last executing test programs: 4.268561764s ago: executing program 3 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x709d2d, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xe, 0x1}, {0xb, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r1) open(&(0x7f0000000080)='./file0\x00', 0x426300, 0x1a9) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ebbdfa75bc64"], 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfffc, {0x20, 0x1}, {0x46, 0x2}, @ramp={0x3, 0x10, {0x6, 0x7fff, 0x1ff, 0xe4}}}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) 4.172581187s ago: executing program 2 (id=146): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000500"], 0x2d) 4.04816621s ago: executing program 3 (id=149): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c80)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e706916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639670fc2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29863a0c71e3367846cffe17c4a29a76eb635e95c6d7f4d846f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda4983608dc2f5d5e92392a141b0f2f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f55d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37d72efc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) 3.990382221s ago: executing program 2 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x3, 0xa00) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f00000000c0)=0x2) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f00000007c0), 0x60cb02, 0x0) fsetxattr$security_evm(r1, &(0x7f0000001bc0), 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)="03000000100000000700000001000000", 0x10) ioctl$RTC_UIE_ON(r1, 0x7003) sendto$inet6(r1, &(0x7f0000000080)="8c98aa3e748a8784dc683d0100a5cc309d95fe1f7296a6c6", 0x18, 0x8010, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f00000001c0)) 3.909476143s ago: executing program 1 (id=153): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {}, 0x0, 0x4000, 0x1, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0xe4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08ffc62e6dbdf25"], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='dummy_udc.0', 0xb) write(0xffffffffffffffff, &(0x7f0000000400)='\n', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.811057766s ago: executing program 4 (id=155): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) 3.789514896s ago: executing program 1 (id=156): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) 3.306372048s ago: executing program 4 (id=157): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-:m__read_msr1 msr/read_msr', 0x1b) 3.017872365s ago: executing program 1 (id=158): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="d5a0eecf80cc516c0b", 0x9}], 0x1}}], 0x1, 0x4004) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x447}], 0x1, 0x10000, 0x0) 2.869567059s ago: executing program 2 (id=159): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f00000001c0)=0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0xc000, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x42031}, 0x4080) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000400), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x440c4) r3 = socket$inet(0x2, 0x2, 0x1) recvmmsg(r3, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102f0ffffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.864802489s ago: executing program 0 (id=160): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)={0xc0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x8c, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x18}, @broadcast, @device_a, @from_mac=@device_b, {0x4, 0xd}}, 0x1004, 0xd, @default, @val={0x1, 0x1, [{0x24, 0x1}]}, @void, [{0xdd, 0x65, "2b083ff22452b31e657f9bb974fc005f0353a7b73dbb81711cbdfd59cb99d89c8e9c8f84d1dfa6eb8f8f33e30b1992e9fa4ce0dfc999226b268d5f86ad51b4dedcae7321efa427b525400e54b4b3391831cb4bd76d70e9cad3cbd987547d05b8c5372d76a3"}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/246, 0xf6, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0x4}, @mptcp=@ack={0x1e, 0x4, 0x33, 0x1}]}}}}}}}}, 0x0) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000040)={0x5, 0xfffffffffffffff7, 0x5, 0x5, 0x200}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.81603628s ago: executing program 4 (id=161): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x8) 2.681883584s ago: executing program 0 (id=162): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000840)="ce0000050000000027d050516d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.681675364s ago: executing program 4 (id=163): socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x6, 0xcf6, 0x32315659, 0x0, 0x0, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="8b455d01c500ab6e1ee4672fe083b37aaeed2ac27790f83f63bd0aec2c95442e110aced0adfc2802425b93b990060f3dccce24a68e21eda0b067accdaf2c3a90ea3c41fa73dc66f64cf26a6229a3c2674cff464bdb66819453861001b9f05012c2bd017f5814bdf99f5bf4b27a861877c9dd1054de5996ed5e7e169b3f911cd14e3c65b78abcf85516cf6fc9eb1bc32b5088a55cb665d19c21c2894c374d442f92aea670d6730ac4254cbc01abb634f66363928106afbd9df47af4cb69a9b0be4453d82214eb30b91e4d4363f90760b6514ea5b615e46c00bef014ef34e4937869eadc2abb7817aa3d7e3737b1c5921a158765ffcaca949033df5b9158a2824f6283224ca2f553211f0584510ccc84d882d2c5c40fb8b8ce14a862296dc3b9e0dee82b1a2a63fb8f120d1c57d4716a1cdfde9cfc57f8767ed7329df783bf4f80b3291385929470a36de528f6a30f633e6c818f64d6776cd4092b929586ff65ed310ea0255e43c46a3a838739d5a8417106a8d7b6563477670641f4acad5adc8ccb6b402d2459bcfb4b945b6cd52a27d1cf7fc1a1376d6dd5316ee4561290f7e6fedcc7e322beef0e9b1cb9bdf535a923e284bbb06052769229713bdca566e273e9364a66ffd356052c5500d8c18215ca5650ba51c4a101dba2c6f20823703ce34c0e524a6782612c5ee5cb1828d1b81366d83e8d907dcc16cc8adcefa01a29084c340d4e14da8f41aa41320d2989b3ac0959cf95397fc58159ca7b6f0d5e177bc4ed593ddb9d77b4a2af0ba246e6ddc79efc4cef48c4ebadcf52a0f3a1c2e4a1bb7c552adfa989fdedaa27cdb9cb587506c5e5dbaac4c7a6bb9ea55fa52f12ef83ca83546582e58bb9705a72183a7a14da5cd118b556832828446fb4ce1ad6537cd47984b37f37bac29afb85b2bd98a85aef12cf4e12fa6c62f8620b9910bb110d117a357e9d64bac89bd00dfad5f743e64527a34aa4524395ab1d73ae45476be0e30413c41d4b15ee1e23b562bedeab51fa8b29bf96c1b58442f04069de536306bb07440dbdf618aa118fde24e69b8d6bf16b08af381f82eee83203666c014ac20c4815019a42f263898b87a5d4118d6bdfb514fed17784bb9e0d9bb7da48f700e17be4816939e3cf9d2d74766e1468ca6aa36f21479d36a4b69e4087d95f47b27b2608675f6f282c078952b834ddfa29207b1ff47339bddc493b806f3c1bbaf9291288d1fde6e7ab40efb12c290795c1498f930d1d50fa341b9ac835d11a58fc0676fc7cb0e69536449c44253937b63118d0d07d29fe0eec60917e44023d4bd26d75a463beb567518bee051afc4e27939d7551acea726de55a30570d5fc22952876a85e60f0e8dc61ce5f31bf0b64e14b8995a483c855257e3cad1103e4aa9179127af827b910c4adfafc66a90b022e3c85c3eb17b9328868f68a16e1ccd996933d58ec69f47bb9fa8a628380f90e3cf7dbca867772d6b639f6631ee8847fbc3b546b5e755d7a3dabc76ce1dcca49e47ba3340868245dba9c1a651e4b35160761cb50bf18273fc1c70cfc6123fedc51ff008b78634763cb308f6296de23c2a2e376f90fa84b5e4fe0f56640a23e82513c8be4b08967f40b126affd0f43a5cc821b876a3085d1f2a940bee1ae1399b85449f5bec1675eb6e8d6373e0709dbf2328642af790726ecb8142d4b4a9c784311b7481f682b657106f7ea94342decd2f116f2dbd391762bde40cc499187749c85249f1fdb693736d235d1b40df14332228e3d4cda7ff647ed52687d8ea8e7a498296176c27ce8f404acea48d625a1be335dfddbdb16355bc3579d62766660b3de90d61f3219e2dc66bd1b546d807b71c6d39181c6b38d1b8a8754c8efcc3399f54edf054ba80a5be6cafce0ac712faa594ffe40fd7d9af0ed399fca378040bd52e1256544110562e44e733533138ab0d168060951c827dac63f8f9cfe7e6fa80ae34b6e61720871820baa0e3e521be9068fad40b541794edddf9a256b24ab6f36268aa9b2cdbb76a9488045bb0d5b4b337b515d1e31908abd7229f072e4040513aea63723b3c40335f4959d876656716c2340191d4e1210b1f6a816bd3bc2ad1c80a9fff8248baa477908021aacdf70a2fc211bd0c2fe6e7b6e79f6ed44a8744bf35ebb76d88ee3a87ed1ac80ccf4b9110dcdc43578e43a7ff3b10545254d355ba9aea9c54e831ab5f4afaac23990b33a4916bc2f40a6a8f94bb0364424ce90295f2ed9be4b06e5ff555965073a754b2a1dfe6181ddb5543b969167705c941273b68db0bc90a5217f55db0ee6041aaaf0276fec048bcca50b8a76ac45c4f6592d8e116e817e348a792c707d244679335e509933c33915e32df9dac8dae3f163a339d033c3fb1d231083307fd9bd84228ceb317c2c26c9d7e7780e9285a8d27b3c3c32d792946d4493b49c96d2af0e323c833ea0bbd998c3128c599fc0708b6a3a2b6f48af9d8ec33761f4b85a630744c9a4ebda85ca1735ea055ab616b46433ba98bae3832e78e645b2ad8000c937dafb8ea3d8c29cc447f8d5ca1c49f91006715a2d36ef9be9eb316a87e53331f83f4c4e84823b3c79625a823d403236d515d7da69f226677779ddcaffbe288757f11e67ac0859b593f33767d2e70eeede0e748c94c0de6ad1ba0025de678c121ac870719169c6f1ec69791db8527547b8f93bc747a205e667336227dee42dc035bd2dbe10d7210f9abe12cef4604a58df6f823d56e5dbcd94fcae29d9863a098e4ab2a27aceb05deb0a5db04e68ff1a7ad604b250758e3189ae265aad42a60f58a4e3424683a0b96f338323509a144257191688f1a012c44a1acebd9a98f2dc5992fae76c258a29eb6ca3d2875fdc06d33e6b534d9ea74041c07d6a4b15c471ff98af0bf5d91413b935596ea31f6504ce4b88a1c5c78c87a0f93c8d736d829f6a7d2ab2734b8501ac9be1da814521f5df14c0f64d7da6c6e6c1db628458ec11a77811f9f539b424d5f2e757c1ed03d1fca2e47d2222e0e8983b72091353b302a8f01c4250ca38c2a451adb22b238dda4776711f1b57b74a0ba15d28c77b8b05faf342518376e2ac8e617e135e2308fb515f1d5b98ce2327f499136b33fb9ac0a3098d809fd8c29122cf923f904ae3ce1c01014053365f557f6b6038be356d19c46afe749e55015bd794389c07f3079c698632f5b0c702d443e85ff4a175e08e75b669afbbb4d928a77714a986747be33ffdccca1a2f20a74dfcf0d351601c6128602a9ccf79c4711728388cfdd0be96ed3bd5e1e3876d81574ceaf50476cf74370bcec74281a0244bb285952d34c20e0aa4a89afb23e814c5e3fcd592dba9293aa8b8abd0d347befbd0c735199b0c51456111ccdc78682c0b1aa595d8c1b63aabf8308856e5bfa52f91113c255d4cc3081a4a4a79406522add6bb35985e54851993c4f6a1569331ac66249b69fab2611bd1cdab44a9dd59256c2b7ed287ab60ed70c6c964f283b61b2b00e65341ea78ce189621417d42944b22f571a71d5cfe968c7293a919284bbff888198a347c251200314616a33b698e3abc178134b43c59974542cdd2d79d9256b75454ebcdbffef7f3bf9597816d2555a0ee2fc07e092ef29f4698ca8d0bb2aaac3f3c517a97372c127b125dab4d203d83e6cea3df163ad17e1b658340ddb5db6f3a8f19b8268d4d94bf675545ea3f1a70202e1f101ca1048b15bf854dd48168b583356fe17c68a5fb06497713887e783b124add0d0ceaf46d06a5f08b2162648848b53ec68585349af64fe26d609f6b1f848fa8fcb74133ccbe95fe4211bd8fb03d7bba54339ad9891273481c7af287c9a9f4560b59d92dcbc2e5f8ceb34b0dc4ec6bd558a802d2eee8ec45da1cf28d34143a07449369eb5be6ec7a3fe7e6f9d5219434f7a47408ac8deb616333ed1d215094153a76195551b5bcf850caca0d4d1a3b8a30059b76f2dd10f0facb37a6c2ea50eeab71c98b7892975828a43db7953138138e9a0b3032f27df7200c7612e26b74a96b3f0136a0b0d013b882e259da8ad9d640499d6dc62fe3685784c614cf10b06fa82eddf6fd5074407ded6154c3f694a9024f1a6dcfa644df2d9ad0723c07e452d00add9242cb7f0ee92bb1b60539e20974fa48bfd6518e1372e36d4c5a8dbf84b2fd9154fcdc77ef07b81325014cb852b6075be9cdc7e27d1308f4ba64431824e38fdb538559e5bb06184bb9bde24401a751bbeaf9a73b4d25dacdf0a29cae221004a0335a44cdacea0aad03ca5a7287cb4dadb435d427519dedbda22e6d80e8b9113838fe4de47e92109a11b88a4a46765548e600965f9a527636f68b1fa1e6ea1d76624057d094a715f7388d152b3a677a8a5fadba0fdaec74c632283c4e951125277ec3db0ca542df05ff2c6ca0f1cf7d3f337cb7540b7c47bc9e705cbe8d129ae0e2b09301ba05eadb7d6923fb7e2fa725d0b692e7f6aea3430242f3b612b33141b9b46871d1ebdf447db178585fe90836ef0e54282a5b0969349dd3ddc220aecbc6db3bd4cff027bedd87e9a677ab3f4b25146332bcd946d283452f6bc86f580ce7ff8c4d2f529471aa3d9ab3faa14c34d759cfd1f844849187cc07c0510d924629f19e98c76e883f563957da74a896393a29a9273a0c8975cc885a026e3e0c807a72cad36a625b7c6edfaa27d41c53eac14a729601f9859763baade056a0508213a9e58e2e4d9e83fae2f7f5fa8eedf0644a2d9caab09aa32c4cc81d70ced165e54699354fc1d26d9c53bd70463a862dd30cae3c70d930fd264fc082da67e8d391e939afa4d546540ab9ace6ef93ae11d3c0c184fb853c919d67b912a7f0f8339e634eea109aeb5ad8337b0645adbf6174ac315f92de62f227e82622c39eeb3ed79fde67e1ac3e6244be76aa1d0cbd1c91f6bea32c54b63c8eed37594fa68836487588a4b0aa3b9a9579d9d96e18896bdb8e436c7ac92206adb222ec83047edf77a2d8ddbb23f53b96c0af11344b55521c7a80b20aaadcd499e3f8dc8d7239ea3516a0982ff21fae771841acb9769af64d415448e6725715e1b1f7ce0b63f8a6701b302e9d19443f5446ffae88a75c3a7cbbe533b4081b8f2697911a05fe2e204aa918d986b45d9e6d86be4fe8bd7b859aba6eebd23d7f749c09d3a62a5772be2c21f02dcf807441b6b09907f830b0cfd32748d4021a0c3ce0295b92d00d0910512a91552c117d741eb393f47a217a58e0587228d785611d83158210186ad43d244fb8d7a272e3611e948817f141de1ebb8ef4eae42869ddd3a07d04bcb8eca0cc25f779a9163034a6b2e9b689f6cb58eddb5d7e5253ee3edd882fec8c9f5a427943ff15585a0e9fb8260b81d58c3b6dedcbca0339c58d2ad86a9d7131e3171c2e584e50a23269ba5c838a7087cdbd5ffe99495d7276c5a2f4a684091b118282f5da8f849a7be302537c65f26f5898cf003fed287322abcb0b5c0750bb1aed852c1b53aca13c4771c87e7206c29b38684af3d153e6102a2a26c8892d8df43df6f8658dd84d2dbaed544631a8c27d4234099fb7f1265518d8fc6391efa749b3c479b9b67721a09e071fd81f5520bdfd6e5b7ec63b05c6b4a9c1e6d003c24b86609e7a8dc2eaaaf3fd714185c84b9e98a849d38c29b0d26f09b1df16637fd9156f08f43e98c02b7d73967f866c976bc9c0618daaf3ffe5a8cd9b5fc490a681296abb3bc66e183daec772588f759a4b01ceefaaa391f3bb4d3588de49cf20c1cb120dcb33acb07728d1e84f14bb7deeffa912ecfc7aa4596ff8a894ddd9160f0306d4"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/1/root/var/run\x00', 0x1ff) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0xc4a7, 0x400}, &(0x7f0000000340)=0x8) listen(r2, 0x5) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000280)=0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\x00', 0x1) 2.643028935s ago: executing program 3 (id=164): syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) io_uring_enter(r2, 0x6e0e, 0xa1cf, 0x2, &(0x7f0000000140)={[0x3]}, 0x8) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) io_uring_enter(r3, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x5, 0x1c0800) io_uring_enter(r3, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) ioctl(r0, 0xc138fd01, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") 2.606941325s ago: executing program 0 (id=165): syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3ff, &(0x7f0000000000)) getegid() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x24002000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4001) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) 2.545948477s ago: executing program 1 (id=166): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {}, 0x0, 0x4000, 0x1, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0xe4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08ffc62e6dbdf25"], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='dummy_udc.0', 0xb) write(0xffffffffffffffff, &(0x7f0000000400)='\n', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.712061807s ago: executing program 2 (id=167): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) 1.369829036s ago: executing program 2 (id=168): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/238, 0xee) 1.344559296s ago: executing program 4 (id=169): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x5, 0xd, 0x400, 0x15, 0xcde, 0x0, 0x46a4, 0x800}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 1.304921317s ago: executing program 3 (id=170): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) 1.250018969s ago: executing program 0 (id=171): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-:m__read_msr1 msr/read_msr', 0x1b) 1.249777849s ago: executing program 1 (id=172): syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) io_uring_enter(r1, 0x6e0e, 0xa1cf, 0x2, &(0x7f0000000140)={[0x3]}, 0x8) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) io_uring_enter(r2, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x5, 0x1c0800) io_uring_enter(r2, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) 224.891894ms ago: executing program 2 (id=173): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 224.079474ms ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x4c) 220.691714ms ago: executing program 3 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000840)="ce0000050000000027d050516d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 179.498515ms ago: executing program 4 (id=176): syz_emit_ethernet(0x109, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a83500810049000800451c01000065000000119078000000000000000000004e22002d9078210600014e1e6c6030ec25bfd418d97afb54899eb4b02a92bb5eb26bd1c442d7f9132dde647069d93698dd5c4ee7f831a95616a1029ab79ad558a7c1e25056c2b436fce9b0490e23e004fa136132ed6ab551a5ec78aea832a85a3c7b7c2c69a005ef368d32438f0a56ee32643483c639459c4f270efa24881cbb8b935f88cfdfc33b8a168a932485ac3a8d38b5272932bf618b4aad"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x23, 0x0, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x7}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 179.015755ms ago: executing program 0 (id=177): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)={0x68, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x18}, @broadcast, @device_a, @from_mac=@device_b, {0x4, 0xd}}, 0x1004, 0xd, @default, @val, @void, [{0xdd, 0x1a, "2b083ff22452b31e657f9bb974fc005f0353a7b73dbb81711cbd"}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000007c698ea40000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r3, @ANYBLOB="0800020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 44.533919ms ago: executing program 3 (id=178): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) 0s ago: executing program 0 (id=179): faccessat2(0xffffffffffffffff, 0x0, 0xa1, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 66.846138][ T4174] cgroup: Unknown subsys name 'net' [ 66.954415][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.495128][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.014332][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 70.111781][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 70.152975][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 70.201353][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.209789][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.218482][ T4186] device bridge_slave_0 entered promiscuous mode [ 70.250750][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.258084][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.266323][ T4186] device bridge_slave_1 entered promiscuous mode [ 70.274360][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 70.352208][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 70.383057][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.396922][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.405274][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.413494][ T4187] device bridge_slave_0 entered promiscuous mode [ 70.431233][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.452740][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.460285][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.468988][ T4187] device bridge_slave_1 entered promiscuous mode [ 70.539646][ T4186] team0: Port device team_slave_0 added [ 70.559083][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.568349][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.575435][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.584976][ T4189] device bridge_slave_0 entered promiscuous mode [ 70.593922][ T4186] team0: Port device team_slave_1 added [ 70.600445][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.607981][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.615959][ T4188] device bridge_slave_0 entered promiscuous mode [ 70.632879][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.650100][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.657504][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.665469][ T4189] device bridge_slave_1 entered promiscuous mode [ 70.679542][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.686669][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.694820][ T4188] device bridge_slave_1 entered promiscuous mode [ 70.709660][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.716764][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.725151][ T4196] device bridge_slave_0 entered promiscuous mode [ 70.773140][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.780504][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.790386][ T4196] device bridge_slave_1 entered promiscuous mode [ 70.798220][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.805204][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.831345][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.845095][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.856988][ T4187] team0: Port device team_slave_0 added [ 70.866067][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.884305][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.891487][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.917819][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.931227][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.942298][ T4187] team0: Port device team_slave_1 added [ 70.950282][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.998580][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.019214][ T4188] team0: Port device team_slave_0 added [ 71.047931][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.057844][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.064890][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.091587][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.103973][ T4188] team0: Port device team_slave_1 added [ 71.125589][ T4189] team0: Port device team_slave_0 added [ 71.139112][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.146115][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.172434][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.198878][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.205840][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.215391][ T4189] team0: Port device team_slave_1 added [ 71.233038][ T4196] team0: Port device team_slave_0 added [ 71.249126][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.256132][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.282672][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.303050][ T4196] team0: Port device team_slave_1 added [ 71.322307][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.329546][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.356097][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.381298][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.388589][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.414653][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.432251][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.438881][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455404][ T4187] device hsr_slave_0 entered promiscuous mode [ 71.462308][ T4187] device hsr_slave_1 entered promiscuous mode [ 71.469186][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.477088][ T4187] Cannot create hsr debugfs directory [ 71.494741][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.502719][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.529224][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.559388][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.566384][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.592836][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.632525][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.639704][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.665841][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.711993][ T4188] device hsr_slave_0 entered promiscuous mode [ 71.719544][ T4188] device hsr_slave_1 entered promiscuous mode [ 71.726287][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.734089][ T4188] Cannot create hsr debugfs directory [ 71.757499][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 71.764359][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 71.771774][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 71.778162][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 71.784292][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 71.820777][ T4196] device hsr_slave_0 entered promiscuous mode [ 71.828386][ T4196] device hsr_slave_1 entered promiscuous mode [ 71.835168][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.842989][ T4196] Cannot create hsr debugfs directory [ 71.865585][ T4189] device hsr_slave_0 entered promiscuous mode [ 71.872620][ T4189] device hsr_slave_1 entered promiscuous mode [ 71.880370][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.888486][ T4189] Cannot create hsr debugfs directory [ 72.162474][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.197535][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.211186][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.238347][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.293409][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.313346][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.336330][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.346318][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.400397][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.410917][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.421804][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.431329][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.518621][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.536693][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.559181][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.576764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.586920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.596247][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.635937][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.645283][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.656679][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.664267][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.673340][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.683095][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.692413][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.699538][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.708889][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.718828][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.727334][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.736614][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.762562][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.792589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.802692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.812633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.825120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.833468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.844429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.858864][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.871280][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.886139][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.896723][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.906177][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.914412][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.923507][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.933697][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.942730][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.952143][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.959394][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.969076][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.981910][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.004457][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.014373][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.023575][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.035827][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.045286][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.054800][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.062039][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.074843][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.090259][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.102955][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.137032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.149884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.159706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.203884][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.216498][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.229587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.239819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.249193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.259264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.268096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.276060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.287886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.298438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.307020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.315917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.333261][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.398241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.412594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.434893][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.442058][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.465049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.479969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.489037][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.496145][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.504487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.540009][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.556547][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.589347][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.602265][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.610598][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.620393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.635404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.649874][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.665839][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.703190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.712261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.723455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.733794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.744025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.754871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.766136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.775375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.784570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.794443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.802508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.815666][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.826315][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.828853][ T1110] Bluetooth: hci0: command 0x041b tx timeout [ 73.835763][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 73.847845][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 73.853992][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 73.859841][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.860808][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 73.875285][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.882451][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.891535][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.902281][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.919550][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.953977][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.968956][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.992929][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.000089][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.010035][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.026736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.039285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.064079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.131840][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.149119][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.165762][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.189800][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.208082][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.216769][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.231947][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.241772][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.251602][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.261266][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.270987][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.285853][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.294123][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.302949][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.315302][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.324549][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.336396][ T4187] device veth0_vlan entered promiscuous mode [ 74.345933][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.383909][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.394493][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.403468][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.410847][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.421467][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.430265][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.439177][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.446272][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.454705][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.464667][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.482704][ T4187] device veth1_vlan entered promiscuous mode [ 74.504081][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.535260][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.550620][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.560928][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.569832][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.590799][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.601071][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.611150][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.666955][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.676881][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.693070][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.702519][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.715175][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.724540][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.734191][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.750441][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.771696][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.787448][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.796312][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.813146][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.824939][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.839675][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.849437][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.857525][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.881231][ T4187] device veth0_macvtap entered promiscuous mode [ 74.904542][ T4186] device veth0_vlan entered promiscuous mode [ 74.926057][ T4187] device veth1_macvtap entered promiscuous mode [ 74.941866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.958253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.966739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.975941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.985495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.004469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.026765][ T4186] device veth1_vlan entered promiscuous mode [ 75.039678][ T4196] device veth0_vlan entered promiscuous mode [ 75.066186][ T4196] device veth1_vlan entered promiscuous mode [ 75.080569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.091249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.100415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.113856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.174009][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.188805][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.212391][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.225423][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.240248][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.249657][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.260009][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.269749][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.285363][ T4196] device veth0_macvtap entered promiscuous mode [ 75.295984][ T4186] device veth0_macvtap entered promiscuous mode [ 75.315467][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.324442][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.333648][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.344750][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.364968][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.375498][ T4196] device veth1_macvtap entered promiscuous mode [ 75.395748][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.404649][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.415600][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.429881][ T4186] device veth1_macvtap entered promiscuous mode [ 75.450106][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.460289][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.469823][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.478629][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.497183][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.505657][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.514020][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.523004][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.532306][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.547633][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.558745][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.570993][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.597851][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.608430][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.620179][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.630877][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.642814][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.651694][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.661047][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.672131][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.681222][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.690642][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.699927][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.710511][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.718764][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.731770][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.747938][ T4188] device veth0_vlan entered promiscuous mode [ 75.756063][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.769397][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.781166][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.797676][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.813245][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.823495][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.834938][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.850332][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.861932][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.871267][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.880616][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.889722][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.906652][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.916152][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.925171][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 75.931649][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 75.938852][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.947748][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 75.954626][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 75.956800][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.961728][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 75.983057][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.994049][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.003282][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.014837][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.040153][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.049591][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.064163][ T4188] device veth1_vlan entered promiscuous mode [ 76.179508][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.192259][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.205167][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.214266][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.258957][ T4189] device veth0_vlan entered promiscuous mode [ 76.268637][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.276697][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.292745][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.299562][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.311460][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.320610][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.328807][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.336777][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.363095][ T4189] device veth1_vlan entered promiscuous mode [ 76.372775][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.381193][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.395916][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.408954][ T4188] device veth0_macvtap entered promiscuous mode [ 76.446777][ T4188] device veth1_macvtap entered promiscuous mode [ 76.487093][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.487606][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.511084][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.522976][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.530603][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.542119][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.556724][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.567731][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.579547][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.601679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.613438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.622656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.632823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.641762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.652508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.662611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.671793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.683854][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.688006][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.696901][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.714148][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.725177][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.735587][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.743226][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.747302][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.766410][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.777105][ T4189] device veth0_macvtap entered promiscuous mode [ 76.809071][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.818572][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.827001][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.838439][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.852451][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.863413][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.873832][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.884055][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.898178][ T4189] device veth1_macvtap entered promiscuous mode [ 76.926760][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.941656][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.998661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.015399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.051697][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.074905][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.085975][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.096882][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.107280][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.121581][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.132585][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.157712][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.173650][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.214080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.231820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.258076][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.277711][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.294195][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.305283][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.330894][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.346519][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.360680][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.372537][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.384075][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.404415][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.418149][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.428645][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.433757][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.445447][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.459951][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.473419][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.482735][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.507844][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.546092][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.565925][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.611112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.704592][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.718775][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.738284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.761121][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.783592][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.813536][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.858597][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.894354][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.974388][ T4291] team0: Port device vlan2 added [ 77.989867][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.007287][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 78.013983][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 78.046982][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 78.086328][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 78.113958][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 78.189086][ T4298] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 78.222312][ T4301] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.225181][ T4299] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.233054][ T4301] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.246538][ T4301] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.255328][ T4301] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.302831][ T4301] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.312019][ T4301] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.321650][ T4301] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.330863][ T4301] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.443781][ T4310] device gretap1 entered promiscuous mode [ 78.454970][ T4310] batman_adv: batadv0: Adding interface: gretap1 [ 78.463316][ T4310] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.507892][ T4311] binder: 4307:4311 ioctl c00c6211 0 returned -22 [ 79.297518][ T4310] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 79.996986][ T4332] 9pnet_virtio: no channels available for device syz [ 81.517272][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 81.788787][ T1325] cfg80211: failed to load regulatory.db [ 81.948803][ T4343] binder: 4342:4343 ioctl c00c6211 0 returned -22 [ 82.787280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.088761][ T4356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 84.155271][ T4356] netlink: 'syz.1.26': attribute type 6 has an invalid length. [ 84.188315][ T4359] 9pnet_virtio: no channels available for device syz [ 84.195151][ T4356] netlink: 72 bytes leftover after parsing attributes in process `syz.1.26'. [ 84.418131][ T4365] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 84.438071][ T4365] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 84.606340][ T4372] qrtr: Invalid version 0 [ 84.854724][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 85.661232][ T4392] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.257409][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.338147][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.346579][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.219944][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.327857][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.504081][ T4410] Zero length message leads to an empty skb [ 88.164298][ T4371] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.173417][ T4371] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.182785][ T4371] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.192057][ T4371] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.529132][ T4428] binder: 4425:4428 ioctl 80247008 2000000001c0 returned -22 [ 88.694847][ T4444] netlink: 'syz.0.49': attribute type 4 has an invalid length. [ 88.736691][ T4444] 9pnet: Insufficient options for proto=fd [ 88.751022][ T4424] nvme nvme0: rdma connection establishment failed (-104) [ 88.767355][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.863334][ T4448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 89.027688][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 89.167592][ T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 89.178156][ T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 89.187496][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 89.196721][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.207614][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.217978][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.231996][ T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 89.241730][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.266613][ T7] usb 5-1: config 0 descriptor?? [ 89.458789][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.466400][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.535709][ T7] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 89.697354][ T1110] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.824525][ T4200] usb 5-1: USB disconnect, device number 2 [ 89.849956][ T4200] usblp0: removed [ 90.077842][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.118047][ T1110] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.141968][ T1110] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 90.169606][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.367578][ T1110] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 90.395354][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.404600][ T1110] usb 4-1: Product: syz [ 90.408934][ T1110] usb 4-1: Manufacturer: syz [ 90.413603][ T1110] usb 4-1: SerialNumber: syz [ 90.499586][ T4462] autofs4:pid:4462:autofs_fill_super: called with bogus options [ 90.693500][ T1110] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 90.922940][ T4446] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.938918][ T4446] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.961156][ T4200] usb 4-1: USB disconnect, device number 2 [ 90.967379][ T4446] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.982530][ T4200] usblp0: removed [ 90.992446][ T4446] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.177124][ T4446] device gretap1 left promiscuous mode [ 91.191713][ T4448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 91.226226][ T4448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 91.586737][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.605976][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 91.624756][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 91.664845][ T4486] binder: 4479:4486 ioctl 4018620d 0 returned -22 [ 91.683919][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 91.700685][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 91.714729][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 91.728997][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 92.492288][ T4482] binder: 4480:4482 ioctl c00c6211 0 returned -22 [ 92.575878][ T4490] gadgetfs: bound to dummy_udc driver [ 92.967645][ T4390] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.017926][ C1] gadgetfs: connected [ 93.024457][ T4390] gadgetfs: disconnected [ 93.149342][ T4491] gadgetfs: suspended from state 2 [ 93.417384][ T4390] usb 1-1: device not accepting address 3, error -71 [ 94.063277][ T4507] capability: warning: `syz.4.71' uses 32-bit capabilities (legacy support in use) [ 94.076839][ T4507] program syz.4.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.168319][ T4510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 94.633202][ T4530] tmpfs: Unknown parameter 'usrquota' [ 96.754533][ T4541] 9pnet_virtio: no channels available for device syz [ 98.375659][ T4566] 9pnet_virtio: no channels available for device syz [ 98.383834][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.397046][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 98.405354][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 98.413461][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 98.421622][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 98.429918][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 98.451339][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 99.426659][ T4576] input: syz0 as /devices/virtual/input/input8 [ 100.281712][ T4588] CUSE: unknown device info "" [ 100.366933][ T4588] CUSE: unknown device info "Ö" [ 100.714586][ T4588] CUSE: unknown device info "" [ 100.893931][ T4588] CUSE: unknown device info "" [ 101.021655][ T4588] CUSE: unknown device info "" [ 101.169846][ T4588] CUSE: unknown device info "" [ 101.286052][ T4588] CUSE: unknown device info "ðÿÿÿ" [ 101.406081][ T4588] CUSE: unknown device info "" [ 101.521929][ T4588] CUSE: unknown device info "" [ 101.644671][ T4588] CUSE: unknown device info "" [ 101.766517][ T4588] CUSE: unknown device info "" [ 101.878310][ T4588] CUSE: unknown device info "r" [ 102.012088][ T4588] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 102.093002][ T4588] CUSE: unknown device info "ÿÿÿÿ" [ 102.136237][ T4588] CUSE: unknown device info "" [ 102.181562][ T4588] CUSE: unknown device info "€" [ 102.221137][ T4588] CUSE: DEVNAME unspecified [ 103.251323][ T4605] autofs4:pid:4605:autofs_fill_super: called with bogus options [ 104.411430][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 104.428544][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 104.446879][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 104.481142][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 104.495740][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 104.511561][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 104.526722][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 106.211593][ T4628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.105'. [ 109.953296][ T4594] syz.0.94 (4594): drop_caches: 1 [ 109.984905][ T4596] syz.0.94 (4596): drop_caches: 1 [ 110.014295][ T4665] syz.2.113 (4665) used greatest stack depth: 17856 bytes left [ 111.118524][ T4668] jffs2: notice: (4668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.245396][ T4674] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 111.497532][ T4660] mmap: syz.4.112 (4660): VmData 25837568 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 111.689100][ T4688] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 111.733602][ T4688] team0: Port device dummy0 added [ 111.809938][ T4688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 112.656079][ T4706] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.773462][ T4706] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.635816][ T4708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 113.716217][ T4700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.937392][ T4233] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.707373][ T4233] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.247006][ T4741] binder: 4740:4741 ioctl 80247008 2000000001c0 returned -22 [ 119.277025][ T4744] usb usb8: usbfs: process 4744 (syz.1.138) did not claim interface 0 before use [ 119.467437][ T4233] usb 1-1: Dual-Role OTG device on HNP port [ 119.487594][ T4233] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 119.528005][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.572547][ T4233] gspca_main: spca501-2.14.0 probing 0000:0000 [ 119.597516][ T4233] gspca_spca501: reg write: error -32 [ 119.603597][ T4233] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 119.647448][ T4233] spca501: probe of 1-1:1.0 failed with error -22 [ 119.759296][ T4200] Bluetooth: hci4: command 0x0405 tx timeout [ 119.857376][ T4784] file system registered [ 120.022535][ T4784] read descriptors [ 120.788936][ T4196] ffs_data_put(): freeing [ 123.563112][ T4845] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.593500][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 123.681917][ T4843] [ 123.684338][ T4843] ====================================================== [ 123.691373][ T4843] WARNING: possible circular locking dependency detected [ 123.698427][ T4843] syzkaller #0 Not tainted [ 123.702867][ T4843] ------------------------------------------------------ [ 123.709902][ T4843] syz.2.173/4843 is trying to acquire lock: [ 123.715904][ T4843] ffff88807b44aad8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 123.727710][ T4843] [ 123.727710][ T4843] but task is already holding lock: [ 123.735120][ T4843] ffff88807b448c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 123.744239][ T4843] [ 123.744239][ T4843] which lock already depends on the new lock. [ 123.744239][ T4843] [ 123.754940][ T4843] [ 123.754940][ T4843] the existing dependency chain (in reverse order) is: [ 123.764081][ T4843] [ 123.764081][ T4843] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 123.771900][ T4843] lock_sock_nested+0x44/0x100 [ 123.777232][ T4843] smc_listen_out+0x105/0x3b0 [ 123.782467][ T4843] smc_listen_work+0x52a/0xd10 [ 123.787817][ T4843] process_one_work+0x867/0xff0 [ 123.793227][ T4843] worker_thread+0xad7/0x12a0 [ 123.798497][ T4843] kthread+0x42e/0x520 [ 123.803116][ T4843] ret_from_fork+0x1f/0x30 [ 123.808091][ T4843] [ 123.808091][ T4843] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 123.818290][ T4843] __lock_acquire+0x2c66/0x7b50 [ 123.823800][ T4843] lock_acquire+0x19e/0x400 [ 123.828872][ T4843] __flush_work+0x116/0x210 [ 123.833932][ T4843] __cancel_work_timer+0x3f4/0x560 [ 123.839632][ T4843] smc_clcsock_release+0x5c/0xe0 [ 123.845132][ T4843] __smc_release+0x644/0x7b0 [ 123.850280][ T4843] smc_close_non_accepted+0xd1/0x1f0 [ 123.856125][ T4843] smc_close_active+0xae2/0xea0 [ 123.861527][ T4843] __smc_release+0x9c/0x7b0 [ 123.866591][ T4843] smc_release+0x2c1/0x520 [ 123.871557][ T4843] sock_close+0xbf/0x210 [ 123.876355][ T4843] __fput+0x212/0x8c0 [ 123.880890][ T4843] task_work_run+0x125/0x1a0 [ 123.886034][ T4843] exit_to_user_mode_loop+0x10f/0x130 [ 123.891955][ T4843] exit_to_user_mode_prepare+0xee/0x180 [ 123.898063][ T4843] syscall_exit_to_user_mode+0x16/0x40 [ 123.904071][ T4843] do_syscall_64+0x58/0xa0 [ 123.909128][ T4843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.915680][ T4843] [ 123.915680][ T4843] other info that might help us debug this: [ 123.915680][ T4843] [ 123.925910][ T4843] Possible unsafe locking scenario: [ 123.925910][ T4843] [ 123.933364][ T4843] CPU0 CPU1 [ 123.938843][ T4843] ---- ---- [ 123.944238][ T4843] lock(sk_lock-AF_SMC/1); [ 123.948757][ T4843] lock((work_completion)(&new_smc->smc_listen_work)); [ 123.958232][ T4843] lock(sk_lock-AF_SMC/1); [ 123.965395][ T4843] lock((work_completion)(&new_smc->smc_listen_work)); [ 123.972353][ T4843] [ 123.972353][ T4843] *** DEADLOCK *** [ 123.972353][ T4843] [ 123.980498][ T4843] 2 locks held by syz.2.173/4843: [ 123.985538][ T4843] #0: ffff8880745a6e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 123.995730][ T4843] #1: ffff88807b448c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 124.005277][ T4843] [ 124.005277][ T4843] stack backtrace: [ 124.011187][ T4843] CPU: 1 PID: 4843 Comm: syz.2.173 Not tainted syzkaller #0 [ 124.018492][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.028597][ T4843] Call Trace: [ 124.031883][ T4843] [ 124.034812][ T4843] dump_stack_lvl+0x188/0x250 [ 124.039497][ T4843] ? load_image+0x410/0x410 [ 124.044044][ T4843] ? show_regs_print_info+0x20/0x20 [ 124.049264][ T4843] ? print_circular_bug+0x12b/0x1a0 [ 124.054464][ T4843] check_noncircular+0x296/0x330 [ 124.059414][ T4843] ? look_up_lock_class+0x71/0x110 [ 124.064534][ T4843] ? add_chain_block+0x9b0/0x9b0 [ 124.069476][ T4843] ? lockdep_lock+0xf1/0x1f0 [ 124.074108][ T4843] ? mark_lock+0x94/0x320 [ 124.078437][ T4843] ? _find_first_zero_bit+0xd1/0xf0 [ 124.083846][ T4843] __lock_acquire+0x2c66/0x7b50 [ 124.088767][ T4843] ? psi_task_switch+0x4c3/0x810 [ 124.093727][ T4843] ? verify_lock_unused+0x140/0x140 [ 124.098941][ T4843] ? mark_lock+0x94/0x320 [ 124.103279][ T4843] ? __lock_acquire+0x13dc/0x7b50 [ 124.108323][ T4843] lock_acquire+0x19e/0x400 [ 124.112834][ T4843] ? __flush_work+0xfa/0x210 [ 124.117440][ T4843] ? read_lock_is_recursive+0x10/0x10 [ 124.122830][ T4843] __flush_work+0x116/0x210 [ 124.127358][ T4843] ? __flush_work+0xfa/0x210 [ 124.131973][ T4843] ? flush_work+0x20/0x20 [ 124.136846][ T4843] ? try_to_grab_pending+0xfb/0x820 [ 124.142078][ T4843] ? mark_lock+0x94/0x320 [ 124.146457][ T4843] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.152448][ T4843] ? lock_chain_count+0x20/0x20 [ 124.157326][ T4843] ? mark_lock+0x94/0x320 [ 124.161670][ T4843] ? __cancel_work_timer+0x36a/0x560 [ 124.166966][ T4843] __cancel_work_timer+0x3f4/0x560 [ 124.172177][ T4843] ? cancel_work_sync+0x20/0x20 [ 124.177038][ T4843] ? __local_bh_enable_ip+0x136/0x1c0 [ 124.182421][ T4843] ? lockdep_hardirqs_on+0x94/0x140 [ 124.187628][ T4843] ? __local_bh_enable_ip+0x136/0x1c0 [ 124.193091][ T4843] ? _local_bh_enable+0xa0/0xa0 [ 124.197969][ T4843] smc_clcsock_release+0x5c/0xe0 [ 124.202929][ T4843] __smc_release+0x644/0x7b0 [ 124.207526][ T4843] smc_close_non_accepted+0xd1/0x1f0 [ 124.212852][ T4843] smc_close_active+0xae2/0xea0 [ 124.217711][ T4843] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 124.223353][ T4843] __smc_release+0x9c/0x7b0 [ 124.227996][ T4843] smc_release+0x2c1/0x520 [ 124.232430][ T4843] sock_close+0xbf/0x210 [ 124.236699][ T4843] ? sock_mmap+0x90/0x90 [ 124.241036][ T4843] __fput+0x212/0x8c0 [ 124.245030][ T4843] task_work_run+0x125/0x1a0 [ 124.249644][ T4843] exit_to_user_mode_loop+0x10f/0x130 [ 124.255049][ T4843] exit_to_user_mode_prepare+0xee/0x180 [ 124.260636][ T4843] syscall_exit_to_user_mode+0x16/0x40 [ 124.266134][ T4843] do_syscall_64+0x58/0xa0 [ 124.270595][ T4843] ? clear_bhb_loop+0x30/0x80 [ 124.275313][ T4843] ? clear_bhb_loop+0x30/0x80 [ 124.280022][ T4843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.285938][ T4843] RIP: 0033:0x7fc5334820d9 [ 124.290530][ T4843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.310303][ T4843] RSP: 002b:00007ffc47cd8848 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 124.318775][ T4843] RAX: 0000000000000000 RBX: 00007fc53370bda0 RCX: 00007fc5334820d9 [ 124.326882][ T4843] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 124.334870][ T4843] RBP: 00007fc53370bda0 R08: 00007fc53370a038 R09: 0000000000000000 [ 124.343303][ T4843] R10: 00000000003ffd7c R11: 0000000000000246 R12: 000000000001e52b [ 124.351508][ T4843] R13: 00007fc533709fac R14: 000000000001e23e R15: 00007ffc47cd8950 [ 124.359505][ T4843] [ 124.362737][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.787651][ T4855] process 'syz.1.181' launched './file0' with NULL argv: empty string added [ 124.806121][ T4855] syz.1.181 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 124.820444][ T4855] CPU: 0 PID: 4855 Comm: syz.1.181 Not tainted syzkaller #0 [ 124.827761][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.837845][ T4855] Call Trace: [ 124.841151][ T4855] [ 124.844095][ T4855] dump_stack_lvl+0x188/0x250 [ 124.848828][ T4855] ? show_regs_print_info+0x20/0x20 [ 124.854050][ T4855] ? load_image+0x410/0x410 [ 124.858596][ T4855] ? local_lock_release+0x170/0x170 [ 124.863817][ T4855] ? __rwlock_init+0x140/0x140 [ 124.868596][ T4855] dump_header+0xd9/0x780 [ 124.872952][ T4855] oom_kill_process+0x20e/0x3d0 [ 124.879472][ T4855] out_of_memory+0xdb2/0x1190 [ 124.884261][ T4855] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 124.889919][ T4855] ? mutex_lock_io_nested+0x60/0x60 [ 124.895333][ T4855] ? unregister_oom_notifier+0x20/0x20 [ 124.900816][ T4855] ? rcu_is_watching+0x11/0xa0 [ 124.905602][ T4855] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 124.911168][ T4855] ? mem_cgroup_oom_trylock+0x210/0x210 [ 124.916754][ T4855] ? do_raw_spin_lock+0x128/0x2f0 [ 124.921802][ T4855] ? do_raw_spin_unlock+0x11d/0x230 [ 124.927021][ T4855] try_charge_memcg+0x1075/0x15b0 [ 124.932072][ T4855] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 124.937902][ T4855] ? rcu_lock_acquire+0x30/0x30 [ 124.942775][ T4855] ? __lock_acquire+0x7b50/0x7b50 [ 124.947832][ T4855] ? rcu_is_watching+0x11/0xa0 [ 124.952621][ T4855] obj_cgroup_charge_pages+0x87/0x190 [ 124.958014][ T4855] ? __memcg_kmem_charge_page+0x380/0x380 [ 124.963753][ T4855] ? __alloc_pages+0x480/0x480 [ 124.968540][ T4855] __memcg_kmem_charge_page+0x2fe/0x380 [ 124.974189][ T4855] __alloc_pages+0x222/0x480 [ 124.978800][ T4855] ? zone_statistics+0x170/0x170 [ 124.983756][ T4855] ? count_memcg_event_mm+0x324/0x370 [ 124.989177][ T4855] get_zeroed_page+0x13/0x30 [ 124.993784][ T4855] __pud_alloc+0x31/0x140 [ 124.998132][ T4855] ? handle_mm_fault+0x4be/0x4440 [ 125.003171][ T4855] handle_mm_fault+0x2c09/0x4440 [ 125.008132][ T4855] ? get_page+0xe0/0xe0 [ 125.012307][ T4855] ? __schedule+0x11cb/0x4350 [ 125.017033][ T4855] ? follow_page_mask+0x272/0x12b0 [ 125.022174][ T4855] ? vma_is_secretmem+0x9/0x40 [ 125.026960][ T4855] ? check_vma_flags+0x359/0x470 [ 125.032174][ T4855] __get_user_pages+0x952/0x11e0 [ 125.037136][ T4855] ? populate_vma_page_range+0x290/0x290 [ 125.042792][ T4855] ? lock_acquire+0xc8/0x400 [ 125.047406][ T4855] ? preempt_schedule+0xbc/0xd0 [ 125.052278][ T4855] ? __might_sleep+0xf0/0xf0 [ 125.056900][ T4855] ? read_lock_is_recursive+0x10/0x10 [ 125.062384][ T4855] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 125.067822][ T4855] __get_user_pages_remote+0x1c2/0x730 [ 125.073320][ T4855] ? irq_work_queue+0xb8/0x140 [ 125.078126][ T4855] ? get_user_pages_remote+0x55/0xa0 [ 125.083435][ T4855] get_arg_page+0x11b/0x350 [ 125.088147][ T4855] ? copy_string_kernel+0x280/0x280 [ 125.093642][ T4855] ? load_image+0x410/0x410 [ 125.098168][ T4855] copy_string_kernel+0x14d/0x280 [ 125.103215][ T4855] do_execveat_common+0x360/0x6b0 [ 125.108264][ T4855] __x64_sys_execve+0x8e/0xa0 [ 125.112960][ T4855] do_syscall_64+0x4c/0xa0 [ 125.117398][ T4855] ? clear_bhb_loop+0x30/0x80 [ 125.122104][ T4855] ? clear_bhb_loop+0x30/0x80 [ 125.126898][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.132815][ T4855] RIP: 0033:0x7fd1bcee80d9 [ 125.137247][ T4855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.157245][ T4855] RSP: 002b:00007fd1bb140028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 125.165776][ T4855] RAX: ffffffffffffffda RBX: 00007fd1bd16ffa0 RCX: 00007fd1bcee80d9 [ 125.173868][ T4855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 125.181870][ T4855] RBP: 00007fd1bcf7f024 R08: 0000000000000000 R09: 0000000000000000 [ 125.189871][ T4855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.198477][ T4855] R13: 00007fd1bd170038 R14: 00007fd1bd16ffa0 R15: 00007ffc449c1c78 [ 125.206475][ T4855] [ 125.217637][ T4855] memory: usage 8kB, limit 8kB, failcnt 40 [ 125.223550][ T4855] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 125.231316][ T4855] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 125.238554][ T4855] Memory cgroup stats for /syz1/test: [ 125.238709][ T4855] anon 0 [ 125.238709][ T4855] file 0 [ 125.238709][ T4855] kernel_stack 0 [ 125.238709][ T4855] pagetables 0 [ 125.238709][ T4855] percpu 0 [ 125.238709][ T4855] sock 0 [ 125.238709][ T4855] shmem 0 [ 125.238709][ T4855] file_mapped 0 [ 125.238709][ T4855] file_dirty 0 [ 125.238709][ T4855] file_writeback 0 [ 125.238709][ T4855] swapcached 0 [ 125.238709][ T4855] anon_thp 0 [ 125.238709][ T4855] file_thp 0 [ 125.238709][ T4855] shmem_thp 0 [ 125.238709][ T4855] inactive_anon 0 [ 125.238709][ T4855] active_anon 0 [ 125.238709][ T4855] inactive_file 0 [ 125.238709][ T4855] active_file 0 [ 125.238709][ T4855] unevictable 0 [ 125.238709][ T4855] slab_reclaimable 384 [ 125.238709][ T4855] slab_unreclaimable 3672 [ 125.238709][ T4855] slab 4056 [ 125.238709][ T4855] workingset_refault_anon 0 [ 125.238709][ T4855] workingset_refault_file 0 [ 125.238709][ T4855] workingset_activate_anon 0 [ 125.238709][ T4855] workingset_activate_file 0 [ 125.333981][ T4855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.181,pid=4854,uid=0 [ 125.350340][ T4855] Memory cgroup out of memory: Killed process 4854 (syz.1.181) total-vm:102376kB, anon-rss:1400kB, file-rss:21872kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 125.432729][ T4232] Bluetooth: hci0: command 0x2016 tx timeout [ 133.162111][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.168762][ T1422] ieee802154 phy1 wpan1: encryption failed: -22