last executing test programs: 1m50.549545226s ago: executing program 1 (id=238): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000005c0)='attr/prev\x00') 1m50.197378139s ago: executing program 1 (id=244): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="020000000012"}) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aa"], 0x0) 1m49.99081588s ago: executing program 1 (id=248): r0 = socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000200)) 1m49.903917068s ago: executing program 1 (id=250): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000003"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x403, &(0x7f0000000000)={0x0}) 1m49.135212793s ago: executing program 1 (id=254): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1m47.957018053s ago: executing program 1 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x28}, 0x94) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 1m47.358522092s ago: executing program 32 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x28}, 0x94) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 1m9.019824064s ago: executing program 2 (id=376): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000a000000000", @ANYRES32, @ANYBLOB], 0xf8}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x6a040000) socket$kcm(0x11, 0x2, 0x300) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2e080045008d780000000000119078000000000000000000001b59006490780200000003000000000000000002000000753904030405a024f0dd00000000000000000000000000000000009384bbeb3018ad591b661fe808b21b77694c875dfb1be5d2a0057a62022a1564a329d3a14a1d8c690000000000000000d3f83842dd0f1d8b8b05fb1a2d4c5f45f4d2888acb9657bac3e06c261be9fefc23f14f226cd475dec87f437319b696548e8af8dda5032af0"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m6.881826683s ago: executing program 2 (id=377): set_mempolicy(0x3, 0x0, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1m6.358632101s ago: executing program 2 (id=381): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000740)={0xe4a26f410ee22f79, 0x0, @ioapic={0xfffe1000, 0x1, 0x7, 0x1, 0x0, [{0xb0, 0x1b, 0x7, '\x00', 0xa}, {0x9, 0x10, 0xd, '\x00', 0xf8}, {0x5, 0x81, 0x4, '\x00', 0x5}, {0xfc, 0x6, 0x9}, {0xfc, 0x81, 0x6}, {0x4, 0x40, 0xac, '\x00', 0xf7}, {0x6, 0x1, 0x5, '\x00', 0xe0}, {0xb, 0x3, 0x81, '\x00', 0x2}, {0x2, 0x3, 0x6, '\x00', 0x1}, {0x0, 0x4, 0x4, '\x00', 0x5}, {0x1, 0x4, 0xff, '\x00', 0x4}, {0x4b, 0x8, 0x0, '\x00', 0x1}, {0xfb, 0xcd, 0x2, '\x00', 0x2}, {0x6, 0x1, 0xf7, '\x00', 0x2}, {0x89, 0x8, 0xc6, '\x00', 0x8}, {0x25, 0x8, 0x3, '\x00', 0xa}, {0x3, 0xe5, 0x5a, '\x00', 0x4}, {0x0, 0x1, 0x1c, '\x00', 0x3}, {0xc, 0x80, 0xfd, '\x00', 0x1}, {0xd0, 0x2, 0x6, '\x00', 0x5}, {0xff, 0x8, 0xa1}, {0x1, 0x4, 0xc4, '\x00', 0x4}, {0xc, 0x4d, 0x7, '\x00', 0x1}, {0x2, 0x4, 0x81, '\x00', 0x49}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x8000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f000038b000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m5.648808805s ago: executing program 2 (id=385): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x1) r2 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000) r5 = mmap$KVM_VCPU(&(0x7f0000cd1000/0x4000)=nil, r4, 0x2000007, 0x120172, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r6, @ANYRES16=r5, @ANYBLOB=',group_', @ANYRES32=r1, @ANYRES8=r5, @ANYRES16=r2]) read$FUSE(r6, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0xffffffffffffffbf, r7, {0x7, 0x2b, 0x0, 0x4f834c58, 0x1, 0x9, 0x7, 0xa15, 0x0, 0x0, 0x20, 0x2}}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x62) syz_fuse_handle_req(r6, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x2000, 0x2000, &(0x7f00009c4000/0x2000)=nil}) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1m5.284209475s ago: executing program 0 (id=388): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m5.063683335s ago: executing program 0 (id=389): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r4, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x84) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e22, 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r10 = getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r11 = socket(0xa, 0x3, 0x3a) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 1m5.063325715s ago: executing program 2 (id=390): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x14}]}, 0x24}}, 0x0) 1m4.902859913s ago: executing program 2 (id=391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x9, 0xfe, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f0000000280)=""/145, 0x91}, &(0x7f0000000340), 0x48}, 0x20) r9 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r9, &(0x7f0000000000)={0x2a, 0xffffffff, 0x4000}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 1m4.212442709s ago: executing program 0 (id=393): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 1m3.130238552s ago: executing program 0 (id=396): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x8}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300000d, 0x3) writev(r6, &(0x7f0000000680)=[{&(0x7f00000000c0)='d', 0x1}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8200, 0x102) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0x10000000}) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x33, 0x800) 1m2.535875412s ago: executing program 0 (id=399): socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0xfffffffc, 0x3}}]}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r3 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) write$eventfd(r3, &(0x7f0000000080)=0x430f, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}}, 0x20}}, 0x54) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6166994c681001000080046b4002c00000000a3069078ac1414bbac1414aa000000004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 1m2.317759351s ago: executing program 0 (id=400): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff024}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 49.057080737s ago: executing program 33 (id=391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x9, 0xfe, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f0000000280)=""/145, 0x91}, &(0x7f0000000340), 0x48}, 0x20) r9 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r9, &(0x7f0000000000)={0x2a, 0xffffffff, 0x4000}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) 47.261598542s ago: executing program 34 (id=400): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff024}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 31.461119282s ago: executing program 4 (id=476): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) readahead(0xffffffffffffffff, 0x77abdcce, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x4, 0x10, 0x4, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x104) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="080000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ae9d8cc000000000000020"], 0x5000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x8001}, 0x4) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syz_emit_vhci(&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x7c4) io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x9c16, 0x40, 0xfffffffe, 0x1d2}) 19.215981845s ago: executing program 4 (id=488): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x7fff}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r1, 0x0) listen(r0, 0x0) 19.179467351s ago: executing program 4 (id=489): openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000001040), 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r3 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r3, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17.476370948s ago: executing program 5 (id=493): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x1) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz1\x00', {0xfffc, 0xf07, 0x7, 0x4ba}, 0xd80e, [0x9, 0x10008000, 0xff, 0x3, 0x4, 0x5, 0x8, 0xffff898c, 0xffff8001, 0x3ff, 0x10001, 0xdcf51ce, 0x8000, 0x9, 0x8, 0x4, 0x23, 0x3, 0x7ff, 0x101, 0xfffffff7, 0x3, 0x7f, 0x7fff, 0x1, 0x3ff, 0xb5, 0x80, 0x1, 0x3, 0x8, 0x6, 0x3, 0x8, 0x1, 0x7, 0x9, 0xef3, 0x10, 0x6, 0xf8, 0x6, 0x80000000, 0x8, 0xfff, 0x9, 0x79, 0x0, 0x9, 0x45, 0x1b5, 0x5f9, 0x200, 0x6da, 0x200000, 0x5, 0x0, 0x320, 0x9, 0x0, 0x1, 0x6, 0x0, 0x7], [0x8, 0x6, 0x80, 0x2, 0xfd, 0x7, 0xa, 0x3, 0x7ffd, 0x1, 0x2, 0xffffff12, 0x2, 0x5, 0x7, 0x4, 0x1400000, 0xffffff7f, 0xc23b, 0x893, 0x901, 0x1, 0x9, 0x10001, 0x1, 0x0, 0x8, 0x7, 0x1, 0x5, 0x2, 0x9, 0x800, 0x7f, 0x400, 0x6, 0x10001, 0x9, 0x8, 0x1, 0x242, 0x5, 0x5, 0x2, 0x5, 0x1, 0xffffffff, 0x7, 0x9, 0x6, 0x80000000, 0x4, 0x1, 0x0, 0x194, 0x10000, 0x0, 0x1, 0x7f, 0x1, 0x10001, 0xb6, 0xe2d, 0x2], [0xfd, 0xffffcc50, 0x8, 0x6, 0x10001, 0x2, 0x15d, 0x2, 0x10, 0x10001, 0xcb1, 0x6, 0x4, 0x3ff, 0x2, 0x7ff, 0x8, 0xd8, 0xff, 0x200, 0x0, 0x0, 0x4, 0x8000, 0x61, 0x1d, 0x80, 0xf, 0x3, 0x2, 0x6, 0xfffffff8, 0xc78d, 0x5, 0xc88f, 0x6, 0x2084, 0x2, 0x3, 0xdc72, 0x7, 0x19, 0x8, 0x8, 0x9, 0x5, 0x3, 0x7, 0x101, 0x7f, 0x5, 0x7, 0xf, 0x4, 0x4, 0x6, 0x8, 0x200, 0x4, 0x7, 0x4, 0xfffffffc, 0xd05, 0x7], [0x6, 0x973f, 0x5, 0xffff, 0x71a6, 0x6, 0x2, 0x8000, 0x0, 0x7fffffff, 0xc968, 0xe0, 0x2a88, 0x9, 0x6, 0x40, 0x87, 0x2, 0x7, 0x8, 0x9, 0xffff, 0x7, 0x2, 0x10, 0x1ff, 0x8, 0x7b, 0x2, 0xff, 0x7, 0x80b7, 0x7, 0x10000, 0x1, 0x5, 0x5, 0x9, 0x6, 0x200, 0xfffffffc, 0x9988, 0x5, 0xd, 0x3, 0x3, 0x4, 0x80, 0x16b17357, 0x2, 0x5, 0x4, 0x4, 0x101, 0x20, 0x3, 0xfffff396, 0x2, 0x9, 0xac04, 0x80, 0x101, 0x6, 0x6]}, 0x45c) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x1, 0xfffffffc, 0x5f, 0x2, 0x211b}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r1, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 16.23881485s ago: executing program 3 (id=494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800ec90cf15070000fffeffff00000000090000009500000000000000"], 0x0, 0x0, 0x15, 0x0, 0x0, 0x11}, 0x94) socket(0x1, 0x803, 0x0) futex(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47f5, 0x6021, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=@newtfilter={0x18c0, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1894, 0x2, [@TCA_U32_POLICE={0x1824, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x1, 0x1000, 0x4, 0x9, 0x5, 0x1, 0x1, 0x9, 0x7fffffff, 0x3, 0x3, 0x10001, 0xd, 0x7, 0xe645, 0x2, 0x65d, 0x4, 0x9, 0x800, 0x0, 0x9ddb, 0x2, 0x9, 0x9, 0x66, 0x7, 0xcc9, 0x95e, 0x37, 0x5, 0xfffffff7, 0x2d0, 0x2, 0x7, 0x27ad, 0x401, 0x5, 0x2, 0x5, 0x6, 0xfffff523, 0x4, 0x1, 0x4, 0x8, 0x8, 0xff, 0x9000000, 0xff, 0x4, 0x1, 0x2, 0x6, 0x2, 0x4d, 0x9, 0x7f, 0xc86, 0xfffffffa, 0x8, 0x3, 0x9, 0x0, 0x2, 0x7c5, 0xffff, 0x6, 0xe, 0x3, 0x3, 0x9, 0x6, 0x4, 0xfffffffe, 0x8, 0x8, 0x7, 0x8, 0x30fd, 0x8, 0x3, 0x5, 0x80000001, 0x1, 0x1ff, 0x3, 0x40, 0x101, 0x3, 0x1000, 0x4, 0xffffffff, 0x3, 0x8, 0xfb, 0x81, 0xa, 0x760b33bb, 0xf3, 0x6, 0x5, 0x3, 0xffffff01, 0x2, 0x8, 0x4, 0x10, 0x9, 0xf, 0x9, 0xf, 0x0, 0x7, 0x2000000, 0x7, 0x8001, 0x2, 0x7fff, 0x4, 0x1e5, 0x9, 0x4, 0x8, 0xbe64, 0x7f, 0x3, 0xe000000, 0x0, 0x7, 0x3, 0x6, 0x7, 0x10001, 0x2, 0x7ff, 0xfffffffd, 0x9, 0x0, 0xa, 0xf4d8, 0x3, 0x2, 0xfffffff7, 0x80, 0xaa95, 0x8, 0x80, 0x80000001, 0x4, 0xe11b, 0x5, 0x2, 0x1, 0x4, 0x1, 0x40, 0x822a, 0x3, 0x40, 0x2, 0x9, 0x9, 0x401, 0x7, 0xffffffff, 0xeb, 0x8, 0xb14, 0xc11, 0x6, 0x1, 0x0, 0x463, 0x10001, 0x81, 0x3, 0x7, 0x101, 0x7ff, 0xa8f1, 0x2, 0x8, 0x2, 0x5ef, 0x10000000, 0x10, 0x5, 0x0, 0xe, 0x9, 0x10001, 0x2, 0x1, 0x4bde748e, 0x2, 0x8001, 0x10000, 0x4, 0xfe, 0xfffffffe, 0x5, 0xa89ab600, 0xfffffffe, 0x1, 0x7fff, 0x4c3, 0x4, 0x6, 0xfffffffb, 0x5, 0x5, 0xe, 0xc4c, 0x9, 0x2, 0x2, 0x4, 0x5, 0xa, 0x3, 0x9, 0x81, 0xffffffff, 0x518b, 0x0, 0x24b8, 0x51ea260a, 0x8000, 0x2, 0x4, 0x7, 0x80000001, 0xfffffff8, 0xd, 0x0, 0x8, 0x4, 0x4, 0xfffffffa, 0x8, 0x4, 0x1, 0x9, 0x7, 0x20000000, 0x4, 0x5, 0x5, 0x6, 0x0, 0xa9, 0x46c, 0xffff8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x80000000, 0x5, 0xffffffff, 0x101, 0x80000001, 0x7, 0x8, 0x38b, 0x10, 0xcb86, 0x5, 0x1a2, 0x7a4, 0x3, 0xffffffff, 0x19, 0x8, 0xf27, 0x0, 0x7007, 0x7, 0x3, 0x8, 0x2, 0x3ff, 0xfffffffe, 0x7, 0xa, 0x0, 0xc, 0x4, 0x3, 0xffffff7f, 0x7, 0x3, 0x4, 0x8, 0x0, 0x3, 0x7f, 0x8, 0xc, 0x7, 0x0, 0x0, 0x9, 0x8, 0x3, 0x6b01, 0xa, 0x5, 0x6, 0x81, 0x67f, 0x0, 0xa8, 0xf, 0x10, 0xfffffff9, 0x7, 0x0, 0x6, 0x3, 0x1ff, 0x8, 0xb, 0xba04, 0x3, 0x5, 0x276f, 0x68d8, 0xa1, 0x6, 0x173a, 0x9, 0x100, 0xfffff800, 0x8b, 0x3, 0x80000000, 0x7, 0x2, 0x4, 0x4f, 0xd66, 0xa, 0x7fff, 0x1, 0x9, 0x0, 0x10, 0x2, 0xb50a, 0x5, 0xfffffff9, 0x985c, 0x3, 0x82, 0x101, 0x6, 0x3, 0x3ff, 0x0, 0x7fffffff, 0x1, 0x1, 0x401, 0x9, 0x0, 0xd, 0x3, 0x1c0, 0x20, 0x10000, 0x877, 0x7f, 0x4, 0x7, 0x0, 0x3, 0x3, 0x1000, 0x7, 0xffff7fff, 0x7, 0xfffffff7, 0xe3, 0x8, 0x8, 0xffffffc0, 0x4, 0x2, 0x6, 0x5, 0x6, 0x6, 0x4, 0x8, 0x6, 0x9, 0x3, 0xffffc8f5, 0x9, 0x7ff, 0x6, 0xe, 0x4, 0x8, 0x8ea, 0x5, 0x4, 0x5, 0x6, 0x10, 0x7, 0x69c00000, 0x0, 0x0, 0x3, 0x401, 0x60, 0xe, 0x3, 0x6, 0x1, 0xc, 0x3, 0x5d, 0x1, 0x9, 0x5, 0x4, 0x5, 0xfffffffd, 0x5, 0xa, 0x8, 0x9, 0xab7, 0x101, 0xfffffff8, 0x6, 0xb2, 0x9, 0xfffffeff, 0x6, 0x101, 0x48, 0xf0, 0x9, 0xc, 0x8001, 0x8, 0x800, 0x8, 0xffff0000, 0x7, 0xcc5, 0xddc7, 0x6, 0x3, 0x9, 0x10000, 0x4, 0x1, 0x9, 0x76f1b7e9, 0x0, 0x10000, 0x2, 0xa, 0xd, 0x6, 0x5, 0xfffffffe, 0xb47, 0x7, 0x99, 0x7eb0a6b2, 0xaa23, 0x400, 0x0, 0x0, 0x7, 0x4, 0x4, 0xb, 0x40, 0x4b04, 0x200, 0x376594a4, 0x6, 0xe5e6, 0x6, 0x2, 0x0, 0x54, 0x6, 0xdb7e, 0x8, 0x6, 0xafa, 0x8000, 0x2, 0xa514, 0x1000, 0x81, 0x9, 0x6, 0x20ae, 0xd, 0x7, 0x0, 0x835, 0xfffff85c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x6, 0x6, 0x101, 0x58, 0x5, 0x5, 0x0, 0xc, 0x3, 0xd40, 0x100, 0x7, 0xa, 0xfffffffd, 0x4, 0x4, 0xfffffffb, 0x3ff, 0xfffffbff, 0x7, 0xba8b, 0x79, 0xffffffff, 0x3, 0x0, 0x2, 0x6, 0x4, 0x7, 0xf9, 0x6, 0x7f, 0xe, 0x9, 0x0, 0x6, 0x5, 0x80000001, 0x9, 0x36c, 0x4, 0x1, 0x70a, 0x7, 0x7, 0x6, 0x8, 0x3ff, 0x3, 0xfffffff6, 0x345, 0x9, 0x0, 0x7c3, 0x8, 0x407b, 0x400, 0xc4, 0x100, 0xe, 0x3, 0x9, 0x3, 0x5, 0x2, 0x9, 0x80000001, 0x200, 0x1, 0x1, 0x0, 0x796, 0x10, 0x9, 0x4, 0x8001, 0x6, 0x9, 0x400, 0xe5, 0xb7f8, 0x5, 0xd, 0x3, 0x3, 0xfffffffe, 0x1ff, 0x5, 0x34a53ca3, 0x2, 0x5, 0x3, 0x2000, 0x7, 0x37, 0x1b, 0x2, 0xffff, 0x4, 0x4, 0x8, 0x0, 0x80000000, 0x7, 0x10, 0x7fff, 0x401, 0x1, 0xb4df, 0x2, 0xfffff000, 0x6, 0x5, 0xa1a4, 0x6, 0x6, 0x9, 0x3, 0x0, 0x5, 0x1, 0xc, 0x8, 0x8, 0x3, 0x5, 0x80000000, 0x4, 0x9, 0x401, 0x1, 0x5e05, 0x5, 0x81, 0x8, 0x8, 0x6, 0x6, 0xfffffffb, 0x2, 0x58a, 0x19ec0, 0x6, 0xb, 0xfffffffe, 0x7fffffff, 0x2, 0xf6, 0x8, 0x7, 0x400, 0x4a3f0afd, 0x8666, 0x81, 0x8, 0x4, 0x8, 0x6, 0x9, 0x7, 0x9, 0x69, 0x7fff, 0x2, 0x8, 0x3, 0x1, 0x10000, 0x81, 0x5, 0x81, 0xfffffffe, 0x2, 0x4, 0x9, 0x2, 0x7, 0x3, 0x2, 0xfffffffd, 0x88, 0x1000, 0xffffffff, 0xc3, 0x7, 0x3, 0x9, 0x9, 0x0, 0x10, 0x9354, 0x4, 0x7, 0x4, 0xffff0000, 0x8, 0x2, 0x2, 0x1f04, 0x8, 0x9, 0x8, 0x5, 0x7ff, 0x0, 0x40, 0x8, 0x2, 0x1ff, 0x1, 0x0, 0x800, 0x7, 0x8000, 0x1, 0x7, 0xa, 0x1b20, 0x1, 0x7, 0x8, 0x9, 0x9, 0x8, 0x8, 0x2, 0x5, 0x9b, 0x761d, 0x7, 0x10000, 0x5, 0xd, 0xffff7fff, 0xffffff00, 0xd2c00, 0x4, 0x9, 0x2d72, 0x9b, 0x7ff, 0x2, 0xfffffffa, 0x4, 0x5, 0x0, 0x23, 0x2, 0x21fc, 0x1000, 0x400, 0x100, 0x3, 0x5, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xaff3, 0xffffec83, 0x58c, 0x7, 0x1, 0x0, 0x3, 0x7236, 0x4, 0x0, 0xbc9, 0x0, 0x4, 0x5, 0xffff, 0x5, 0x3, 0x3, 0xfff, 0x9, 0x6, 0x8120, 0x11f82c0c, 0x1, 0x3, 0x8, 0x400, 0x80000001, 0x4, 0x6, 0x862, 0x1, 0xff, 0xc0000, 0x8, 0x6, 0xf, 0x0, 0x6, 0x3, 0x5, 0x9, 0x7, 0xfffffffc, 0x8, 0x49, 0xbbc, 0x1bc80a19, 0x7ff, 0x7, 0x400, 0xe7a9, 0x0, 0x3, 0x2, 0x7, 0x8, 0x7, 0x4905, 0x79e, 0x0, 0x9, 0xfffffffb, 0x3, 0x892, 0x0, 0x0, 0x10, 0x3, 0x2, 0x8, 0x9, 0x3, 0x8, 0x6, 0xb, 0x8, 0x2, 0x7ff, 0x2, 0x6, 0x5, 0x8, 0x2, 0x1000, 0x9, 0x422, 0xe, 0x6, 0x401, 0x6, 0xfffff001, 0x6, 0x4, 0x10000, 0x7, 0x101, 0x1, 0x3, 0x9, 0x9, 0x712b, 0x7, 0x7, 0x3, 0xfffffeff, 0x1, 0xd1, 0xeef, 0x100, 0x100, 0x7, 0x9, 0xd11b, 0xfffffe01, 0x8, 0x92, 0x8, 0xfffffffb, 0x1, 0x5, 0x4, 0x39, 0x8, 0x8, 0x4, 0x1, 0xc000, 0x81, 0x0, 0xa, 0x9, 0xf232, 0xb78, 0xfffffff9, 0x2, 0x1ca, 0x225, 0x3e, 0x1, 0x800, 0x7, 0x4, 0x8, 0x7, 0x7, 0x200, 0x4, 0x81, 0xcd, 0x7, 0x10000, 0x10000, 0xffff6ab2, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x2, 0x61fc, 0x5, 0x7, 0x100, 0x3, 0x8, 0x3, 0x8, 0x0, 0x203, 0x200, 0x8000, 0x8, 0x1, 0x9, 0x6, 0x9, 0x7, 0x48b, 0x8, 0xde, 0x4, 0x5, 0x2, 0x6, 0x1, 0x1a4, 0x6, 0x56c, 0x8, 0xe, 0x8, 0x2, 0x2, 0x30, 0x3, 0x4, 0x3, 0x7a, 0xe, 0x7d, 0x1, 0x8001, 0x71c, 0xe, 0x85d0, 0x0, 0x0, 0xfffffff9, 0x9, 0x2, 0x8, 0x4, 0x1, 0x0, 0x12b, 0x0, 0x3, 0x400, 0xa, 0x1, 0x3, 0x6, 0x315636ce, 0x8000, 0x1, 0x9, 0x1, 0x1, 0x6, 0xb8b2, 0x3ff, 0x7, 0x4, 0x5, 0xfffffffe, 0x5, 0x2, 0x2, 0x4000, 0x1, 0x4, 0x0, 0xffff, 0x40, 0x7, 0x2, 0x1, 0x100, 0xffff0000, 0xffffffff, 0xf75, 0x4, 0x7, 0x0, 0xf275]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x10000, 0x5, 0x1800, 0x8, 0x7, 0x7, 0x3, 0x80000000, 0x8, 0x800, 0x2f, 0x7, 0x400, 0x7fffffff, 0x1f39, 0xee03, 0x10001, 0xffffffd4, 0x7, 0x0, 0x101, 0x1, 0x0, 0xfffffb66, 0xca7d, 0x0, 0x1, 0x7fff, 0x5, 0x0, 0x8001, 0xfffffff3, 0x9, 0x5, 0x48c, 0x6, 0x5, 0x9, 0xe, 0xaff, 0x5, 0x2, 0x1000, 0x2, 0x26fb, 0x800, 0x4, 0x8b4, 0x3, 0x7, 0x7, 0x10001, 0x4, 0x1, 0x4, 0xd, 0x2, 0x4, 0xe8, 0xf9eb, 0x100, 0x7fffffff, 0x5, 0x100, 0x7, 0xfff, 0x3, 0x5, 0x8, 0x101, 0x3, 0xf, 0x3, 0x4, 0x7ed, 0x0, 0x40, 0x9, 0xa238, 0x4, 0x100, 0x3, 0x9, 0x7, 0x7fff, 0x10, 0x3ff, 0x8, 0x3, 0x4, 0x6, 0xfff, 0x7, 0x2, 0x3, 0xaacb, 0x7, 0x3, 0x9e78, 0x0, 0x2, 0x6, 0x400, 0xa9ab, 0x5, 0x3ce, 0xc0c, 0x0, 0x1, 0x7, 0x4, 0x1, 0x81, 0x3, 0x6, 0x200, 0x7f, 0xff, 0x4, 0x7, 0x6, 0x8001, 0xc, 0x3, 0xaaf9, 0x2, 0x3, 0x80000000, 0x5, 0x9, 0x5680, 0x6, 0x6, 0x501, 0xd, 0x5, 0xac4c, 0x6, 0xb2, 0x1, 0x3, 0x8, 0x4, 0x1, 0x6, 0x2, 0x3ff, 0x3, 0x5, 0x7, 0x7, 0x3, 0x2, 0x3e01, 0x80, 0xfffffff7, 0x7fff, 0x9, 0x6d3, 0x400000, 0x0, 0xfffffffa, 0x349c, 0x80, 0x6, 0x6, 0x40, 0x8, 0x316, 0x9, 0x9, 0xd272, 0x476, 0x7ff, 0x101, 0x3ff, 0x71a2, 0x0, 0x5, 0x2, 0x5, 0xb, 0x7f2c, 0x9, 0x78dd, 0x40, 0x1, 0x8, 0x3b, 0x7fffffff, 0x3, 0x8000, 0xd, 0x7, 0xffff, 0x9, 0x6, 0x3, 0x7ff, 0x1, 0x7, 0x9, 0x6, 0x1, 0xf, 0x5, 0x3ff, 0x6, 0x9, 0x401, 0x7fff, 0x6b1, 0x1000, 0x7, 0x5, 0x6, 0x81, 0x1000, 0xffffffff, 0xfffffffb, 0x704cb4f5, 0x8c0, 0x8, 0x0, 0x1, 0x80009298, 0x8, 0x80, 0x10, 0x10, 0x2, 0x9, 0x3, 0x9, 0x4, 0x0, 0x100, 0xfffffff7, 0x0, 0xfffffff3, 0x0, 0x6, 0x6073, 0x8, 0xd209, 0xffffff00, 0x7, 0x9, 0x0, 0x5, 0x8, 0xffffff59, 0x80000000, 0x7fffffff, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0xb, 0x100000, 0x3, 0xdaee, 0x4, 0x769, 0x8, 0x5, 0xffffffff, 0x2, 0x9, 0x1, 0x2f1a, 0x7fffffff, 0x2, 0x8, 0x8000, 0x9, 0x9, 0x7fb, 0x1000, 0xb, 0x4, 0x9, 0x9, 0x80000000, 0x1, 0xcf, 0x3, 0x1, 0xffffffff, 0x3, 0x7, 0x4, 0x6, 0x1, 0x6, 0x3, 0xffffffbe, 0x7, 0x1, 0xd0, 0xd24, 0xfffffffa, 0x2, 0xa, 0x9, 0xe7f, 0x10, 0x81, 0x2, 0x90f, 0xa, 0x1000, 0x3, 0x3, 0x7, 0x9, 0x8, 0x800, 0xf, 0x7, 0x4, 0x9ac7, 0x0, 0x2, 0x8, 0x100, 0x6, 0x1, 0x3, 0x80000001, 0xbb9, 0x9, 0xdff5, 0xfa05, 0x2, 0x80000001, 0x358, 0xffff, 0x9, 0x4cea, 0x5, 0x10, 0x9, 0x7, 0xb, 0xa, 0x90000000, 0x26445006, 0x93, 0x8, 0xe8c, 0x8, 0x10001, 0x1, 0x7, 0x400, 0x9, 0x8, 0x3, 0x3, 0xa, 0x1, 0x401, 0x8000, 0x1, 0x1000, 0x9, 0x1, 0x0, 0x80000000, 0xfffffffa, 0xfffff800, 0x9, 0x8, 0x10000, 0x6, 0x4, 0x0, 0x9, 0x7fffffff, 0x8, 0x8001, 0x311f, 0x0, 0x4, 0xffffffff, 0x3458, 0x3, 0xa, 0x7fffffff, 0xf, 0x2, 0x8e, 0x2, 0x1b80000, 0x7, 0x2, 0x6, 0x31, 0x7, 0x7fffffff, 0x80, 0x0, 0x1ff, 0x7e54, 0xffffffff, 0x4, 0x5, 0x8, 0x3, 0xfffffeff, 0x33, 0x0, 0x101, 0x8, 0x10000, 0x2, 0xe0d, 0xfffffff7, 0x5, 0x81, 0x80, 0x3, 0x2, 0x0, 0x4, 0x5, 0xd, 0x2, 0x1ff, 0x9, 0x6, 0xfffffffc, 0x1, 0xb, 0x3, 0x7fff, 0x3ff, 0x5, 0x7, 0x4, 0x9, 0xfffffffd, 0x6, 0x10001, 0xfffffffb, 0x5, 0x7ff, 0x502a, 0x6, 0x7f, 0x101, 0xc4847a7, 0x515, 0x3, 0x3, 0x9, 0x1000, 0x2, 0x100, 0x5, 0x9, 0xfffffff7, 0xdd, 0x4, 0x3, 0x7d9, 0x2b0071a3, 0x7, 0xc0a6, 0x3, 0x80, 0x7fff, 0x0, 0xfffffff9, 0x1, 0x10001, 0x4, 0xfffffff3, 0x9, 0x4, 0xfffffbff, 0x400, 0xa, 0x0, 0x7ff, 0x2b, 0xe2, 0x4, 0x2, 0x3, 0xfffffff6, 0x8, 0x40, 0x7, 0x0, 0x8, 0x6, 0x2, 0x0, 0x0, 0xf, 0x96, 0x321f, 0x1, 0x9b, 0x7, 0x0, 0x800, 0x2, 0x1000, 0x70]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10000}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9b}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xc}}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x3, 0x3, 0x80000001, {0x1, 0x4162deb03763356a, 0x800, 0x7, 0x2c, 0x80000000}, {0x7, 0x0, 0x4, 0x4, 0x8, 0xc}, 0x9, 0x4, 0x5}}]}, @TCA_U32_SEL={0x14, 0x5, {0x9, 0xc, 0x3, 0xfffb, 0xa, 0x8000, 0x9fcd, 0x9}}]}}]}, 0x18c0}}, 0x24040084) socket$nl_netfilter(0x10, 0x3, 0xc) 16.027876911s ago: executing program 5 (id=496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.530145794s ago: executing program 5 (id=500): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x7, "fbac5d98d484dd651f10d5f9ca6445a7b41fe4936ed31bed9f9c4a6cee6c6f02", 0x1, 0x1000, 0x1, 0xffffffff, 0x10, 0x2, 0x1, 0x9}) 15.187186937s ago: executing program 5 (id=502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800ec90cf15070000fffeffff00000000090000009500000000000000"], 0x0, 0x0, 0x15, 0x0, 0x0, 0x11}, 0x94) socket(0x1, 0x803, 0x0) futex(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47f5, 0x6021, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=@newtfilter={0x1eb0, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1e84, 0x2, [@TCA_U32_POLICE={0x1824, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x1, 0x1000, 0x4, 0x9, 0x5, 0x1, 0x1, 0x9, 0x7fffffff, 0x3, 0x3, 0x10001, 0xd, 0x7, 0xe645, 0x2, 0x65d, 0x4, 0x9, 0x800, 0x0, 0x9ddb, 0x2, 0x9, 0x9, 0x66, 0x7, 0xcc9, 0x95e, 0x37, 0x5, 0xfffffff7, 0x2d0, 0x2, 0x7, 0x27ad, 0x401, 0x5, 0x2, 0x5, 0x6, 0xfffff523, 0x4, 0x1, 0x4, 0x8, 0x8, 0xff, 0x9000000, 0xff, 0x4, 0x1, 0x2, 0x6, 0x2, 0x4d, 0x9, 0x7f, 0xc86, 0xfffffffa, 0x8, 0x3, 0x9, 0x0, 0x2, 0x7c5, 0xffff, 0x6, 0xe, 0x3, 0x3, 0x9, 0x6, 0x4, 0xfffffffe, 0x8, 0x8, 0x7, 0x8, 0x30fd, 0x8, 0x3, 0x5, 0x80000001, 0x1, 0x1ff, 0x3, 0x40, 0x101, 0x3, 0x1000, 0x4, 0xffffffff, 0x3, 0x8, 0xfb, 0x81, 0xa, 0x760b33bb, 0xf3, 0x6, 0x5, 0x3, 0xffffff01, 0x2, 0x8, 0x4, 0x10, 0x9, 0xf, 0x9, 0xf, 0x0, 0x7, 0x2000000, 0x7, 0x8001, 0x2, 0x7fff, 0x4, 0x1e5, 0x9, 0x4, 0x8, 0xbe64, 0x7f, 0x3, 0xe000000, 0x0, 0x7, 0x3, 0x6, 0x7, 0x10001, 0x2, 0x7ff, 0xfffffffd, 0x9, 0x0, 0xa, 0xf4d8, 0x3, 0x2, 0xfffffff7, 0x80, 0xaa95, 0x8, 0x80, 0x80000001, 0x4, 0xe11b, 0x5, 0x2, 0x1, 0x4, 0x1, 0x40, 0x822a, 0x3, 0x40, 0x2, 0x9, 0x9, 0x401, 0x7, 0xffffffff, 0xeb, 0x8, 0xb14, 0xc11, 0x6, 0x1, 0x0, 0x463, 0x10001, 0x81, 0x3, 0x7, 0x101, 0x7ff, 0xa8f1, 0x2, 0x8, 0x2, 0x5ef, 0x10000000, 0x10, 0x5, 0x0, 0xe, 0x9, 0x10001, 0x2, 0x1, 0x4bde748e, 0x2, 0x8001, 0x10000, 0x4, 0xfe, 0xfffffffe, 0x5, 0xa89ab600, 0xfffffffe, 0x1, 0x7fff, 0x4c3, 0x4, 0x6, 0xfffffffb, 0x5, 0x5, 0xe, 0xc4c, 0x9, 0x2, 0x2, 0x4, 0x5, 0xa, 0x3, 0x9, 0x81, 0xffffffff, 0x518b, 0x0, 0x24b8, 0x51ea260a, 0x8000, 0x2, 0x4, 0x7, 0x80000001, 0xfffffff8, 0xd, 0x0, 0x8, 0x4, 0x4, 0xfffffffa, 0x8, 0x4, 0x1, 0x9, 0x7, 0x20000000, 0x4, 0x5, 0x5, 0x6, 0x0, 0xa9, 0x46c, 0xffff8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x80000000, 0x5, 0xffffffff, 0x101, 0x80000001, 0x7, 0x8, 0x38b, 0x10, 0xcb86, 0x5, 0x1a2, 0x7a4, 0x3, 0xffffffff, 0x19, 0x8, 0xf27, 0x0, 0x7007, 0x7, 0x3, 0x8, 0x2, 0x3ff, 0xfffffffe, 0x7, 0xa, 0x0, 0xc, 0x4, 0x3, 0xffffff7f, 0x7, 0x3, 0x4, 0x8, 0x0, 0x3, 0x7f, 0x8, 0xc, 0x7, 0x0, 0x0, 0x9, 0x8, 0x3, 0x6b01, 0xa, 0x5, 0x6, 0x81, 0x67f, 0x0, 0xa8, 0xf, 0x10, 0xfffffff9, 0x7, 0x0, 0x6, 0x3, 0x1ff, 0x8, 0xb, 0xba04, 0x3, 0x5, 0x276f, 0x68d8, 0xa1, 0x6, 0x173a, 0x9, 0x100, 0xfffff800, 0x8b, 0x3, 0x80000000, 0x7, 0x2, 0x4, 0x4f, 0xd66, 0xa, 0x7fff, 0x1, 0x9, 0x0, 0x10, 0x2, 0xb50a, 0x5, 0xfffffff9, 0x985c, 0x3, 0x82, 0x101, 0x6, 0x3, 0x3ff, 0x0, 0x7fffffff, 0x1, 0x1, 0x401, 0x9, 0x0, 0xd, 0x3, 0x1c0, 0x20, 0x10000, 0x877, 0x7f, 0x4, 0x7, 0x0, 0x3, 0x3, 0x1000, 0x7, 0xffff7fff, 0x7, 0xfffffff7, 0xe3, 0x8, 0x8, 0xffffffc0, 0x4, 0x2, 0x6, 0x5, 0x6, 0x6, 0x4, 0x8, 0x6, 0x9, 0x3, 0xffffc8f5, 0x9, 0x7ff, 0x6, 0xe, 0x4, 0x8, 0x8ea, 0x5, 0x4, 0x5, 0x6, 0x10, 0x7, 0x69c00000, 0x0, 0x0, 0x3, 0x401, 0x60, 0xe, 0x3, 0x6, 0x1, 0xc, 0x3, 0x5d, 0x1, 0x9, 0x5, 0x4, 0x5, 0xfffffffd, 0x5, 0xa, 0x8, 0x9, 0xab7, 0x101, 0xfffffff8, 0x6, 0xb2, 0x9, 0xfffffeff, 0x6, 0x101, 0x48, 0xf0, 0x9, 0xc, 0x8001, 0x8, 0x800, 0x8, 0xffff0000, 0x7, 0xcc5, 0xddc7, 0x6, 0x3, 0x9, 0x10000, 0x4, 0x1, 0x9, 0x76f1b7e9, 0x0, 0x10000, 0x2, 0xa, 0xd, 0x6, 0x5, 0xfffffffe, 0xb47, 0x7, 0x99, 0x7eb0a6b2, 0xaa23, 0x400, 0x0, 0x0, 0x7, 0x4, 0x4, 0xb, 0x40, 0x4b04, 0x200, 0x376594a4, 0x6, 0xe5e6, 0x6, 0x2, 0x0, 0x54, 0x6, 0xdb7e, 0x8, 0x6, 0xafa, 0x8000, 0x2, 0xa514, 0x1000, 0x81, 0x9, 0x6, 0x20ae, 0xd, 0x7, 0x0, 0x835, 0xfffff85c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x6, 0x6, 0x101, 0x58, 0x5, 0x5, 0x0, 0xc, 0x3, 0xd40, 0x100, 0x7, 0xa, 0xfffffffd, 0x4, 0x4, 0xfffffffb, 0x3ff, 0xfffffbff, 0x7, 0xba8b, 0x79, 0xffffffff, 0x3, 0x0, 0x2, 0x6, 0x4, 0x7, 0xf9, 0x6, 0x7f, 0xe, 0x9, 0x0, 0x6, 0x5, 0x80000001, 0x9, 0x36c, 0x4, 0x1, 0x70a, 0x7, 0x7, 0x6, 0x8, 0x3ff, 0x3, 0xfffffff6, 0x345, 0x9, 0x0, 0x7c3, 0x8, 0x407b, 0x400, 0xc4, 0x100, 0xe, 0x3, 0x9, 0x3, 0x5, 0x2, 0x9, 0x80000001, 0x200, 0x1, 0x1, 0x0, 0x796, 0x10, 0x9, 0x4, 0x8001, 0x6, 0x9, 0x400, 0xe5, 0xb7f8, 0x5, 0xd, 0x3, 0x3, 0xfffffffe, 0x1ff, 0x5, 0x34a53ca3, 0x2, 0x5, 0x3, 0x2000, 0x7, 0x37, 0x1b, 0x2, 0xffff, 0x4, 0x4, 0x8, 0x0, 0x80000000, 0x7, 0x10, 0x7fff, 0x401, 0x1, 0xb4df, 0x2, 0xfffff000, 0x6, 0x5, 0xa1a4, 0x6, 0x6, 0x9, 0x3, 0x0, 0x5, 0x1, 0xc, 0x8, 0x8, 0x3, 0x5, 0x80000000, 0x4, 0x9, 0x401, 0x1, 0x5e05, 0x5, 0x81, 0x8, 0x8, 0x6, 0x6, 0xfffffffb, 0x2, 0x58a, 0x19ec0, 0x6, 0xb, 0xfffffffe, 0x7fffffff, 0x2, 0xf6, 0x8, 0x7, 0x400, 0x4a3f0afd, 0x8666, 0x81, 0x8, 0x4, 0x8, 0x6, 0x9, 0x7, 0x9, 0x69, 0x7fff, 0x2, 0x8, 0x3, 0x1, 0x10000, 0x81, 0x5, 0x81, 0xfffffffe, 0x2, 0x4, 0x9, 0x2, 0x7, 0x3, 0x2, 0xfffffffd, 0x88, 0x1000, 0xffffffff, 0xc3, 0x7, 0x3, 0x9, 0x9, 0x0, 0x10, 0x9354, 0x4, 0x7, 0x4, 0xffff0000, 0x8, 0x2, 0x2, 0x1f04, 0x8, 0x9, 0x8, 0x5, 0x7ff, 0x0, 0x40, 0x8, 0x2, 0x1ff, 0x1, 0x0, 0x800, 0x7, 0x8000, 0x1, 0x7, 0xa, 0x1b20, 0x1, 0x7, 0x8, 0x9, 0x9, 0x8, 0x8, 0x2, 0x5, 0x9b, 0x761d, 0x7, 0x10000, 0x5, 0xd, 0xffff7fff, 0xffffff00, 0xd2c00, 0x4, 0x9, 0x2d72, 0x9b, 0x7ff, 0x2, 0xfffffffa, 0x4, 0x5, 0x0, 0x23, 0x2, 0x21fc, 0x1000, 0x400, 0x100, 0x3, 0x5, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xaff3, 0xffffec83, 0x58c, 0x7, 0x1, 0x0, 0x3, 0x7236, 0x4, 0x0, 0xbc9, 0x0, 0x4, 0x5, 0xffff, 0x5, 0x3, 0x3, 0xfff, 0x9, 0x6, 0x8120, 0x11f82c0c, 0x1, 0x3, 0x8, 0x400, 0x80000001, 0x4, 0x6, 0x862, 0x1, 0xff, 0xc0000, 0x8, 0x6, 0xf, 0x0, 0x6, 0x3, 0x5, 0x9, 0x7, 0xfffffffc, 0x8, 0x49, 0xbbc, 0x1bc80a19, 0x7ff, 0x7, 0x400, 0xe7a9, 0x0, 0x3, 0x2, 0x7, 0x8, 0x7, 0x4905, 0x79e, 0x0, 0x9, 0xfffffffb, 0x3, 0x892, 0x0, 0x0, 0x10, 0x3, 0x2, 0x8, 0x9, 0x3, 0x8, 0x6, 0xb, 0x8, 0x2, 0x7ff, 0x2, 0x6, 0x5, 0x8, 0x2, 0x1000, 0x9, 0x422, 0xe, 0x6, 0x401, 0x6, 0xfffff001, 0x6, 0x4, 0x10000, 0x7, 0x101, 0x1, 0x3, 0x9, 0x9, 0x712b, 0x7, 0x7, 0x3, 0xfffffeff, 0x1, 0xd1, 0xeef, 0x100, 0x100, 0x7, 0x9, 0xd11b, 0xfffffe01, 0x8, 0x92, 0x8, 0xfffffffb, 0x1, 0x5, 0x4, 0x39, 0x8, 0x8, 0x4, 0x1, 0xc000, 0x81, 0x0, 0xa, 0x9, 0xf232, 0xb78, 0xfffffff9, 0x2, 0x1ca, 0x225, 0x3e, 0x1, 0x800, 0x7, 0x4, 0x8, 0x7, 0x7, 0x200, 0x4, 0x81, 0xcd, 0x7, 0x10000, 0x10000, 0xffff6ab2, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x2, 0x61fc, 0x5, 0x7, 0x100, 0x3, 0x8, 0x3, 0x8, 0x0, 0x203, 0x200, 0x8000, 0x8, 0x1, 0x9, 0x6, 0x9, 0x7, 0x48b, 0x8, 0xde, 0x4, 0x5, 0x2, 0x6, 0x1, 0x1a4, 0x6, 0x56c, 0x8, 0xe, 0x8, 0x2, 0x2, 0x30, 0x3, 0x4, 0x3, 0x7a, 0xe, 0x7d, 0x1, 0x8001, 0x71c, 0xe, 0x85d0, 0x0, 0x0, 0xfffffff9, 0x9, 0x2, 0x8, 0x4, 0x1, 0x0, 0x12b, 0x0, 0x3, 0x400, 0xa, 0x1, 0x3, 0x6, 0x315636ce, 0x8000, 0x1, 0x9, 0x1, 0x1, 0x6, 0xb8b2, 0x3ff, 0x7, 0x4, 0x5, 0xfffffffe, 0x5, 0x2, 0x2, 0x4000, 0x1, 0x4, 0x0, 0xffff, 0x40, 0x7, 0x2, 0x1, 0x100, 0xffff0000, 0xffffffff, 0xf75, 0x4, 0x7, 0x0, 0xf275]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x10000, 0x5, 0x1800, 0x8, 0x7, 0x7, 0x3, 0x80000000, 0x8, 0x800, 0x2f, 0x7, 0x400, 0x7fffffff, 0x1f39, 0xee03, 0x10001, 0xffffffd4, 0x7, 0x0, 0x101, 0x1, 0x0, 0xfffffb66, 0xca7d, 0x0, 0x1, 0x7fff, 0x5, 0x0, 0x8001, 0xfffffff3, 0x9, 0x5, 0x48c, 0x6, 0x5, 0x9, 0xe, 0xaff, 0x5, 0x2, 0x1000, 0x2, 0x26fb, 0x800, 0x4, 0x8b4, 0x3, 0x7, 0x7, 0x10001, 0x4, 0x1, 0x4, 0xd, 0x2, 0x4, 0xe8, 0xf9eb, 0x100, 0x7fffffff, 0x5, 0x100, 0x7, 0xfff, 0x3, 0x5, 0x8, 0x101, 0x3, 0xf, 0x3, 0x4, 0x7ed, 0x0, 0x40, 0x9, 0xa238, 0x4, 0x100, 0x3, 0x9, 0x7, 0x7fff, 0x10, 0x3ff, 0x8, 0x3, 0x4, 0x6, 0xfff, 0x7, 0x2, 0x3, 0xaacb, 0x7, 0x3, 0x9e78, 0x0, 0x2, 0x6, 0x400, 0xa9ab, 0x5, 0x3ce, 0xc0c, 0x0, 0x1, 0x7, 0x4, 0x1, 0x81, 0x3, 0x6, 0x200, 0x7f, 0xff, 0x4, 0x7, 0x6, 0x8001, 0xc, 0x3, 0xaaf9, 0x2, 0x3, 0x80000000, 0x5, 0x9, 0x5680, 0x6, 0x6, 0x501, 0xd, 0x5, 0xac4c, 0x6, 0xb2, 0x1, 0x3, 0x8, 0x4, 0x1, 0x6, 0x2, 0x3ff, 0x3, 0x5, 0x7, 0x7, 0x3, 0x2, 0x3e01, 0x80, 0xfffffff7, 0x7fff, 0x9, 0x6d3, 0x400000, 0x0, 0xfffffffa, 0x349c, 0x80, 0x6, 0x6, 0x40, 0x8, 0x316, 0x9, 0x9, 0xd272, 0x476, 0x7ff, 0x101, 0x3ff, 0x71a2, 0x0, 0x5, 0x2, 0x5, 0xb, 0x7f2c, 0x9, 0x78dd, 0x40, 0x1, 0x8, 0x3b, 0x7fffffff, 0x3, 0x8000, 0xd, 0x7, 0xffff, 0x9, 0x6, 0x3, 0x7ff, 0x1, 0x7, 0x9, 0x6, 0x1, 0xf, 0x5, 0x3ff, 0x6, 0x9, 0x401, 0x7fff, 0x6b1, 0x1000, 0x7, 0x5, 0x6, 0x81, 0x1000, 0xffffffff, 0xfffffffb, 0x704cb4f5, 0x8c0, 0x8, 0x0, 0x1, 0x80009298, 0x8, 0x80, 0x10, 0x10, 0x2, 0x9, 0x3, 0x9, 0x4, 0x0, 0x100, 0xfffffff7, 0x0, 0xfffffff3, 0x0, 0x6, 0x6073, 0x8, 0xd209, 0xffffff00, 0x7, 0x9, 0x0, 0x5, 0x8, 0xffffff59, 0x80000000, 0x7fffffff, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0xb, 0x100000, 0x3, 0xdaee, 0x4, 0x769, 0x8, 0x5, 0xffffffff, 0x2, 0x9, 0x1, 0x2f1a, 0x7fffffff, 0x2, 0x8, 0x8000, 0x9, 0x9, 0x7fb, 0x1000, 0xb, 0x4, 0x9, 0x9, 0x80000000, 0x1, 0xcf, 0x3, 0x1, 0xffffffff, 0x3, 0x7, 0x4, 0x6, 0x1, 0x6, 0x3, 0xffffffbe, 0x7, 0x1, 0xd0, 0xd24, 0xfffffffa, 0x2, 0xa, 0x9, 0xe7f, 0x10, 0x81, 0x2, 0x90f, 0xa, 0x1000, 0x3, 0x3, 0x7, 0x9, 0x8, 0x800, 0xf, 0x7, 0x4, 0x9ac7, 0x0, 0x2, 0x8, 0x100, 0x6, 0x1, 0x3, 0x80000001, 0xbb9, 0x9, 0xdff5, 0xfa05, 0x2, 0x80000001, 0x358, 0xffff, 0x9, 0x4cea, 0x5, 0x10, 0x9, 0x7, 0xb, 0xa, 0x90000000, 0x26445006, 0x93, 0x8, 0xe8c, 0x8, 0x10001, 0x1, 0x7, 0x400, 0x9, 0x8, 0x3, 0x3, 0xa, 0x1, 0x401, 0x8000, 0x1, 0x1000, 0x9, 0x1, 0x0, 0x80000000, 0xfffffffa, 0xfffff800, 0x9, 0x8, 0x10000, 0x6, 0x4, 0x0, 0x9, 0x7fffffff, 0x8, 0x8001, 0x311f, 0x0, 0x4, 0xffffffff, 0x3458, 0x3, 0xa, 0x7fffffff, 0xf, 0x2, 0x8e, 0x2, 0x1b80000, 0x7, 0x2, 0x6, 0x31, 0x7, 0x7fffffff, 0x80, 0x0, 0x1ff, 0x7e54, 0xffffffff, 0x4, 0x5, 0x8, 0x3, 0xfffffeff, 0x33, 0x0, 0x101, 0x8, 0x10000, 0x2, 0xe0d, 0xfffffff7, 0x5, 0x81, 0x80, 0x3, 0x2, 0x0, 0x4, 0x5, 0xd, 0x2, 0x1ff, 0x9, 0x6, 0xfffffffc, 0x1, 0xb, 0x3, 0x7fff, 0x3ff, 0x5, 0x7, 0x4, 0x9, 0xfffffffd, 0x6, 0x10001, 0xfffffffb, 0x5, 0x7ff, 0x502a, 0x6, 0x7f, 0x101, 0xc4847a7, 0x515, 0x3, 0x3, 0x9, 0x1000, 0x2, 0x100, 0x5, 0x9, 0xfffffff7, 0xdd, 0x4, 0x3, 0x7d9, 0x2b0071a3, 0x7, 0xc0a6, 0x3, 0x80, 0x7fff, 0x0, 0xfffffff9, 0x1, 0x10001, 0x4, 0xfffffff3, 0x9, 0x4, 0xfffffbff, 0x400, 0xa, 0x0, 0x7ff, 0x2b, 0xe2, 0x4, 0x2, 0x3, 0xfffffff6, 0x8, 0x40, 0x7, 0x0, 0x8, 0x6, 0x2, 0x0, 0x0, 0xf, 0x96, 0x321f, 0x1, 0x9b, 0x7, 0x0, 0x800, 0x2, 0x1000, 0x70]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10000}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9b}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xc}}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x3, 0x3, 0x80000001, {0x1, 0x4162deb03763356a, 0x800, 0x7, 0x2c, 0x80000000}, {0x7, 0x0, 0x4, 0x4, 0x8, 0xc}, 0x9, 0x4, 0x5}}]}, @TCA_U32_SEL={0x604, 0x5, {0x9, 0xc, 0x3, 0xfffb, 0xa, 0x8000, 0x9fcd, 0x9, [{0x100, 0x3, 0x7ded, 0x2d35}, {0x0, 0xe8e, 0xfdf, 0x4}, {0x3, 0x10c8a5e7, 0x0, 0x90000000}, {0x6, 0x2, 0x9, 0x10001}, {0x7, 0x0, 0x400, 0xd840}, {0xc7, 0x0, 0xed2, 0x7f}, {0x0, 0x22, 0x6fd, 0x7fffffff}, {0x373d, 0x633e041b}, {0x6ee, 0x7, 0x7, 0x8}, {0x3, 0x89d, 0x6, 0xd}, {0x6, 0x1005, 0xe80b, 0x191}, {0xc, 0x4, 0x1ff, 0x6}, {0x7fff, 0x9, 0x6, 0x1}, {0x16e5, 0x1000, 0x5, 0x3}, {0x2bbd, 0x100, 0x6, 0x200}, {0x7fffffff, 0xd, 0x0, 0x10}, {0x3, 0x3, 0x8, 0x1}, {0x8, 0x6, 0x57, 0x2cce}, {0x2, 0x0, 0x4, 0x3df6}, {0xc, 0x918, 0xbc, 0x6fdc}, {0x5, 0x9f6, 0x10001, 0xaa}, {0x5, 0x6, 0x1, 0xa}, {0x48, 0xe, 0x7, 0x3}, {0x5, 0x97, 0x6, 0xff}, {0x1, 0xffffffff, 0x835, 0x2}, {0x3, 0x10, 0xd875, 0x1000}, {0x4, 0x6, 0x8, 0x200}, {0x2, 0x0, 0x0, 0x1200}, {0x5, 0x5, 0xad, 0x4}, {0x5, 0x9, 0x40, 0x8001}, {0x4, 0x0, 0x7, 0x26}, {0x2, 0x9, 0x6, 0x8}, {0x0, 0x0, 0x10}, {0xd98, 0x7ff, 0x6, 0x200}, {0x10000, 0x80, 0xdf01, 0xa331}, {0x1ff, 0xada, 0x158, 0x5}, {0x0, 0x75b, 0x4}, {0xff, 0xffffff82, 0xff}, {0x4a9, 0x8000, 0x6, 0x7}, {0x8, 0x9, 0x7, 0x5}, {0x2, 0xbaea, 0x3, 0x8}, {0x101, 0x900, 0x4, 0x9}, {0x800, 0xa, 0x0, 0x2}, {0x401, 0x9, 0x5, 0x6}, {0x7, 0x7, 0xa, 0x1}, {0x6, 0xb4e, 0x3, 0x15}, {0x2, 0x40, 0x0, 0x81}, {0xfff, 0x4, 0x4b, 0x6}, {0x1, 0x1, 0x2, 0x1}, {0x2, 0x46e7, 0x0, 0x8001}, {0x5d, 0x6, 0xffffffff, 0xe9}, {0xf, 0x5, 0x3, 0x200}, {0x746, 0xffffffff, 0xf3d9, 0x7ff}, {0x0, 0x3, 0x9, 0xff}, {0x2, 0x7fffffff, 0x400, 0x7}, {0xffff, 0x10001, 0x4ff, 0x2}, {0xfffff801, 0x3ff, 0x8001, 0x8}, {0x3, 0x1000, 0x8, 0x10}, {0x9, 0x6b76, 0x1, 0xffffffff}, {0x9, 0x28, 0xfffffffd, 0x7}, {0x5, 0x10, 0xab, 0x6}, {0x8, 0x6, 0x4, 0xd7}, {0x2, 0xe, 0x9, 0x7}, {0x7, 0xfffff582, 0xd, 0x200}, {0x3, 0x4, 0x401, 0xa5}, {0x0, 0x1, 0xd, 0x2}, {0x9, 0x3, 0x3}, {0x7, 0x3ff, 0xd5c, 0x6}, {0x51, 0x40001, 0x5, 0xd20}, {0x1, 0x1, 0x4, 0x8000}, {0x0, 0x5b, 0x4be, 0x2}, {0x2, 0x8, 0xfffffffe, 0x400}, {0x2, 0x10000, 0xc932, 0xff}, {0x0, 0xe, 0x8}, {0x6, 0x7, 0x8}, {0x5, 0xc9, 0x4, 0xffff}, {0x1, 0xfa, 0x0, 0x7}, {0x8001, 0x22, 0x1, 0x7}, {0xba, 0x4, 0x1, 0x1}, {0xe, 0x4, 0x1000, 0x5}, {0x4, 0x9, 0x4, 0x4}, {0x7, 0xc, 0x8, 0x8b0}, {0x7ff, 0x1, 0xfffffff9, 0x847}, {0x7d0827f, 0x8, 0x8, 0x8}, {0x8, 0x1ff, 0xf3}, {0x2, 0x4, 0x6, 0x8600000}, {0x0, 0x8000, 0x2, 0xa7}, {0x9, 0x1, 0x1}, {0x5, 0x8, 0x400, 0x7}, {0x4, 0xfffffff9, 0x2, 0x8}, {0x2, 0x7, 0x3, 0x3}, {0x7, 0x5, 0x2, 0x80000001}, {0x9, 0x7ff, 0x206, 0x3}, {0x0, 0x800, 0xe, 0xffffffff}, {0x266, 0x10, 0xfffffffe, 0xc}]}}]}}]}, 0x1eb0}}, 0x24040084) socket$nl_netfilter(0x10, 0x3, 0xc) 14.068129955s ago: executing program 7 (id=503): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 11.746091958s ago: executing program 7 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) 10.595815232s ago: executing program 5 (id=506): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x1) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz1\x00', {0xfffc, 0xf07, 0x7, 0x4ba}, 0xd80e, [0x9, 0x10008000, 0xff, 0x3, 0x4, 0x5, 0x8, 0xffff898c, 0xffff8001, 0x3ff, 0x10001, 0xdcf51ce, 0x8000, 0x9, 0x8, 0x4, 0x23, 0x3, 0x7ff, 0x101, 0xfffffff7, 0x3, 0x7f, 0x7fff, 0x1, 0x3ff, 0xb5, 0x80, 0x1, 0x3, 0x8, 0x6, 0x3, 0x8, 0x1, 0x7, 0x9, 0xef3, 0x10, 0x6, 0xf8, 0x6, 0x80000000, 0x8, 0xfff, 0x9, 0x79, 0x0, 0x9, 0x45, 0x1b5, 0x5f9, 0x200, 0x6da, 0x200000, 0x5, 0x0, 0x320, 0x9, 0x0, 0x1, 0x6, 0x0, 0x7], [0x8, 0x6, 0x80, 0x2, 0xfd, 0x7, 0xa, 0x3, 0x7ffd, 0x1, 0x2, 0xffffff12, 0x2, 0x5, 0x7, 0x4, 0x1400000, 0xffffff7f, 0xc23b, 0x893, 0x901, 0x1, 0x9, 0x10001, 0x1, 0x0, 0x8, 0x7, 0x1, 0x5, 0x2, 0x9, 0x800, 0x7f, 0x400, 0x6, 0x10001, 0x9, 0x8, 0x1, 0x242, 0x5, 0x5, 0x2, 0x5, 0x1, 0xffffffff, 0x7, 0x9, 0x6, 0x80000000, 0x4, 0x1, 0x0, 0x194, 0x10000, 0x0, 0x1, 0x7f, 0x1, 0x10001, 0xb6, 0xe2d, 0x2], [0xfd, 0xffffcc50, 0x8, 0x6, 0x10001, 0x2, 0x15d, 0x2, 0x10, 0x10001, 0xcb1, 0x6, 0x4, 0x3ff, 0x2, 0x7ff, 0x8, 0xd8, 0xff, 0x200, 0x0, 0x0, 0x4, 0x8000, 0x61, 0x1d, 0x80, 0xf, 0x3, 0x2, 0x6, 0xfffffff8, 0xc78d, 0x5, 0xc88f, 0x6, 0x2084, 0x2, 0x3, 0xdc72, 0x7, 0x19, 0x8, 0x8, 0x9, 0x5, 0x3, 0x7, 0x101, 0x7f, 0x5, 0x7, 0xf, 0x4, 0x4, 0x6, 0x8, 0x200, 0x4, 0x7, 0x4, 0xfffffffc, 0xd05, 0x7], [0x6, 0x973f, 0x5, 0xffff, 0x71a6, 0x6, 0x2, 0x8000, 0x0, 0x7fffffff, 0xc968, 0xe0, 0x2a88, 0x9, 0x6, 0x40, 0x87, 0x2, 0x7, 0x8, 0x9, 0xffff, 0x7, 0x2, 0x10, 0x1ff, 0x8, 0x7b, 0x2, 0xff, 0x7, 0x80b7, 0x7, 0x10000, 0x1, 0x5, 0x5, 0x9, 0x6, 0x200, 0xfffffffc, 0x9988, 0x5, 0xd, 0x3, 0x3, 0x4, 0x80, 0x16b17357, 0x2, 0x5, 0x4, 0x4, 0x101, 0x20, 0x3, 0xfffff396, 0x2, 0x9, 0xac04, 0x80, 0x101, 0x6, 0x6]}, 0x45c) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x1, 0xfffffffc, 0x5f, 0x2, 0x211b}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r1, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 10.525114472s ago: executing program 3 (id=507): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0xffffffe1}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7}}}]}, {0xffffffffffffffad}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) 10.027625345s ago: executing program 5 (id=508): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000580)=[{0x0, 0x2, {0x0, 0x1, 0x3}, {0x2, 0xf0}, 0x2, 0xff}, {0x3, 0x1, {0x1, 0xf0, 0x3}, {0x0, 0xf0, 0x3}, 0xfe, 0x2}, {0x0, 0x0, {0x1, 0x1}, {0x2, 0xf0, 0x1}, 0x3, 0x2}, {0x1, 0x0, {0x1, 0xf0, 0x4}, {0x2, 0xf0}, 0xff, 0x1}, {0x3, 0x2, {0x1, 0x0, 0x3}, {0x2}, 0xff, 0xfe}, {0x1, 0x0, {0x1, 0xff}, {0x1, 0x1}, 0x1, 0xff}, {0x1, 0x2, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0x2, 0xff}, {0x0, 0x80000, {0x2, 0xff, 0x2}, {0x1, 0xf0, 0x3}, 0xfd, 0xff}], 0x100) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8ec, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$setopts(0x4206, r4, 0x6, 0x8) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 9.211646684s ago: executing program 7 (id=509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.947207098s ago: executing program 7 (id=510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.859913766s ago: executing program 4 (id=511): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1f1501, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, &(0x7f0000000080)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 8.81796754s ago: executing program 6 (id=512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000060000000090a010400000000000000000700000208000a40000080000900020073797a31000000000900010073797a3000000000080005400000002124001180090001006d6574610000000014000280080001400000000b080002400000000d140000001000010000000000000000000084000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c000780"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x7, 0x5, 0x3, 0x84a}, {0x40, 0x4, 0x1, 0xa}, {0x2, 0x40, 0x4, 0x9}]}) close(r6) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000100)=0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000140)=0x7c) 6.32007895s ago: executing program 6 (id=513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}], 0x1, 0x40800) 6.181947491s ago: executing program 7 (id=514): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty=0x200000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 6.108006341s ago: executing program 7 (id=515): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 5.610629623s ago: executing program 6 (id=516): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x80800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @broadcast}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 5.475617455s ago: executing program 3 (id=517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r4 = syz_io_uring_setup(0x186, &(0x7f0000000200)={0x0, 0xc2d3, 0x10100, 0x2, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x79a5, 0x2, 0x46, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0x3, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r7}, 0x38) 2.934781279s ago: executing program 3 (id=518): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x1) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz1\x00', {0xfffc, 0xf07, 0x7, 0x4ba}, 0xd80e, [0x9, 0x10008000, 0xff, 0x3, 0x4, 0x5, 0x8, 0xffff898c, 0xffff8001, 0x3ff, 0x10001, 0xdcf51ce, 0x8000, 0x9, 0x8, 0x4, 0x23, 0x3, 0x7ff, 0x101, 0xfffffff7, 0x3, 0x7f, 0x7fff, 0x1, 0x3ff, 0xb5, 0x80, 0x1, 0x3, 0x8, 0x6, 0x3, 0x8, 0x1, 0x7, 0x9, 0xef3, 0x10, 0x6, 0xf8, 0x6, 0x80000000, 0x8, 0xfff, 0x9, 0x79, 0x0, 0x9, 0x45, 0x1b5, 0x5f9, 0x200, 0x6da, 0x200000, 0x5, 0x0, 0x320, 0x9, 0x0, 0x1, 0x6, 0x0, 0x7], [0x8, 0x6, 0x80, 0x2, 0xfd, 0x7, 0xa, 0x3, 0x7ffd, 0x1, 0x2, 0xffffff12, 0x2, 0x5, 0x7, 0x4, 0x1400000, 0xffffff7f, 0xc23b, 0x893, 0x901, 0x1, 0x9, 0x10001, 0x1, 0x0, 0x8, 0x7, 0x1, 0x5, 0x2, 0x9, 0x800, 0x7f, 0x400, 0x6, 0x10001, 0x9, 0x8, 0x1, 0x242, 0x5, 0x5, 0x2, 0x5, 0x1, 0xffffffff, 0x7, 0x9, 0x6, 0x80000000, 0x4, 0x1, 0x0, 0x194, 0x10000, 0x0, 0x1, 0x7f, 0x1, 0x10001, 0xb6, 0xe2d, 0x2], [0xfd, 0xffffcc50, 0x8, 0x6, 0x10001, 0x2, 0x15d, 0x2, 0x10, 0x10001, 0xcb1, 0x6, 0x4, 0x3ff, 0x2, 0x7ff, 0x8, 0xd8, 0xff, 0x200, 0x0, 0x0, 0x4, 0x8000, 0x61, 0x1d, 0x80, 0xf, 0x3, 0x2, 0x6, 0xfffffff8, 0xc78d, 0x5, 0xc88f, 0x6, 0x2084, 0x2, 0x3, 0xdc72, 0x7, 0x19, 0x8, 0x8, 0x9, 0x5, 0x3, 0x7, 0x101, 0x7f, 0x5, 0x7, 0xf, 0x4, 0x4, 0x6, 0x8, 0x200, 0x4, 0x7, 0x4, 0xfffffffc, 0xd05, 0x7], [0x6, 0x973f, 0x5, 0xffff, 0x71a6, 0x6, 0x2, 0x8000, 0x0, 0x7fffffff, 0xc968, 0xe0, 0x2a88, 0x9, 0x6, 0x40, 0x87, 0x2, 0x7, 0x8, 0x9, 0xffff, 0x7, 0x2, 0x10, 0x1ff, 0x8, 0x7b, 0x2, 0xff, 0x7, 0x80b7, 0x7, 0x10000, 0x1, 0x5, 0x5, 0x9, 0x6, 0x200, 0xfffffffc, 0x9988, 0x5, 0xd, 0x3, 0x3, 0x4, 0x80, 0x16b17357, 0x2, 0x5, 0x4, 0x4, 0x101, 0x20, 0x3, 0xfffff396, 0x2, 0x9, 0xac04, 0x80, 0x101, 0x6, 0x6]}, 0x45c) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x1, 0xfffffffc, 0x5f, 0x2, 0x211b}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) 2.171527125s ago: executing program 3 (id=519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0baa48c7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 1.823410388s ago: executing program 3 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) 1.256416021s ago: executing program 6 (id=521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 943.746279ms ago: executing program 6 (id=522): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r4, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x84) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e22, 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket(0xa, 0x3, 0x3a) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 352.058168ms ago: executing program 4 (id=523): socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@end]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 335.793236ms ago: executing program 6 (id=524): socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/68, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, 0x0) tkill(r0, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 0s ago: executing program 4 (id=525): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered disabled state [ 69.170424][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.204685][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.224000][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.244787][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.273166][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.296759][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.304058][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.312950][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.329162][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.338770][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.346656][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.356406][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.366345][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.374537][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.383789][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.398523][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.405895][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.414381][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.431437][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.465963][ T4188] team0: Port device team_slave_0 added [ 69.484172][ T4189] team0: Port device team_slave_0 added [ 69.493598][ T4185] team0: Port device team_slave_0 added [ 69.509483][ T4188] team0: Port device team_slave_1 added [ 69.517407][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.535055][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.546475][ T4189] team0: Port device team_slave_1 added [ 69.553922][ T4185] team0: Port device team_slave_1 added [ 69.597087][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.616052][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.634788][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.642020][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.668920][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.684249][ T4186] team0: Port device team_slave_0 added [ 69.704489][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.711961][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.739342][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.758842][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.765937][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.792772][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.805667][ T4186] team0: Port device team_slave_1 added [ 69.812138][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.820561][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.847516][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.860647][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.867787][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.894220][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.918886][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.926015][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.952865][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.978911][ T4187] team0: Port device team_slave_0 added [ 70.015347][ T4187] team0: Port device team_slave_1 added [ 70.026366][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.034720][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.051423][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.058931][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.086526][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.099890][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.107061][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.134290][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.200573][ T4189] device hsr_slave_0 entered promiscuous mode [ 70.207929][ T4189] device hsr_slave_1 entered promiscuous mode [ 70.216536][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.224951][ T4189] Cannot create hsr debugfs directory [ 70.244581][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.251973][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.258962][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.267657][ T4188] Cannot create hsr debugfs directory [ 70.283109][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.290814][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.317289][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.336075][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.343942][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.371569][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.383781][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 70.387782][ T4192] Bluetooth: hci1: command 0x0409 tx timeout [ 70.393073][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 70.398279][ T4192] Bluetooth: hci4: command 0x0409 tx timeout [ 70.417464][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 70.459499][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.466827][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.473895][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.481566][ T4186] Cannot create hsr debugfs directory [ 70.562481][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.570452][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.578673][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.586493][ T4187] Cannot create hsr debugfs directory [ 70.878129][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.897064][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.915273][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.925619][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.977031][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.004501][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.014995][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.026936][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.066410][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.080440][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.092652][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.102668][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.223770][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.233483][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.271429][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.279893][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.312013][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.336096][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.349935][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.364626][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.382319][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.394387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.406589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.415501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.423879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.432996][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440178][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.462328][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.474604][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.482170][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.493350][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.504898][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.513479][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.523451][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.554052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.564140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.574333][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.581748][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.592155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.601796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.611694][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.618845][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.627528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.638683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.684670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.695093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.704807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.714136][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.721338][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.734521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.744455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.753385][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.760638][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.769495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.778569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.787152][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.794450][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.802708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.812669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.821977][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.829441][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.839228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.848389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.858146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.867080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.876400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.885592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.895130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.905528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.915025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.924630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.933025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.941545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.953438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.002569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.039541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.051767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.070538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.084432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.096139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.115093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.164138][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.176547][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.190165][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.199719][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.209634][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.219983][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.228794][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.238661][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.248504][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.257659][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.266340][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.276996][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.293495][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.338698][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.352477][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.361271][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.376066][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.404024][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.417028][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.429992][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.468524][ T4192] Bluetooth: hci2: command 0x041b tx timeout [ 72.474954][ T4192] Bluetooth: hci3: command 0x041b tx timeout [ 72.483584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.497792][ T4192] Bluetooth: hci4: command 0x041b tx timeout [ 72.505499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.532106][ T4192] Bluetooth: hci1: command 0x041b tx timeout [ 72.550099][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.568221][ T4192] Bluetooth: hci0: command 0x041b tx timeout [ 72.574791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.588133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.598851][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.623837][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.640018][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.650473][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.658157][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.725027][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.738904][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.755270][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.764814][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.772634][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.786953][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.797499][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.809381][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.816799][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.825948][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.834092][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.843881][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.853366][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.878478][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.886233][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.905310][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.947005][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.978628][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.994604][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.004401][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.024322][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.037033][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.046375][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.056025][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.065992][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.076648][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.108203][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.115817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.126133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.135950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.143604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.153055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.162400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.171294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.201532][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.212934][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.226021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.235861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.245780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.255414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.264708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.275210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.285353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.301628][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.314382][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.345713][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.354915][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.364815][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.374603][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.429435][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.444280][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.456411][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.471830][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.503586][ T4185] device veth0_vlan entered promiscuous mode [ 73.535457][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.544786][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.555204][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.564376][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.574040][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.582759][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.590993][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.599597][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.613123][ T4188] device veth0_vlan entered promiscuous mode [ 73.639341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.660067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.675432][ T4185] device veth1_vlan entered promiscuous mode [ 73.706782][ T4188] device veth1_vlan entered promiscuous mode [ 73.721560][ T4186] device veth0_vlan entered promiscuous mode [ 73.736141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.751488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.760865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.769891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.796732][ T4186] device veth1_vlan entered promiscuous mode [ 73.807343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.815604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.825880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.834828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.851335][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.864189][ T4185] device veth0_macvtap entered promiscuous mode [ 73.882132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.891393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.900461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.908348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.915964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.925954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.934827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.952726][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.970059][ T4185] device veth1_macvtap entered promiscuous mode [ 74.010169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.018787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.029174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.045258][ T4186] device veth0_macvtap entered promiscuous mode [ 74.071645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.082808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.094520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.105137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.114379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.126522][ T4186] device veth1_macvtap entered promiscuous mode [ 74.139096][ T4188] device veth0_macvtap entered promiscuous mode [ 74.159150][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.167996][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.176237][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.186101][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.201330][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.209971][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.224938][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.236013][ T4188] device veth1_macvtap entered promiscuous mode [ 74.244032][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.252563][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.262750][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.272381][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.281568][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.295671][ T4189] device veth0_vlan entered promiscuous mode [ 74.324695][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.336970][ T4187] device veth0_vlan entered promiscuous mode [ 74.349004][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.360652][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.373343][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.382900][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.410123][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.419219][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.428658][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.437685][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.446761][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.456936][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.468172][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.482072][ T4189] device veth1_vlan entered promiscuous mode [ 74.498767][ T4187] device veth1_vlan entered promiscuous mode [ 74.506681][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.516653][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.530179][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.539908][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 74.546554][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.555342][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 74.561907][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 74.573934][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.585365][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.597974][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.636297][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.647007][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 74.651865][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.653727][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 74.673583][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.684525][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.697076][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.709192][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.717765][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.726147][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.735189][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.744047][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.753663][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.763806][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.773106][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.786924][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.798842][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.808580][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.817909][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.833912][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.844679][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.855015][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.867674][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.879495][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.904685][ T4189] device veth0_macvtap entered promiscuous mode [ 74.912231][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.922245][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.931516][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.941692][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.950793][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.962546][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.972138][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.988998][ T4187] device veth0_macvtap entered promiscuous mode [ 75.002091][ T4187] device veth1_macvtap entered promiscuous mode [ 75.029121][ T4189] device veth1_macvtap entered promiscuous mode [ 75.039942][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.053348][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.062851][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.072004][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.125292][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.134427][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.144115][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.185291][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.202078][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.213989][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.224767][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.234900][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.245515][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.259902][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.286655][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.296571][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.320581][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.333241][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.344969][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.360162][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.377363][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.388480][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.407932][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.436309][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.449078][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.461012][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.472888][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.483481][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.495090][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.506062][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.518134][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.528870][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.539933][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.552539][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.576172][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.586410][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.595996][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.605948][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.615219][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.629094][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.640095][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.649519][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.659318][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.691102][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.703503][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.714865][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.726116][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.736179][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.749194][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.759763][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.771146][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.783235][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.813286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.825834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.850193][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.861395][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.870530][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.879641][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.892136][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.904202][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.915794][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.945934][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.957094][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.003907][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.059003][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.066902][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.117646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.151813][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.162408][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.193954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.222992][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.234613][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.295135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.328119][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.342471][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.372179][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.438723][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.446908][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.482802][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.485166][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.537239][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.545518][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.591277][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.627492][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 76.633725][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 76.657499][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 76.666142][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.701441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.713243][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 76.726626][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 76.816232][ T4286] loop3: detected capacity change from 0 to 256 [ 77.004557][ T4289] loop4: detected capacity change from 0 to 16 [ 77.449661][ T4291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.659685][ T4289] erofs: (device loop4): mounted with root inode @ nid 36. [ 77.783110][ T4286] FAT-fs (loop3): Directory bread(block 64) failed [ 77.802694][ T4286] FAT-fs (loop3): Directory bread(block 65) failed [ 77.810096][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.842498][ T4251] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.853971][ T4286] FAT-fs (loop3): Directory bread(block 66) failed [ 77.887552][ T4286] FAT-fs (loop3): Directory bread(block 67) failed [ 77.894314][ T4286] FAT-fs (loop3): Directory bread(block 68) failed [ 77.909123][ T4286] FAT-fs (loop3): Directory bread(block 69) failed [ 77.921050][ T4286] FAT-fs (loop3): Directory bread(block 70) failed [ 77.930458][ T4286] FAT-fs (loop3): Directory bread(block 71) failed [ 77.937766][ T4286] FAT-fs (loop3): Directory bread(block 72) failed [ 77.976766][ T4286] FAT-fs (loop3): Directory bread(block 73) failed [ 78.054996][ T4299] loop4: detected capacity change from 0 to 128 [ 78.093574][ T4299] ======================================================= [ 78.093574][ T4299] WARNING: The mand mount option has been deprecated and [ 78.093574][ T4299] and is ignored by this kernel. Remove the mand [ 78.093574][ T4299] option from the mount to silence this warning. [ 78.093574][ T4299] ======================================================= [ 78.135257][ T4299] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 78.167664][ T4251] usb 2-1: Using ep0 maxpacket: 16 [ 78.182982][ T4299] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nomblk_io_submit,delalloc,,errors=continue. Quota mode: none. [ 78.197299][ T4299] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.267912][ T13] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 78.305086][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 251, changing to 7 [ 78.333142][ T4251] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 78.351867][ T4251] usb 2-1: config 0 has no interface number 0 [ 78.367849][ T4251] usb 2-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.487500][ T4229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.307411][ T13] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 79.316553][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.387752][ T4251] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 79.413922][ T4251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.425232][ T13] usb 1-1: Product: syz [ 79.429958][ T13] usb 1-1: Manufacturer: syz [ 79.440966][ T4251] usb 2-1: Product: syz [ 79.445605][ T13] usb 1-1: SerialNumber: syz [ 79.455811][ T4251] usb 2-1: Manufacturer: syz [ 79.481044][ T4251] usb 2-1: SerialNumber: syz [ 79.491780][ T4306] loop3: detected capacity change from 0 to 256 [ 79.525517][ T4251] r8152-cfgselector 2-1: config 0 descriptor?? [ 79.554992][ T4281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.594328][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 79.718278][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.732472][ T4251] r8152-cfgselector 2-1: Unknown version 0x0000 [ 79.736079][ T4229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.769112][ T4311] syz.3.13 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.807732][ T4251] r8152-cfgselector 2-1: Unknown version 0x0000 [ 79.823219][ T4229] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.833670][ T4316] Zero length message leads to an empty skb [ 79.858296][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.866740][ T4251] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 79.868664][ T13] usb 1-1: MIDIStreaming interface descriptor not found [ 79.937636][ T4229] usb 3-1: config 0 descriptor?? [ 80.045415][ T13] usb 1-1: USB disconnect, device number 2 [ 80.177416][ T4269] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.240137][ T4323] loop0: detected capacity change from 0 to 1024 [ 80.294197][ T4323] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 80.326974][ T4323] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.375041][ T4323] EXT4-fs (loop0): shut down requested (2) [ 80.443012][ T4229] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 80.474883][ T4229] microsoft 0003:045E:07DA.0001: parse failed [ 80.478689][ T4269] usb 5-1: Using ep0 maxpacket: 8 [ 80.489413][ T4229] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 80.573525][ T4327] loop3: detected capacity change from 0 to 512 [ 80.684159][ T4319] loop1: detected capacity change from 0 to 40427 [ 80.692086][ T4327] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.713169][ T4192] usb 3-1: USB disconnect, device number 2 [ 80.794120][ T26] audit: type=1804 audit(1772479786.091:2): pid=4327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.18" name="/newroot/3/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 80.796564][ T4327] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 80.877723][ T4327] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #15: comm syz.3.18: mark_inode_dirty error [ 81.003573][ T4327] EXT4-fs error (device loop3): ext4_get_max_inline_size:115: inode #15: comm syz.3.18: can't get inode location 15 [ 81.767416][ T4269] usb 5-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 81.813478][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.846411][ T4269] usb 5-1: Product: syz [ 81.866736][ T4269] usb 5-1: Manufacturer: syz [ 81.871821][ T4269] usb 5-1: SerialNumber: syz [ 82.367389][ T4345] hub 8-0:1.0: USB hub found [ 82.374589][ T4345] hub 8-0:1.0: 1 port detected [ 82.929510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #01!!! [ 82.957244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 82.967222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 82.977217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.987216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.997212][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.007228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.017218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.027226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.036223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.259043][ T4269] usb 5-1: unit 5 not found! [ 83.347362][ T4269] usb 5-1: can't set first interface for hiFace device. [ 83.364423][ T4269] snd-usb-hiface: probe of 5-1:1.1 failed with error -5 [ 83.407984][ T4269] usb 5-1: can't set first interface for hiFace device. [ 83.430628][ T4269] snd-usb-hiface: probe of 5-1:1.2 failed with error -5 [ 83.471110][ T4269] usb 5-1: USB disconnect, device number 2 [ 83.762850][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.841583][ T4357] loop4: detected capacity change from 0 to 2048 [ 84.045310][ T4357] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.166668][ T4357] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.25: bg 0: block 234: padding at end of block bitmap is not set [ 84.312769][ T4348] loop2: detected capacity change from 0 to 40427 [ 84.360144][ T4348] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 84.403950][ T4348] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.469033][ T4348] F2FS-fs (loop2): invalid crc value [ 84.485584][ T4367] loop4: detected capacity change from 0 to 4096 [ 84.534671][ T4348] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.740571][ T4348] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 84.757713][ T4348] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.777855][ T4360] loop1: detected capacity change from 0 to 40427 [ 84.790521][ T4367] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.853365][ T4367] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 84.986107][ T4363] loop0: detected capacity change from 0 to 40427 [ 85.059790][ T4363] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 85.125126][ T4363] F2FS-fs (loop0): invalid crc value [ 85.160058][ T4363] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.357324][ T4363] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.472559][ T4367] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 85.601710][ T4363] attempt to access beyond end of device [ 85.601710][ T4363] loop0: rw=2049, want=45104, limit=40427 [ 85.894115][ T4192] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.943454][ T4363] attempt to access beyond end of device [ 85.943454][ T4363] loop0: rw=2049, want=45112, limit=40427 [ 86.847584][ T7] cfg80211: failed to load regulatory.db [ 87.207513][ T4192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.229022][ T4192] usb 2-1: New USB device found, idVendor=5e0a, idProduct=a055, bcdDevice= 0.00 [ 87.264384][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.285022][ T4192] usb 2-1: config 0 descriptor?? [ 87.319461][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.565493][ T4411] loop3: detected capacity change from 0 to 2048 [ 87.917916][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.934039][ T4192] hid-generic 0003:5E0A:A055.0002: unbalanced collection at end of report description [ 87.949993][ T4411] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.960435][ T4192] hid-generic: probe of 0003:5E0A:A055.0002 failed with error -22 [ 87.988301][ T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.002719][ T21] usb 5-1: config 0 has no interface number 0 [ 88.888639][ T4192] usb 2-1: USB disconnect, device number 3 [ 89.030905][ T21] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.042083][ T21] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.051977][ T21] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 89.061151][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.077141][ T21] usb 5-1: config 0 descriptor?? [ 89.115974][ T4423] loop2: detected capacity change from 0 to 1024 [ 89.276449][ T4427] loop3: detected capacity change from 0 to 2048 [ 89.285192][ T4423] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,jqfmt=vfsv0,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 89.307817][ T4423] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.474542][ T4427] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noinit_itable,minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 89.498280][ T4423] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.41: Freeing blocks not in datazone - block = 0, count = 16 [ 89.575488][ T21] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 89.607408][ T4427] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.614584][ T21] hid_prodikeys: hid-prodikeys: failed to find output report [ 89.614584][ T21] [ 89.684186][ T4427] fs-verity: sha512 using implementation "sha512-avx2" [ 89.788576][ T1275] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 112: padding at end of block bitmap is not set [ 89.813030][ T21] usb 5-1: USB disconnect, device number 3 [ 89.858208][ T1275] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.925234][ T1275] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.925234][ T1275] [ 89.937961][ T1275] EXT4-fs (loop2): Total free blocks count 0 [ 89.944213][ T1275] EXT4-fs (loop2): Free/Dirty block details [ 90.043282][ T1275] EXT4-fs (loop2): free_blocks=16 [ 90.055351][ T1275] EXT4-fs (loop2): dirty_blocks=16 [ 90.066220][ T1275] EXT4-fs (loop2): Block reservation details [ 90.095766][ T1275] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 90.108789][ T4435] fido_id[4435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 90.181308][ T4442] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 90.392764][ T4445] capability: warning: `syz.1.48' uses deprecated v2 capabilities in a way that may be insecure [ 90.423144][ T4450] loop2: detected capacity change from 0 to 128 [ 90.479519][ T4450] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.585535][ T4450] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.818062][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.375952][ T4444] loop3: detected capacity change from 0 to 40427 [ 91.443684][ T4444] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 91.497252][ T4444] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.577502][ T4444] F2FS-fs (loop3): invalid crc value [ 91.625496][ T4444] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.853062][ T4444] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.864814][ T4444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.051116][ T26] audit: type=1804 audit(1772479797.351:3): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.49" name="/newroot/12/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 92.076749][ T4481] loop2: detected capacity change from 0 to 512 [ 92.231564][ T4481] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 92.246123][ T4481] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.309885][ T26] audit: type=1800 audit(1772479797.611:4): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.57" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 93.644871][ T4500] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET) [ 94.938689][ T4522] loop1: detected capacity change from 0 to 128 [ 95.079563][ T4526] loop3: detected capacity change from 0 to 256 [ 95.246595][ T4526] FAT-fs (loop3): Directory bread(block 64) failed [ 95.281736][ T4526] FAT-fs (loop3): Directory bread(block 65) failed [ 95.315627][ T4526] FAT-fs (loop3): Directory bread(block 66) failed [ 95.350742][ T4526] FAT-fs (loop3): Directory bread(block 67) failed [ 95.374700][ T4526] FAT-fs (loop3): Directory bread(block 68) failed [ 95.402248][ T4526] FAT-fs (loop3): Directory bread(block 69) failed [ 95.425620][ T4526] FAT-fs (loop3): Directory bread(block 70) failed [ 95.443057][ T4526] FAT-fs (loop3): Directory bread(block 71) failed [ 95.455604][ T4526] FAT-fs (loop3): Directory bread(block 72) failed [ 95.498396][ T4526] FAT-fs (loop3): Directory bread(block 73) failed [ 96.047639][ T4251] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.469053][ T4251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.544294][ T4251] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.808000][ T4251] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.872886][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.985648][ T4251] usb 5-1: SerialNumber: syz [ 99.163670][ T4556] loop3: detected capacity change from 0 to 256 [ 100.177363][ T4569] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 100.440599][ T4251] usb 5-1: cannot find UAC_HEADER [ 100.532216][ T4251] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 100.603809][ T4251] usb 5-1: USB disconnect, device number 4 [ 100.617726][ T4580] loop3: detected capacity change from 0 to 4096 [ 100.691616][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 100.757665][ T4580] EXT4-fs (loop3): Mount option "journal_checksum" incompatible with ext3 [ 100.934754][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.100865][ T4592] team0 (unregistering): Port device team_slave_0 removed [ 102.164924][ T4592] team0 (unregistering): Port device team_slave_1 removed [ 102.448141][ T4612] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 102.448141][ T4612] The task syz.3.100 (4612) triggered the difference, watch for misbehavior. [ 102.482057][ T4613] loop2: detected capacity change from 0 to 256 [ 102.519056][ T4615] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 102.637775][ T26] audit: type=1800 audit(1772479807.941:5): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.98" name="file0" dev="loop2" ino=1048618 res=0 errno=0 [ 102.755720][ T4621] loop4: detected capacity change from 0 to 16 [ 102.822802][ T4621] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 103.079278][ T4627] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 103.106933][ T4629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 103.127650][ T4629] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 103.330478][ T4636] loop4: detected capacity change from 0 to 512 [ 103.679775][ T4643] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 103.708245][ T4643] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 103.939329][ T4648] block device autoloading is deprecated and will be removed. [ 104.199716][ T4652] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.250763][ T4652] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.719130][ T4666] loop4: detected capacity change from 0 to 8192 [ 104.821000][ T4666] loop4: p1 p2 p4 [ 104.909209][ T4666] loop4: p4 size 262912 extends beyond EOD, truncated [ 105.135006][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 105.135193][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.208538][ T4320] udevd[4320]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.873529][ T4699] loop2: detected capacity change from 0 to 128 [ 106.135597][ T4699] attempt to access beyond end of device [ 106.135597][ T4699] loop2: rw=2049, want=353, limit=128 [ 106.244362][ T4698] attempt to access beyond end of device [ 106.244362][ T4698] loop2: rw=524288, want=353, limit=128 [ 107.722108][ T4732] loop3: detected capacity change from 0 to 256 [ 107.852766][ T4732] FAT-fs (loop3): Directory bread(block 64) failed [ 107.867319][ T4732] FAT-fs (loop3): Directory bread(block 65) failed [ 107.887663][ T4732] FAT-fs (loop3): Directory bread(block 66) failed [ 107.900909][ T4732] FAT-fs (loop3): Directory bread(block 67) failed [ 107.909355][ T4732] FAT-fs (loop3): Directory bread(block 68) failed [ 107.918075][ T4732] FAT-fs (loop3): Directory bread(block 69) failed [ 107.925125][ T4732] FAT-fs (loop3): Directory bread(block 70) failed [ 107.954178][ T4732] FAT-fs (loop3): Directory bread(block 71) failed [ 107.976060][ T4732] FAT-fs (loop3): Directory bread(block 72) failed [ 108.026748][ T4732] FAT-fs (loop3): Directory bread(block 73) failed [ 108.132155][ T4732] attempt to access beyond end of device [ 108.132155][ T4732] loop3: rw=2049, want=1228, limit=256 [ 108.158194][ T4732] attempt to access beyond end of device [ 108.158194][ T4732] loop3: rw=524288, want=1228, limit=256 [ 109.787928][ T26] audit: type=1326 audit(1772479815.081:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ef5e799 code=0x7ffc0000 [ 110.230539][ T26] audit: type=1326 audit(1772479815.101:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ef5e799 code=0x7ffc0000 [ 110.738843][ T26] audit: type=1326 audit(1772479815.101:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ef5e799 code=0x7ffc0000 [ 110.840038][ T26] audit: type=1326 audit(1772479815.101:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9b1ef5e799 code=0x7ffc0000 [ 110.900057][ T4776] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.907721][ T26] audit: type=1326 audit(1772479815.101:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ef5e799 code=0x7ffc0000 [ 110.944398][ T26] audit: type=1326 audit(1772479815.101:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ef5e799 code=0x7ffc0000 [ 110.969341][ T4776] IPv6: Can't replace route, no match found [ 111.005312][ T26] audit: type=1326 audit(1772479815.121:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9b1ef5e799 code=0x7ffc0000 [ 111.033416][ T26] audit: type=1326 audit(1772479815.131:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9b1ef5e799 code=0x7ffc0000 [ 111.105084][ T4785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.140814][ T4783] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.149866][ T4783] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.294811][ T4783] syz.2.158 (4783) used greatest stack depth: 20112 bytes left [ 111.437018][ T4794] loop2: detected capacity change from 0 to 512 [ 111.502893][ T4794] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 111.518770][ T4794] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.584386][ T26] audit: type=1800 audit(1772479816.871:14): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.162" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 111.792257][ T4807] loop3: detected capacity change from 0 to 256 [ 112.262439][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 112.581104][ T4823] bridge1: port 1(veth3) entered blocking state [ 112.623297][ T4823] bridge1: port 1(veth3) entered disabled state [ 112.673752][ T4823] device veth3 entered promiscuous mode [ 112.876548][ T4819] bridge1: port 2(veth0_to_bond) entered blocking state [ 112.906707][ T4834] loop4: detected capacity change from 0 to 512 [ 112.907258][ C0] sched: RT throttling activated [ 112.935496][ T4819] bridge1: port 2(veth0_to_bond) entered disabled state [ 113.030114][ T4819] device veth0_to_bond entered promiscuous mode [ 113.150602][ T4834] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 113.172075][ T4826] bridge1: port 3(vlan2) entered blocking state [ 113.214197][ T4826] bridge1: port 3(vlan2) entered disabled state [ 113.237532][ T4834] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.268917][ T4826] device vlan2 entered promiscuous mode [ 113.313867][ T4832] loop2: detected capacity change from 0 to 8192 [ 113.347293][ T4826] device ip6gretap0 entered promiscuous mode [ 113.440250][ T4842] loop3: detected capacity change from 0 to 128 [ 113.497371][ T26] audit: type=1800 audit(1772479818.731:15): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.175" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 113.547527][ T4842] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 113.583871][ T4832] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.602688][ T4882] fuse: Bad value for 'fd' [ 115.656607][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 116.162588][ T4899] overlayfs: failed to clone upperpath [ 117.858573][ T4915] loop2: detected capacity change from 0 to 256 [ 118.071563][ T4915] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.200775][ T4915] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.324195][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.345827][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.366680][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.426029][ T4922] device bridge_slave_0 left promiscuous mode [ 118.457015][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.538407][ T4922] device bridge_slave_1 left promiscuous mode [ 118.573307][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.609865][ T4922] device veth0_to_bond left promiscuous mode [ 118.626288][ T4922] bridge1: port 2(veth0_to_bond) entered disabled state [ 118.666012][ T4922] bond0: (slave bond_slave_0): Releasing backup interface [ 118.718298][ T4922] bond0: (slave bond_slave_1): Releasing backup interface [ 118.908604][ T4922] team0: Port device team_slave_0 removed [ 118.923842][ T4922] team0: Port device team_slave_1 removed [ 118.931084][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.939933][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.958197][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.978276][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.031661][ T4922] device veth3 left promiscuous mode [ 119.041796][ T4922] bridge1: port 1(veth3) entered disabled state [ 119.062209][ T4922] device vlan2 left promiscuous mode [ 119.068158][ T4922] device ip6gretap0 left promiscuous mode [ 119.074557][ T4922] bridge1: port 3(vlan2) entered disabled state [ 119.150190][ T4923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.166264][ T4923] team0: Port device bond1 added [ 120.417603][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.827498][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.909078][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.127649][ T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.182480][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.320674][ T23] usb 2-1: SerialNumber: syz [ 123.001105][ T23] usb 2-1: cannot find UAC_HEADER [ 123.013090][ T4989] raw_sendmsg: syz.0.230 forgot to set AF_INET. Fix it! [ 123.260017][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 123.275628][ T23] usb 2-1: USB disconnect, device number 4 [ 123.362654][ T5002] loop4: detected capacity change from 0 to 512 [ 123.371803][ T5001] overlayfs: failed to get inode (-116) [ 123.436850][ T5001] overlayfs: failed to get inode (-116) [ 123.493851][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.540236][ T5002] FAT-fs (loop4): Directory bread(block 199916) failed [ 123.607788][ T5002] FAT-fs (loop4): Directory bread(block 199917) failed [ 123.644657][ T5002] FAT-fs (loop4): Directory bread(block 199918) failed [ 123.652445][ T5002] FAT-fs (loop4): Directory bread(block 199919) failed [ 123.661747][ T5002] FAT-fs (loop4): Directory bread(block 199920) failed [ 123.670372][ T5002] FAT-fs (loop4): Directory bread(block 199921) failed [ 123.677695][ T5002] FAT-fs (loop4): Directory bread(block 199922) failed [ 123.684745][ T5002] FAT-fs (loop4): Directory bread(block 199923) failed [ 123.725242][ T5002] FAT-fs (loop4): Directory bread(block 199916) failed [ 123.771209][ T5002] FAT-fs (loop4): Directory bread(block 199917) failed [ 124.059951][ T5027] loop3: detected capacity change from 0 to 128 [ 124.605106][ T5039] loop1: detected capacity change from 0 to 512 [ 124.665290][ T5043] loop2: detected capacity change from 0 to 512 [ 124.889814][ T5043] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 124.914991][ T5043] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.966038][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 124.966056][ T26] audit: type=1800 audit(1772479830.261:24): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.251" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 125.367039][ T5059] loop2: detected capacity change from 0 to 256 [ 125.393409][ T5059] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.503721][ T5060] loop3: detected capacity change from 0 to 16 [ 125.527066][ T5059] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.591112][ T5060] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 126.303905][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.980335][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.034608][ T5084] loop3: detected capacity change from 0 to 512 [ 127.139724][ T5084] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 127.227401][ T5084] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.273009][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.378149][ T26] audit: type=1800 audit(1772479832.681:25): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 127.429201][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.999349][ T4251] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.115705][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 128.387794][ T4251] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 128.557272][ T4251] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 128.616075][ T4251] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.707369][ T4251] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.727518][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.765858][ T4251] usb 3-1: config 0 descriptor?? [ 128.808270][ T5106] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.158153][ T4233] Bluetooth: hci2: command 0x0409 tx timeout [ 129.210059][ T4251] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 129.490464][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.544713][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.598700][ T5082] device bridge_slave_0 entered promiscuous mode [ 129.709421][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.716716][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.779677][ T5082] device bridge_slave_1 entered promiscuous mode [ 129.924626][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.970519][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.121264][ T5082] team0: Port device team_slave_0 added [ 130.159075][ T5082] team0: Port device team_slave_1 added [ 130.288283][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.302386][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.366128][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.431755][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.443512][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.510500][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.823476][ T5082] device hsr_slave_0 entered promiscuous mode [ 130.868830][ T5082] device hsr_slave_1 entered promiscuous mode [ 130.891967][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.916408][ T5082] Cannot create hsr debugfs directory [ 131.119719][ T9] device hsr_slave_0 left promiscuous mode [ 131.166529][ T9] device hsr_slave_1 left promiscuous mode [ 131.177332][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 131.205107][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.205837][ T4232] usb 3-1: USB disconnect, device number 3 [ 131.247767][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.298666][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.327474][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.369552][ T9] device bridge_slave_1 left promiscuous mode [ 131.378781][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.461529][ T9] device bridge_slave_0 left promiscuous mode [ 131.486446][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.635250][ T5185] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 131.704753][ T9] device veth1_macvtap left promiscuous mode [ 131.738961][ T9] device veth0_macvtap left promiscuous mode [ 131.756926][ T9] device veth1_vlan left promiscuous mode [ 131.775951][ T9] device veth0_vlan left promiscuous mode [ 132.296957][ T9] team0 (unregistering): Port device team_slave_1 removed [ 132.332171][ T9] team0 (unregistering): Port device team_slave_0 removed [ 132.356398][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.386712][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.544607][ T9] bond0 (unregistering): Released all slaves [ 132.711400][ T5195] loop3: detected capacity change from 0 to 256 [ 132.835940][ T5198] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 132.869729][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948743][ T5195] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 133.025038][ T26] audit: type=1800 audit(1772479838.321:26): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.287" name="file1" dev="loop3" ino=1048628 res=0 errno=0 [ 133.257321][ T4192] Bluetooth: hci2: command 0x040f tx timeout [ 133.324590][ T5082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.412951][ T5212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.438893][ T5082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.511326][ T5082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.545583][ T5218] attempt to access beyond end of device [ 133.545583][ T5218] loop3: rw=16812033, want=304, limit=256 [ 133.563115][ T5082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.858020][ T5226] autofs4:pid:5226:autofs_fill_super: called with bogus options [ 133.960471][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.994305][ T5232] capability: warning: `syz.2.294' uses 32-bit capabilities (legacy support in use) [ 134.115819][ T5234] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 134.132461][ T5234] overlayfs: overlapping lowerdir path [ 135.017698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.035239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.081899][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.093748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.104290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.113843][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.121028][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.152144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.170551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.240725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.263963][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.271332][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.313632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.342687][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 135.375500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.401651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.481522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.505034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.523931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.556202][ T5082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.583754][ T5082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.617386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.655950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.684980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.706036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.730402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.812745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.328620][ T5273] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 136.348129][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.355815][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.423822][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.917811][ T4231] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.227777][ T4231] usb 5-1: device descriptor read/64, error -71 [ 137.507620][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.737715][ T4231] usb 5-1: device descriptor read/64, error -71 [ 137.858072][ T4231] usb usb5-port1: attempt power cycle [ 138.357589][ T4231] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.507752][ T4231] usb 5-1: device descriptor read/8, error -71 [ 138.867390][ T4231] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.997629][ T4231] usb 5-1: device descriptor read/8, error -71 [ 139.158656][ T4231] usb usb5-port1: unable to enumerate USB device [ 139.972825][ T4233] kernel write not supported for file /snd/pcmC0D0p (pid: 4233 comm: kworker/0:5) [ 140.041885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.081906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.200240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.220425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.253909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.295100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.329581][ T5082] device veth0_vlan entered promiscuous mode [ 140.404659][ T5082] device veth1_vlan entered promiscuous mode [ 140.971291][ T5082] device veth0_macvtap entered promiscuous mode [ 141.023631][ T5333] netlink: 64 bytes leftover after parsing attributes in process `syz.2.316'. [ 141.045375][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.088725][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.122561][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.313118][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.440843][ T5082] device veth1_macvtap entered promiscuous mode [ 141.605197][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.787537][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.067358][ T13] usb 4-1: device descriptor read/64, error -71 [ 142.311314][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.357783][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.555464][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.608360][ T13] usb 4-1: device descriptor read/64, error -71 [ 142.738071][ T13] usb usb4-port1: attempt power cycle [ 142.751970][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.927853][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.094268][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.177904][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.296222][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.307236][ T13] usb 4-1: device descriptor read/8, error -71 [ 143.529087][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.607465][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.748340][ T13] usb 4-1: device descriptor read/8, error -71 [ 143.799274][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.918043][ T13] usb usb4-port1: unable to enumerate USB device [ 143.958461][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.017560][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.028145][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.038141][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.048776][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.075080][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.129203][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.197934][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.274685][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.306356][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.330145][ T5082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.359781][ T5082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.391043][ T5082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.401016][ T5359] tmpfs: Bad value for 'mpol' [ 144.442405][ T5082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.528945][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.540631][ T5361] loop1: detected capacity change from 0 to 4 [ 144.593457][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 144.608799][ T5361] Dev loop1: unable to read RDB block 4 [ 144.643808][ T5361] loop1: unable to read partition table [ 144.692036][ T5361] loop1: partition table beyond EOD, truncated [ 144.707511][ T5361] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.765932][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.777475][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 144.792618][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.836752][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.897529][ T4231] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 144.916370][ T4231] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.961972][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.977276][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.985594][ T4231] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.038414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.047318][ T4231] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.128186][ T4231] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.191872][ T4231] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.217551][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.609852][ T5387] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.668966][ T4231] usb 4-1: usb_control_msg returned -32 [ 145.678848][ T4231] usbtmc 4-1:16.0: can't read capabilities [ 146.617906][ T1107] Bluetooth: hci5: command 0x1003 tx timeout [ 146.647363][ T5406] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 146.660770][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 146.796090][ T5409] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 146.819640][ T4231] usb 4-1: USB disconnect, device number 6 [ 146.968093][ T5412] loop2: detected capacity change from 0 to 256 [ 147.066980][ T5412] FAT-fs (loop2): Directory bread(block 64) failed [ 147.087667][ T5412] FAT-fs (loop2): Directory bread(block 65) failed [ 147.094449][ T5412] FAT-fs (loop2): Directory bread(block 66) failed [ 147.159624][ T5412] FAT-fs (loop2): Directory bread(block 67) failed [ 147.166324][ T5412] FAT-fs (loop2): Directory bread(block 68) failed [ 147.254854][ T5412] FAT-fs (loop2): Directory bread(block 69) failed [ 147.264404][ T5412] FAT-fs (loop2): Directory bread(block 70) failed [ 147.284953][ T5412] FAT-fs (loop2): Directory bread(block 71) failed [ 147.292841][ T5412] FAT-fs (loop2): Directory bread(block 72) failed [ 147.306160][ T5412] FAT-fs (loop2): Directory bread(block 73) failed [ 148.710873][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 148.718540][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 149.483485][ T5456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.562588][ T5456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.615022][ T5456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.823240][ T5463] netlink: 64 bytes leftover after parsing attributes in process `syz.5.331'. [ 150.980707][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 151.040585][ T5456] team0: Port device bond1 removed [ 151.211075][ T5480] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 152.255895][ T5504] autofs4:pid:5504:autofs_fill_super: called with bogus options [ 152.435782][ T5513] netlink: 64 bytes leftover after parsing attributes in process `syz.3.344'. [ 153.707988][ T5532] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 154.427551][ T4229] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.657498][ T4229] usb 6-1: device descriptor read/64, error -71 [ 155.207414][ T4229] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 155.817755][ T4229] usb 6-1: device descriptor read/64, error -71 [ 155.948117][ T4229] usb usb6-port1: attempt power cycle [ 156.357578][ T4229] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.507744][ T4229] usb 6-1: device descriptor read/8, error -71 [ 156.847636][ T4229] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 156.980874][ T4229] usb 6-1: device descriptor read/8, error -71 [ 157.228994][ T4229] usb usb6-port1: unable to enumerate USB device [ 160.323648][ T5590] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 161.743025][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.760320][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.019541][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.352078][ T5631] loop2: detected capacity change from 0 to 512 [ 162.713794][ T5631] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 162.735605][ T5631] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.659182][ T26] audit: type=1800 audit(1772479868.961:27): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.358" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 164.780417][ T5655] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 168.523610][ T5709] fuse: Unknown parameter '0x00000000000000050x0000000000000006' [ 168.565452][ T5713] loop4: detected capacity change from 0 to 512 [ 168.701459][ T5713] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 168.717607][ T5713] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.850197][ T5724] loop5: detected capacity change from 0 to 256 [ 168.878922][ T26] audit: type=1800 audit(1772479874.181:28): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.386" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 169.032229][ T5724] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 169.135756][ T26] audit: type=1800 audit(1772479874.431:29): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.370" name="file1" dev="loop5" ino=1048631 res=0 errno=0 [ 169.563751][ T5744] attempt to access beyond end of device [ 169.563751][ T5744] loop5: rw=16812033, want=304, limit=256 [ 171.183762][ T5765] 9pnet_virtio: no channels available for device syz [ 171.293261][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 171.562462][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 171.606371][ T5780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 172.002965][ T5747] loop4: detected capacity change from 0 to 40427 [ 172.083509][ T5747] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 172.132905][ T5747] F2FS-fs (loop4): invalid crc value [ 172.205827][ T5747] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.579777][ T5747] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.722311][ T5747] attempt to access beyond end of device [ 172.722311][ T5747] loop4: rw=2049, want=45104, limit=40427 [ 172.988030][ T5747] attempt to access beyond end of device [ 172.988030][ T5747] loop4: rw=2049, want=45112, limit=40427 [ 173.893629][ T5828] loop5: detected capacity change from 0 to 256 [ 174.032640][ T5828] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 174.150419][ T26] audit: type=1800 audit(1772479879.451:30): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.404" name="file1" dev="loop5" ino=1048632 res=0 errno=0 [ 174.697466][ T4233] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 175.126807][ T5838] attempt to access beyond end of device [ 175.126807][ T5838] loop5: rw=16812033, want=304, limit=256 [ 175.577362][ T4233] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 175.584979][ T4233] usb 5-1: can't read configurations, error -61 [ 175.817357][ T4233] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.367887][ T4233] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 176.405364][ T4233] usb 5-1: can't read configurations, error -61 [ 176.546041][ T4233] usb usb5-port1: attempt power cycle [ 177.118125][ T4233] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 177.347430][ T4233] usb 5-1: device descriptor read/8, error -71 [ 179.202774][ T5863] qnx6: unable to read the first superblock [ 183.097522][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.507477][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.584582][ T23] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 183.858064][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.949983][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.085471][ T23] usb 4-1: SerialNumber: syz [ 185.601001][ T23] usb 4-1: USB disconnect, device number 7 [ 185.738607][ T5941] netlink: 592 bytes leftover after parsing attributes in process `syz.3.424'. [ 186.491530][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.706132][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.865454][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.239400][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.526103][ T5993] tipc: Started in network mode [ 187.571096][ T5993] tipc: Node identity 12c0d97777f, cluster identity 4711 [ 187.626573][ T5993] tipc: Enabled bearer , priority 0 [ 187.744549][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 187.825062][ T5991] tipc: Disabling bearer [ 188.255441][ T6007] netlink: 'syz.5.433': attribute type 21 has an invalid length. [ 188.302283][ T6007] netlink: 132 bytes leftover after parsing attributes in process `syz.5.433'. [ 188.377407][ T4251] Bluetooth: hci4: command 0x0409 tx timeout [ 188.673065][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.707364][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.732223][ T5957] device bridge_slave_0 entered promiscuous mode [ 188.741218][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.892083][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.924745][ T5957] device bridge_slave_1 entered promiscuous mode [ 188.994557][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.026680][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.216673][ T5957] team0: Port device team_slave_0 added [ 189.609802][ T5957] team0: Port device team_slave_1 added [ 189.931957][ T6044] usb usb8: usbfs: process 6044 (syz.3.442) did not claim interface 0 before use [ 190.057066][ T4269] Bluetooth: hci5: command 0x0409 tx timeout [ 190.736830][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 191.386776][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 191.466626][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 191.508420][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.535876][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.569104][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.698822][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.746808][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.780765][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.930564][ T5998] chnl_net:caif_netlink_parms(): no params data found [ 191.984797][ T5957] device hsr_slave_0 entered promiscuous mode [ 192.000080][ T5957] device hsr_slave_1 entered promiscuous mode [ 192.096767][ T5957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.137378][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 192.155471][ T5957] Cannot create hsr debugfs directory [ 192.761492][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.788751][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.832015][ T5998] device bridge_slave_0 entered promiscuous mode [ 192.926829][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.951921][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.057780][ T5998] device bridge_slave_1 entered promiscuous mode [ 193.147502][ T4251] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 193.214073][ T5998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.300409][ T5998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.426516][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 193.456589][ T5998] team0: Port device team_slave_0 added [ 193.525420][ T5998] team0: Port device team_slave_1 added [ 193.536185][ T5957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.702331][ T5957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.738770][ T4251] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.797529][ T4251] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 193.819070][ T4251] usb 4-1: can't read configurations, error -71 [ 193.848409][ T9] device hsr_slave_0 left promiscuous mode [ 193.865300][ T9] device hsr_slave_1 left promiscuous mode [ 193.887634][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.912335][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.942253][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.966301][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.995336][ T9] device bridge_slave_1 left promiscuous mode [ 194.016609][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.036832][ T9] device bridge_slave_0 left promiscuous mode [ 194.044602][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.073101][ T9] device veth1_macvtap left promiscuous mode [ 194.085983][ T9] device veth0_macvtap left promiscuous mode [ 194.096542][ T9] device veth1_vlan left promiscuous mode [ 194.111612][ T9] device veth0_vlan left promiscuous mode [ 194.219085][ T4233] Bluetooth: hci5: command 0x040f tx timeout [ 194.310135][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.172867][ T9] team0 (unregistering): Port device team_slave_1 removed [ 195.218275][ T9] team0 (unregistering): Port device team_slave_0 removed [ 195.424809][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.497767][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 195.578063][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.276418][ T9] bond0 (unregistering): Released all slaves [ 196.297530][ T4251] Bluetooth: hci5: command 0x0419 tx timeout [ 196.419785][ T5957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.444568][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.455226][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.539136][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.621255][ T5957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.658218][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.665333][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.691432][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.748802][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.924708][ T5998] device hsr_slave_0 entered promiscuous mode [ 197.062028][ T5998] device hsr_slave_1 entered promiscuous mode [ 197.083431][ T5998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.097502][ T5998] Cannot create hsr debugfs directory [ 197.129745][ T6142] tmpfs: Unknown parameter 'usrquota' [ 197.222951][ T6144] autofs4:pid:6144:autofs_fill_super: called with bogus options [ 197.326991][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.383660][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.401158][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.457002][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.529647][ T6156] loop4: detected capacity change from 0 to 256 [ 197.540192][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.565073][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.579924][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.587299][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.615333][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.634695][ T6156] FAT-fs (loop4): Directory bread(block 64) failed [ 197.657388][ T6156] FAT-fs (loop4): Directory bread(block 65) failed [ 197.684647][ T6156] FAT-fs (loop4): Directory bread(block 66) failed [ 197.705958][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.719570][ T6156] FAT-fs (loop4): Directory bread(block 67) failed [ 197.758765][ T6156] FAT-fs (loop4): Directory bread(block 68) failed [ 197.759694][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.765477][ T6156] FAT-fs (loop4): Directory bread(block 69) failed [ 197.772778][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.791622][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.803457][ T6156] FAT-fs (loop4): Directory bread(block 70) failed [ 197.820646][ T6156] FAT-fs (loop4): Directory bread(block 71) failed [ 197.826933][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.848184][ T6156] FAT-fs (loop4): Directory bread(block 72) failed [ 197.870729][ T6156] FAT-fs (loop4): Directory bread(block 73) failed [ 197.887006][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.904998][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.935823][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.971831][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.990800][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.012014][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.038827][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.064105][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.109073][ T5957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.162358][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.196857][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.421143][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.900273][ T5998] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.921323][ T5998] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.940988][ T5998] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 198.958162][ T5998] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.028415][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.036177][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.341317][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.527338][ T4233] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 199.947660][ T4233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.060001][ T4233] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.347775][ T4233] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.495265][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.645333][ T4233] usb 6-1: SerialNumber: syz [ 202.645072][ T4233] usb 6-1: USB disconnect, device number 6 [ 202.691936][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.764403][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.5.477'. [ 202.830182][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.889882][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.949020][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.066089][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.097007][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.179714][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.186985][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.314915][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.328435][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.338261][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.345371][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.725311][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.738962][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.180445][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.201825][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.216582][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.228982][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.271167][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.437064][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.467626][ T6228] loop3: detected capacity change from 0 to 256 [ 205.677006][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.710743][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.470191][ T6228] FAT-fs (loop3): Directory bread(block 64) failed [ 206.476831][ T6228] FAT-fs (loop3): Directory bread(block 65) failed [ 206.507614][ T6228] FAT-fs (loop3): Directory bread(block 66) failed [ 206.532581][ T6228] FAT-fs (loop3): Directory bread(block 67) failed [ 206.543187][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.579197][ T6228] FAT-fs (loop3): Directory bread(block 68) failed [ 206.588015][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.604624][ T6228] FAT-fs (loop3): Directory bread(block 69) failed [ 206.616482][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.636807][ T6228] FAT-fs (loop3): Directory bread(block 70) failed [ 206.650479][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.660849][ T6228] FAT-fs (loop3): Directory bread(block 71) failed [ 206.687328][ T6228] FAT-fs (loop3): Directory bread(block 72) failed [ 206.706680][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.800246][ T6230] infiniband : set active [ 206.804962][ T6230] infiniband : added veth0_vlan [ 206.817564][ T6230] infiniband : Couldn't open port 1 [ 206.864391][ T6230] RDS/IB: : added [ 206.868681][ T6230] smc: adding ib device  with port count 1 [ 206.874739][ T6230] smc: ib device  port 1 has pnetid [ 207.334413][ T6228] FAT-fs (loop3): Directory bread(block 73) failed [ 207.536264][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.090812][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.102386][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.113905][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.169239][ T5957] device veth0_vlan entered promiscuous mode [ 208.272634][ T5957] device veth1_vlan entered promiscuous mode [ 208.428750][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.449669][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.488043][ T5957] device veth0_macvtap entered promiscuous mode [ 208.516915][ T5957] device veth1_macvtap entered promiscuous mode [ 209.656327][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.755138][ T6250] loop3: detected capacity change from 0 to 512 [ 209.793532][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.844844][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.923394][ T6250] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 209.977311][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.021998][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.037464][ T6250] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.095694][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.162673][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.206253][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.222635][ T26] audit: type=1800 audit(1772479915.521:31): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.484" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 210.275134][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.334842][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.358119][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.400169][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.453266][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.532585][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.574396][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.607251][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.657365][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.718436][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.827023][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.855219][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.934232][ T5957] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.040899][ T5957] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.221764][ T5957] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.328397][ T5957] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.507469][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.701052][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.761146][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.927062][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.927677][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.090151][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.287892][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.374157][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.484797][ T7] usb 4-1: SerialNumber: syz [ 213.727358][ T1107] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.958305][ T7] usb 4-1: USB disconnect, device number 10 [ 213.997268][ T1107] usb 6-1: Using ep0 maxpacket: 16 [ 214.007496][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.073020][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.117895][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 214.144231][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.199654][ T5851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.231982][ T5851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.299550][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.331961][ T1107] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.363703][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.396986][ T1107] usb 6-1: Product: syz [ 214.402518][ T1107] usb 6-1: Manufacturer: syz [ 214.427746][ T1107] usb 6-1: SerialNumber: syz [ 214.474249][ T1107] usb 6-1: config 0 descriptor?? [ 214.529321][ T1107] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.547956][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.572576][ T1107] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 214.658531][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.752145][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.852120][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.915510][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.928668][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.972992][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.982191][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.000751][ T5998] device veth0_vlan entered promiscuous mode [ 215.012066][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.035536][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.072284][ T5998] device veth1_vlan entered promiscuous mode [ 215.125619][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.141040][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.153363][ T5998] device veth0_macvtap entered promiscuous mode [ 215.173327][ T5998] device veth1_macvtap entered promiscuous mode [ 215.187469][ T1107] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 215.239016][ T5998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.256771][ T5998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.268036][ T5998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.280183][ T5998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.290587][ T5998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.301558][ T5998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.320699][ T5998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.343127][ T5998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.372044][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.396304][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.445328][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.474779][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.490329][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.535559][ T6296] input: syz1 as /devices/virtual/input/input5 [ 215.559110][ T5998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.591618][ T5998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.650424][ T5998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.671840][ T5998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.691210][ T5998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.701978][ T5998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.712659][ T1107] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 215.726037][ T5998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.733600][ T1107] em28xx 6-1:0.0: board has no eeprom [ 215.773875][ T5998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.816499][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.850452][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.879331][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.919577][ T5998] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.971485][ T5998] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.986971][ T5998] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.015058][ T5998] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.087443][ T1107] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 216.106306][ T1107] em28xx 6-1:0.0: dvb set to bulk mode. [ 216.135254][ T7] em28xx 6-1:0.0: Binding DVB extension [ 216.172621][ T1107] usb 6-1: USB disconnect, device number 7 [ 216.244666][ T1107] em28xx 6-1:0.0: Disconnecting em28xx [ 216.398948][ T7] em28xx 6-1:0.0: Registering input extension [ 216.424167][ T1107] em28xx 6-1:0.0: Closing input extension [ 216.622847][ T1107] em28xx 6-1:0.0: Freeing device [ 216.782225][ T6319] loop5: detected capacity change from 0 to 512 [ 216.900666][ T6319] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 216.967561][ T6319] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.834413][ T26] audit: type=1800 audit(1772479923.131:32): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.493" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 218.361353][ T5851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.393426][ T5851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.446930][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.512567][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.574201][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.704741][ T4203] Bluetooth: hci4: Received unexpected HCI Event 00000000 [ 218.741696][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.161453][ T6358] loop6: detected capacity change from 0 to 256 [ 219.413049][ T6358] FAT-fs (loop6): Directory bread(block 64) failed [ 219.428301][ T6364] binder: 6363:6364 ioctl c0306201 2000000003c0 returned -14 [ 219.456827][ T6358] FAT-fs (loop6): Directory bread(block 65) failed [ 219.477726][ T6358] FAT-fs (loop6): Directory bread(block 66) failed [ 219.484631][ T6358] FAT-fs (loop6): Directory bread(block 67) failed [ 219.503581][ T6358] FAT-fs (loop6): Directory bread(block 68) failed [ 219.551555][ T6358] FAT-fs (loop6): Directory bread(block 69) failed [ 219.717698][ T6358] FAT-fs (loop6): Directory bread(block 70) failed [ 219.725926][ T6358] FAT-fs (loop6): Directory bread(block 71) failed [ 219.781699][ T6358] FAT-fs (loop6): Directory bread(block 72) failed [ 219.803175][ T6358] FAT-fs (loop6): Directory bread(block 73) failed [ 221.645576][ T9] device hsr_slave_0 left promiscuous mode [ 221.666111][ T9] device hsr_slave_1 left promiscuous mode [ 221.918079][ T9] device veth1_macvtap left promiscuous mode [ 221.924233][ T9] device veth0_macvtap left promiscuous mode [ 222.450609][ T9] device veth1_vlan left promiscuous mode [ 222.509524][ T9] device veth0_vlan left promiscuous mode [ 223.385631][ T9] bond1 (unregistering): Released all slaves [ 223.568514][ T6399] loop5: detected capacity change from 0 to 512 [ 223.856044][ T6399] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 223.879761][ T6399] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.920088][ T26] audit: type=1800 audit(1772479929.221:33): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.506" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 225.091501][ T9] bond0 (unregistering): Released all slaves [ 227.467174][ T26] audit: type=1326 audit(1772479932.761:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.6.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bf029799 code=0x7ffc0000 [ 227.493203][ T26] audit: type=1326 audit(1772479932.761:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.6.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bf029799 code=0x7ffc0000 [ 227.524780][ T6432] netlink: 40 bytes leftover after parsing attributes in process `syz.6.512'. [ 231.332214][ T6472] loop3: detected capacity change from 0 to 512 [ 231.602860][ T6472] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 231.755023][ T6472] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.807995][ T26] audit: type=1800 audit(1772479937.111:36): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.518" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 235.429631][ T4203] ================================================================== [ 235.438508][ T4203] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 235.446518][ T4203] Read of size 1 at addr ffff88807ad7f40a by task kworker/u5:8/4203 [ 235.454668][ T4203] [ 235.457035][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 235.464695][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.474898][ T4203] Workqueue: hci0 hci_rx_work [ 235.479838][ T4203] Call Trace: [ 235.483149][ T4203] [ 235.486118][ T4203] dump_stack_lvl+0x188/0x250 [ 235.490958][ T4203] ? show_regs_print_info+0x20/0x20 [ 235.496243][ T4203] ? load_image+0x400/0x400 [ 235.500784][ T4203] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 235.506469][ T4203] ? mutex_lock_io_nested+0x60/0x60 [ 235.511741][ T4203] print_address_description+0x60/0x2d0 [ 235.517326][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 235.522484][ T4203] kasan_report+0xdf/0x130 [ 235.526944][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 235.532335][ T4203] hci_le_meta_evt+0x1324/0x3c90 [ 235.537437][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 235.543549][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 235.549223][ T4203] ? mark_lock+0x94/0x320 [ 235.553682][ T4203] ? mutex_unlock+0x10/0x10 [ 235.558660][ T4203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 235.564774][ T4203] ? lock_chain_count+0x20/0x20 [ 235.569672][ T4203] ? __rwlock_init+0x140/0x140 [ 235.574494][ T4203] hci_event_packet+0xe48/0x1370 [ 235.579486][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 235.584815][ T4203] ? rcu_lock_release+0x20/0x20 [ 235.589856][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 235.595123][ T4203] hci_rx_work+0x255/0xa10 [ 235.599615][ T4203] process_one_work+0x85f/0x1010 [ 235.604945][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 235.611002][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 235.616342][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 235.621439][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 235.627265][ T4203] ? wq_worker_running+0x97/0x170 [ 235.632828][ T4203] worker_thread+0xaa6/0x1290 [ 235.637590][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 235.642931][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 235.648894][ T4203] kthread+0x436/0x520 [ 235.653207][ T4203] ? rcu_lock_release+0x20/0x20 [ 235.658551][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 235.663286][ T4203] ret_from_fork+0x1f/0x30 [ 235.667873][ T4203] [ 235.670938][ T4203] [ 235.673456][ T4203] Allocated by task 6516: [ 235.677913][ T4203] __kasan_kmalloc+0xb5/0xf0 [ 235.682864][ T4203] __alloc_skb+0x22c/0x750 [ 235.687340][ T4203] vhci_write+0xbc/0x450 [ 235.691641][ T4203] vfs_write+0x745/0xd60 [ 235.695942][ T4203] ksys_write+0x152/0x260 [ 235.700399][ T4203] do_syscall_64+0x4c/0xa0 [ 235.704855][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.710790][ T4203] [ 235.713252][ T4203] The buggy address belongs to the object at ffff88807ad7f000 [ 235.713252][ T4203] which belongs to the cache kmalloc-1k of size 1024 [ 235.727436][ T4203] The buggy address is located 10 bytes to the right of [ 235.727436][ T4203] 1024-byte region [ffff88807ad7f000, ffff88807ad7f400) [ 235.741386][ T4203] The buggy address belongs to the page: [ 235.747394][ T4203] page:ffffea0001eb5e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ad78 [ 235.757785][ T4203] head:ffffea0001eb5e00 order:3 compound_mapcount:0 compound_pincount:0 [ 235.766223][ T4203] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 235.774337][ T4203] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 235.783380][ T4203] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 235.792279][ T4203] page dumped because: kasan: bad access detected [ 235.798884][ T4203] page_owner tracks the page as allocated [ 235.804634][ T4203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4351, ts 83591389281, free_ts 83506848892 [ 235.824655][ T4203] get_page_from_freelist+0x1bbd/0x1ca0 [ 235.830445][ T4203] __alloc_pages+0x1ee/0x480 [ 235.835363][ T4203] new_slab+0xc0/0x4b0 [ 235.839485][ T4203] ___slab_alloc+0x80a/0xdd0 [ 235.844220][ T4203] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 235.850421][ T4203] __alloc_skb+0x22c/0x750 [ 235.855062][ T4203] __pskb_copy_fclone+0xa7/0x10a0 [ 235.860128][ T4203] tipc_sk_mcast_rcv+0x5cf/0xf10 [ 235.865100][ T4203] tipc_mcast_xmit+0x1228/0x1890 [ 235.870160][ T4203] tipc_send_group_bcast+0x806/0xad0 [ 235.875566][ T4203] __tipc_sendmsg+0x338/0x2bf0 [ 235.880369][ T4203] tipc_sendmsg+0x51/0x70 [ 235.884855][ T4203] ____sys_sendmsg+0x5b7/0x8f0 [ 235.889651][ T4203] ___sys_sendmsg+0x236/0x2e0 [ 235.894465][ T4203] __sys_sendmmsg+0x2ba/0x500 [ 235.899214][ T4203] __x64_sys_sendmmsg+0x9c/0xb0 [ 235.904106][ T4203] page last free stack trace: [ 235.908819][ T4203] free_unref_page_prepare+0x637/0x6c0 [ 235.914313][ T4203] free_unref_page+0x8f/0x2a0 [ 235.919031][ T4203] __unfreeze_partials+0x1a5/0x200 [ 235.924169][ T4203] put_cpu_partial+0x12d/0x190 [ 235.928964][ T4203] qlist_free_all+0x35/0x90 [ 235.933754][ T4203] kasan_quarantine_reduce+0x150/0x160 [ 235.939263][ T4203] __kasan_slab_alloc+0x2f/0xd0 [ 235.944162][ T4203] slab_post_alloc_hook+0x4c/0x380 [ 235.949484][ T4203] __kmalloc_node+0x15a/0x3b0 [ 235.954211][ T4203] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 235.960138][ T4203] new_slab+0x100/0x4b0 [ 235.964322][ T4203] ___slab_alloc+0x80a/0xdd0 [ 235.968941][ T4203] __kmalloc_node+0x200/0x3b0 [ 235.973657][ T4203] kvmalloc_node+0x84/0x130 [ 235.978273][ T4203] seq_read_iter+0x1f6/0xd50 [ 235.982903][ T4203] vfs_read+0x759/0xd60 [ 235.987099][ T4203] [ 235.989554][ T4203] Memory state around the buggy address: [ 235.995384][ T4203] ffff88807ad7f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.003555][ T4203] ffff88807ad7f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.011964][ T4203] >ffff88807ad7f400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.020269][ T4203] ^ [ 236.024836][ T4203] ffff88807ad7f480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.033323][ T4203] ffff88807ad7f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.041849][ T4203] ================================================================== [ 236.050702][ T4203] Disabling lock debugging due to kernel taint [ 236.063096][ T4203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 236.070538][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:8 Tainted: G B syzkaller #0 [ 236.079690][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.090364][ T4203] Workqueue: hci0 hci_rx_work [ 236.095187][ T4203] Call Trace: [ 236.098598][ T4203] [ 236.101583][ T4203] dump_stack_lvl+0x188/0x250 [ 236.106311][ T4203] ? show_regs_print_info+0x20/0x20 [ 236.111836][ T4203] ? load_image+0x400/0x400 [ 236.116384][ T4203] panic+0x2e5/0x810 [ 236.120409][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 236.125034][ T4203] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 236.131137][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 236.136108][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 236.141262][ T4203] check_panic_on_warn+0x80/0xa0 [ 236.146428][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 236.151658][ T4203] end_report+0x6d/0xf0 [ 236.155949][ T4203] kasan_report+0x102/0x130 [ 236.160575][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 236.165819][ T4203] hci_le_meta_evt+0x1324/0x3c90 [ 236.170893][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 236.176998][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 236.182938][ T4203] ? mark_lock+0x94/0x320 [ 236.187310][ T4203] ? mutex_unlock+0x10/0x10 [ 236.192041][ T4203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 236.198175][ T4203] ? lock_chain_count+0x20/0x20 [ 236.203119][ T4203] ? __rwlock_init+0x140/0x140 [ 236.208307][ T4203] hci_event_packet+0xe48/0x1370 [ 236.213390][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 236.218634][ T4203] ? rcu_lock_release+0x20/0x20 [ 236.223625][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 236.228957][ T4203] hci_rx_work+0x255/0xa10 [ 236.233597][ T4203] process_one_work+0x85f/0x1010 [ 236.238673][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 236.244348][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 236.249773][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 236.255093][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 236.261117][ T4203] ? wq_worker_running+0x97/0x170 [ 236.266178][ T4203] worker_thread+0xaa6/0x1290 [ 236.270986][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 236.276224][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 236.282264][ T4203] kthread+0x436/0x520 [ 236.286465][ T4203] ? rcu_lock_release+0x20/0x20 [ 236.291357][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 236.296054][ T4203] ret_from_fork+0x1f/0x30 [ 236.300725][ T4203] [ 236.304041][ T4203] Kernel Offset: disabled [ 236.308676][ T4203] Rebooting in 86400 seconds..