/0x94f0 [ 475.062189][ T8198] ? format_decode+0x898/0x1300 [ 475.067112][ T8198] ? ext4_mount+0x40/0x40 [ 475.069384][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.071480][ T8198] ? set_blocksize+0x1f3/0x370 [ 475.083619][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.086716][ T8198] ? sb_set_blocksize+0xa5/0xe0 [ 475.098376][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.101404][ T8198] mount_bdev+0x287/0x3c0 [ 475.101434][ T8198] ? ext4_mount+0x40/0x40 [ 475.101461][ T8198] legacy_get_tree+0xe6/0x180 [ 475.101485][ T8198] ? ext4_errno_to_code+0x160/0x160 [ 475.101512][ T8198] vfs_get_tree+0x88/0x270 [ 475.101544][ T8198] do_new_mount+0x24a/0xa40 [ 475.101576][ T8198] __se_sys_mount+0x2e3/0x3d0 [ 475.101606][ T8198] ? __x64_sys_mount+0xc0/0xc0 [ 475.101633][ T8198] ? lockdep_hardirqs_on+0x94/0x140 [ 475.101658][ T8198] ? __x64_sys_mount+0x1c/0xc0 [ 475.101684][ T8198] do_syscall_64+0x4c/0xa0 [ 475.101704][ T8198] ? clear_bhb_loop+0x30/0x80 [ 475.101726][ T8198] ? clear_bhb_loop+0x30/0x80 [ 475.101750][ T8198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 475.101773][ T8198] RIP: 0033:0x7f531008f0ca [ 475.101795][ T8198] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.101813][ T8198] RSP: 002b:00007f530e2e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 475.101839][ T8198] RAX: ffffffffffffffda RBX: 00007f530e2e6ee0 RCX: 00007f531008f0ca [ 475.139309][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.139907][ T8198] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 00007f530e2e6ea0 [ 475.144604][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.149383][ T8198] RBP: 0000200000000080 R08: 00007f530e2e6ee0 R09: 0000000000800718 [ 475.149400][ T8198] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 475.149414][ T8198] R13: 00007f530e2e6ea0 R14: 000000000000048a R15: 0000200000000000 [ 475.149444][ T8198] [ 475.149581][ T8198] Kernel Offset: disabled [ 475.280347][ T8198] Rebooting in 86400 seconds..