last executing test programs: 2m2.328268648s ago: executing program 2 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x80000000, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m1.879743145s ago: executing program 2 (id=244): openat$comedi(0xffffffffffffff9c, 0x0, 0x53be81, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x200006e64, 0x80040) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000380)=""/88) 1m58.064915937s ago: executing program 2 (id=250): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x0, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0xfffffffd, 0x50, 0x3c5b, 0x5, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0xfffffffe, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0x2e, 0x0, 0x8000806e, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x6, 0x3, 0x2, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x3ff, 0x6, 0x9, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x800004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8010, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x7, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x1, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa0, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x9, 0x938, 0x6, 0x40, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x103, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8000006, 0x16, 0xffffffff, 0x80000000, 0x1005, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xe8a5, 0xa, 0xaf, 0x8, 0x3, 0x226, 0x4, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1b, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x5c0a, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x32}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m55.625109921s ago: executing program 2 (id=252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x1000c0d0) recvmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="8f952efe5d802cb485557699470dc6667d89ffd7013628a8475559ce6bcbac99b557757713eb6da39f34c2317b8549bf1fbf40f73c14d321fa611dd91e4e512f938e14b7e5ff4ee488834368a17acf8b2f5b3ab5e586917c1a4afa23901c445babad2277040db1d0952fc59a212840687e6ff912dad461b80def1333b3d80a3db8ca76bf5d9cf095b84e83bf5c6df4d5edf451c3859667e1810b0717090077573c7c48d8f01d86221f4440e5e204c7442a9c0637cfc00c0db30810717ff4ef3270f2a46a640c665146579ea7331aaf4d5841013c14c42661e7788aa87619b250", 0xe0}, {&(0x7f00000005c0)="1bc3f3514ebbbf6fbcbd0f4d26186633e324582f54db7f80bf7b0e52f575b8d82897f6de9515556188fb8f934f5f1c009449667f8837823e178c995236e5f766758cef1fcc816e0c97825f9d06000ed66c382616bfbf27ec4c35cf8d435c261286493910ed2c37c898a22e8c19d5a745f913fdd82ced9438c7d4a468828fcd3d", 0x80}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x400c800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x44800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008"], 0x50}}, 0x4000850) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x20000040) socket$key(0xf, 0x3, 0x2) 1m47.762570163s ago: executing program 2 (id=265): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) 1m44.238412427s ago: executing program 2 (id=269): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x1, 0x400}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001100)={0x11, @loopback, 0x4e20, 0x0, 'lc\x00', 0x28, 0x4f, 0x2f}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1m28.242254627s ago: executing program 32 (id=269): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x1, 0x400}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001100)={0x11, @loopback, 0x4e20, 0x0, 'lc\x00', 0x28, 0x4f, 0x2f}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 17.826662615s ago: executing program 1 (id=453): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r1, &(0x7f0000000440)=""/4085, 0x104a) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000000c0)) r2 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_open_dev$amidi(&(0x7f0000000140), 0x3, 0x14080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) 16.260709766s ago: executing program 1 (id=454): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0xdffaa000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f00000008c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100040000000400000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 14.594653271s ago: executing program 5 (id=457): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000121700010025bd7000fddbdf25011f08104e264e2200000000000000000e000000c3000000060000000e0000000000004007", @ANYRES32=0x0, @ANYBLOB="010000000400000009000000c7000000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2}) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x149a82, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x20040000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 13.526420378s ago: executing program 3 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x28102, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x10, 0x10, 0x10, 0x0, 0x25dfdbfe}, 0x10}], 0x1}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 11.913867576s ago: executing program 0 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) uname(&(0x7f0000000200)=""/133) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x100000000000000, 0x1000001000, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x9464}, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 10.862427062s ago: executing program 5 (id=462): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000100)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket(0x22, 0x2, 0x3) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r2 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000ffdbdf240a400000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff000000000800080009030000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 9.16667572s ago: executing program 1 (id=465): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103800, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000b00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) 9.16635445s ago: executing program 0 (id=466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000100000000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r2, 0x25, 0x2, @val=@netkit}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @tipc_packet={0xc, 0x6, "a32e48", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @empty}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3, 0x2, 0x8, 0x0, 0x0, 0x9, 0x2, 0x0, 0x7ff, 0xd, 0x3, 0x4e24, 0x4e24}}}}}}}}, 0x0) 9.053657494s ago: executing program 5 (id=467): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2000}) 8.551859819s ago: executing program 0 (id=468): syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r2, 0x0, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r2}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(0x0, r3, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) 8.438735634s ago: executing program 5 (id=469): socket$alg(0x26, 0x5, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(0x0, 0x4, 0xf, 0x0) 8.376139232s ago: executing program 1 (id=471): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000"], 0x0, 0x56}, 0x28) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006210600903900"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4004890}, 0xc080) 8.050702933s ago: executing program 3 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x1, 0x0, 0x37}, @fd}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@clear_death], 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 7.635229397s ago: executing program 5 (id=473): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0xdffaa000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f00000008c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100040000000400000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 7.15059426s ago: executing program 0 (id=475): syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.690303039s ago: executing program 3 (id=476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1a0941, 0x190) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.762301347s ago: executing program 4 (id=477): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x0, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0xfffffffd, 0x50, 0x3c5b, 0x5, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0xfffffffe, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0x2e, 0x0, 0x8000806e, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x6, 0x3, 0x2, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x3ff, 0x6, 0x9, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x800004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8010, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x7, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x1, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa0, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x9, 0x938, 0x6, 0x40, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x103, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8000006, 0x16, 0xffffffff, 0x80000000, 0x1005, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xe8a5, 0xa, 0xaf, 0x8, 0x3, 0x226, 0x4, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1b, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x5c0a, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x32}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.695686326s ago: executing program 5 (id=478): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000007c0)={@multicast1, @empty}, &(0x7f0000000800)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x26000080) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x300) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0)="8b9c8a7ada", 0x0}, 0x20) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 4.394796994s ago: executing program 0 (id=479): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0x14, 0x1c, "812f1afa76ad463b0d2b881641879504dff1f277ca702003c12b5af5"}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x8}}) 4.057415858s ago: executing program 4 (id=480): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x2, 0x0, 0xffe9, 0x5, 0x4, 0xb, 0x1f, "76d7e550d170a66d91f7b5968a5ab637417ff7f3", "02d4838033ead128c6f5a984e70f095f63a0acd9"}) 3.948880012s ago: executing program 4 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[], 0xfffffe0b) 3.65309795s ago: executing program 3 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x28102, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x10, 0x10, 0x10, 0x0, 0x25dfdbfe}, 0x10}], 0x1}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.87626824s ago: executing program 4 (id=483): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]}) 2.603176035s ago: executing program 4 (id=484): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setreuid(0x0, 0xee00) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, 0x0) 1.702503141s ago: executing program 3 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {0x0, 0xfffffffd, 0xfffffffe}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.594618845s ago: executing program 4 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000051}, 0x40408c0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r4 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3a, 0x7, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_open_dev$sndctrl(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 555.383629ms ago: executing program 3 (id=487): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) write$binfmt_script(r0, 0x0, 0x0) 31.983236ms ago: executing program 0 (id=488): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r4, 0xdffaa000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f00000008c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100040000000400000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 0s ago: executing program 1 (id=489): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x0, 0x1, 0x0, &(0x7f0000000c40), 0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640), &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000d80)={r5, 0x2}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x4c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 63.996419][ T4173] cgroup: Unknown subsys name 'net' [ 64.137493][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.642129][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.134488][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.212535][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 67.282797][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 67.301495][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.340476][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.350441][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.359270][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.368138][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.403548][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.410685][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.418895][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.496401][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.512810][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.519909][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.528243][ T4195] device bridge_slave_0 entered promiscuous mode [ 67.548110][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.577470][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.584763][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.593456][ T4195] device bridge_slave_1 entered promiscuous mode [ 67.600655][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.608122][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.616470][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.627719][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.635063][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.643427][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.653579][ T4186] team0: Port device team_slave_0 added [ 67.659621][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.667754][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.676055][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.689610][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.696811][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.705172][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.717825][ T4186] team0: Port device team_slave_1 added [ 67.766402][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.777633][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.802750][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.822014][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.833064][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.850622][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.860224][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.867980][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.876466][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.885769][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.892867][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.919206][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.951479][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.958591][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.966993][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.974645][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.982025][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.008006][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.022869][ T4195] team0: Port device team_slave_0 added [ 68.048810][ T4196] team0: Port device team_slave_0 added [ 68.062395][ T4195] team0: Port device team_slave_1 added [ 68.085399][ T4185] team0: Port device team_slave_0 added [ 68.093513][ T4196] team0: Port device team_slave_1 added [ 68.107331][ T4185] team0: Port device team_slave_1 added [ 68.124637][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.131846][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.158238][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.190702][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.208004][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.215289][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.241272][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.266118][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.278886][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.305457][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.326666][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.363880][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.370901][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.396986][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.409651][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.416953][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.443310][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.459367][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.466787][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.476519][ T4191] team0: Port device team_slave_0 added [ 68.487750][ T4195] device hsr_slave_0 entered promiscuous mode [ 68.495208][ T4195] device hsr_slave_1 entered promiscuous mode [ 68.502153][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.509936][ T4195] Cannot create hsr debugfs directory [ 68.521233][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.528214][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.554404][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.571981][ T4191] team0: Port device team_slave_1 added [ 68.605018][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.612070][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.638145][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.682824][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.689895][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.717097][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.754854][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.761867][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.768796][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.776522][ T4196] Cannot create hsr debugfs directory [ 68.797403][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.804481][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 68.811623][ T3577] Bluetooth: hci2: command 0x0409 tx timeout [ 68.813329][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 68.824385][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.831458][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.839062][ T4185] Cannot create hsr debugfs directory [ 68.881179][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 68.891406][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 68.910173][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.917436][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.924744][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.932717][ T4191] Cannot create hsr debugfs directory [ 69.223687][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.237032][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.253503][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.268950][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.313133][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.327436][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.352576][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.362415][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.418301][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.428087][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.442825][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.462259][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.536451][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.548149][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.573347][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.583679][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.605083][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.665229][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.676555][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.687838][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.717417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.727005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.736934][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.744274][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.755720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.766845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.776696][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.783882][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.792609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.818960][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.828078][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.848111][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.858924][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.876776][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.889674][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.905498][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.929069][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.937225][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.945571][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.954998][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.965300][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.974238][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.981606][ T627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.989787][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.999714][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.008718][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.015953][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.024390][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.033811][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.042828][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.052157][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.075734][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.100507][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.114097][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.125977][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.134748][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.144861][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.154156][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.163648][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.173678][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.182755][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.191849][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.200272][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.210442][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.218718][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.227039][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.236232][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.245398][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.262591][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.289953][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.300772][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.309450][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.319365][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.328864][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.336007][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.349484][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.373681][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.385148][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.393900][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.434711][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.443967][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.461886][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.469282][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.486997][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.496840][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.519668][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.549608][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.568430][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.579509][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.589051][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.601930][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.610501][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.623904][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.640148][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.656296][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.674718][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.707490][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.722793][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.746310][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.793656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.802603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.839126][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.855005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.865585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.875588][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.882747][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.883238][ T3577] Bluetooth: hci0: command 0x041b tx timeout [ 70.894950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.906978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.915533][ T3577] Bluetooth: hci2: command 0x041b tx timeout [ 70.919437][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.928690][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.938151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.946310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.951551][ T3577] Bluetooth: hci1: command 0x041b tx timeout [ 70.955677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.977639][ T3577] Bluetooth: hci4: command 0x041b tx timeout [ 70.984018][ T3577] Bluetooth: hci3: command 0x041b tx timeout [ 71.003021][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.022650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.032707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.043246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.054290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.064889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.088641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.103391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.118553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.135806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.146966][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.163625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.172779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.214881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.223775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.233379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.243286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.252235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.260737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.269424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.277488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.287491][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294163][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.306409][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.314868][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.334136][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.345221][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.353475][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.365937][ T4186] device veth0_vlan entered promiscuous mode [ 71.387754][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.404248][ T4195] device veth0_vlan entered promiscuous mode [ 71.432024][ T4186] device veth1_vlan entered promiscuous mode [ 71.440959][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.462554][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.481954][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.497928][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.510886][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.523493][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.530632][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.539710][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.548906][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.557617][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.573508][ T4195] device veth1_vlan entered promiscuous mode [ 71.592412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.607324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.618636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.645173][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.652427][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.675067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.724431][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.737239][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.747660][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.774936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.787633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.828374][ T4195] device veth0_macvtap entered promiscuous mode [ 71.840494][ T4186] device veth0_macvtap entered promiscuous mode [ 71.849359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.861537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.870292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.880241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.888524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.897309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.908179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.917278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.927350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.937364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.946801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.955475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.964876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.974908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.983763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.998384][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.009904][ T4195] device veth1_macvtap entered promiscuous mode [ 72.020625][ T4186] device veth1_macvtap entered promiscuous mode [ 72.032948][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.078489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.095615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.108644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.120134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.168609][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.177330][ T4196] device veth0_vlan entered promiscuous mode [ 72.186705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.196469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.206902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.216568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.225582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.234758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.245833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.254191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.283953][ T4185] device veth0_vlan entered promiscuous mode [ 72.290864][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.307557][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.331531][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.349711][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.365531][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.377597][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.393160][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.404113][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.413196][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.425462][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.440335][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.451554][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.465075][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.489234][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.499014][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.510292][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.519961][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.529130][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.537298][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.548003][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.557802][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.568566][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.577506][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.592501][ T4185] device veth1_vlan entered promiscuous mode [ 72.608134][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.617819][ T4196] device veth1_vlan entered promiscuous mode [ 72.652105][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.660860][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.669754][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.678717][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.739611][ T4185] device veth0_macvtap entered promiscuous mode [ 72.761719][ T4185] device veth1_macvtap entered promiscuous mode [ 72.778114][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.794012][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.807518][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.819361][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.828967][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.837796][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.846769][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.856253][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.873686][ T4196] device veth0_macvtap entered promiscuous mode [ 72.904113][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.918321][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.926873][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.954278][ T4196] device veth1_macvtap entered promiscuous mode [ 72.961775][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 72.968959][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 72.981508][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 72.992898][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.001145][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.009088][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.019734][ T4191] device veth0_vlan entered promiscuous mode [ 73.030403][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.043667][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.050262][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 73.053690][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.053740][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.058380][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.063202][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 73.109804][ T4191] device veth1_vlan entered promiscuous mode [ 73.119221][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.128992][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.139717][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.158851][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.169616][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.178478][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.189470][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.200586][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.212153][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.225770][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.238073][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.248212][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.257360][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.266517][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.287548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.297852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.306697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.315779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.333279][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.345849][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.356006][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.369239][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.379350][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.389900][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.402115][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.435102][ T4191] device veth0_macvtap entered promiscuous mode [ 73.445679][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.455930][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.465733][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.475627][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.484630][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.513963][ T4191] device veth1_macvtap entered promiscuous mode [ 73.534426][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.549812][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.561738][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.577479][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.589415][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.600287][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.611364][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.622260][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.633553][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.667416][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.675687][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.686798][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.709506][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.719133][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.728883][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.737759][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.754783][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.768757][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.779143][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.790001][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.801435][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.812039][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.822024][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.832588][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.846284][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.872554][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.882924][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.904130][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.914618][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.924811][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.941599][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.952490][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.964280][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.974901][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.986205][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.996778][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.007013][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.017968][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.031528][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.050022][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.063506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.079038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.090227][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.108047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.121822][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.130585][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.150110][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.159197][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.354655][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.418772][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.435754][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.446099][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.464366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.481590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.642574][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.650586][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.800041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.949383][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.042210][ T3577] Bluetooth: hci0: command 0x0419 tx timeout [ 75.048308][ T3577] Bluetooth: hci2: command 0x0419 tx timeout [ 75.181234][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.650118][ T3577] Bluetooth: hci1: command 0x0419 tx timeout [ 75.694107][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 75.701117][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 75.763408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.803085][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.821048][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.829995][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.838955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.849565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.858510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.867507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.876531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.063409][ T4299] Bluetooth: hci3: command 0x0419 tx timeout [ 76.176811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.585770][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.621619][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.641967][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.660144][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.678838][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.821613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.030792][ T4314] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.888247][ T4318] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 78.853637][ T4328] Zero length message leads to an empty skb [ 80.399377][ T4345] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.450813][ T4343] Cannot find add_set index 0 as target [ 80.900409][ T4336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8'. [ 82.132926][ T4349] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.000803][ T1325] cfg80211: failed to load regulatory.db [ 89.673820][ T4385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 91.672046][ T4402] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 95.095861][ T4431] netlink: 830 bytes leftover after parsing attributes in process `syz.1.29'. [ 98.442150][ T26] audit: type=1326 audit(1768751505.812:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba12972cb9 code=0x7ffc0000 [ 98.678928][ T26] audit: type=1326 audit(1768751505.812:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba12972cb9 code=0x7ffc0000 [ 98.755732][ T26] audit: type=1326 audit(1768751506.092:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fba12972cb9 code=0x7ffc0000 [ 99.215810][ T4472] comedi: valid board names for 8255 driver are: [ 99.231936][ T4472] 8255 [ 99.233093][ T26] audit: type=1326 audit(1768751506.092:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba12972cb9 code=0x7ffc0000 [ 99.234941][ T4472] comedi: valid board names for vmk80xx driver are: [ 99.552459][ T4472] vmk80xx [ 99.556352][ T4472] comedi: valid board names for usbduxsigma driver are: [ 99.824105][ T4472] usbduxsigma [ 99.827537][ T4472] comedi: valid board names for usbduxfast driver are: [ 99.836681][ T4472] usbduxfast [ 99.840186][ T4472] comedi: valid board names for usbdux driver are: [ 99.858452][ T4472] usbdux [ 99.862579][ T4472] comedi: valid board names for ni6501 driver are: [ 99.870416][ T4472] ni6501 [ 99.880361][ T26] audit: type=1326 audit(1768751506.092:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba12972cb9 code=0x7ffc0000 [ 99.903269][ T4472] comedi: valid board names for dt9812 driver are: [ 99.915099][ T4472] dt9812 [ 99.938158][ T4472] comedi: valid board names for ni_labpc_cs driver are: [ 99.947078][ T4472] ni_labpc_cs [ 99.950607][ T4472] comedi: valid board names for ni_daq_700 driver are: [ 100.155945][ T4472] ni_daq_700 [ 100.159445][ T4472] comedi: valid board names for labpc_pci driver are: [ 100.487439][ T4472] labpc_pci [ 100.490930][ T4472] comedi: valid board names for adl_pci9118 driver are: [ 100.500436][ T4472] pci9118dg [ 100.506456][ T4472] pci9118hg [ 100.509839][ T4472] pci9118hr [ 100.516306][ T4472] comedi: valid board names for 8255_pci driver are: [ 100.525265][ T4472] 8255_pci [ 100.528792][ T4472] comedi: valid board names for s526 driver are: [ 100.538464][ T4472] s526 [ 101.111151][ T4472] comedi: valid board names for multiq3 driver are: [ 101.149205][ T4472] multiq3 [ 101.152870][ T4472] comedi: valid board names for pcmuio driver are: [ 101.159550][ T4472] pcmuio48 [ 101.168665][ T4472] pcmuio96 [ 101.207758][ T4472] comedi: valid board names for pcmmio driver are: [ 101.253508][ T4472] pcmmio [ 101.256609][ T4472] comedi: valid board names for pcmda12 driver are: [ 101.270126][ T4472] pcmda12 [ 101.274115][ T4472] comedi: valid board names for pcmad driver are: [ 101.280677][ T4472] pcmad12 [ 101.286262][ T4472] pcmad16 [ 101.289440][ T4472] comedi: valid board names for ni_labpc driver are: [ 101.306363][ T4472] lab-pc-1200 [ 101.310061][ T4472] lab-pc-1200ai [ 101.313797][ T4472] lab-pc+ [ 101.316970][ T4472] comedi: valid board names for atmio16 driver are: [ 101.324325][ T4472] atmio16 [ 101.327472][ T4472] atmio16d [ 101.330699][ T4472] comedi: valid board names for ni_at_ao driver are: [ 101.359257][ T4472] at-ao-6 [ 101.365656][ T4472] at-ao-10 [ 101.369147][ T4472] comedi: valid board names for ni_at_a2150 driver are: [ 101.377523][ T4472] ni_at_a2150 [ 101.381676][ T4472] comedi: valid board names for adq12b driver are: [ 101.388314][ T4472] adq12b [ 101.392418][ T4472] comedi: valid board names for mpc624 driver are: [ 101.398959][ T4472] mpc624 [ 102.228633][ T4472] comedi: valid board names for c6xdigio driver are: [ 102.235767][ T4472] c6xdigio [ 102.238921][ T4472] comedi: valid board names for aio_iiro_16 driver are: [ 102.251870][ T4472] aio_iiro_16 [ 102.261549][ T4472] comedi: valid board names for aio_aio12_8 driver are: [ 102.339136][ T4472] aio_aio12_8 [ 102.360499][ T4472] aio_ai12_8 [ 102.364306][ T4472] aio_ao12_4 [ 102.367757][ T4472] comedi: valid board names for fl512 driver are: [ 102.380812][ T4472] fl512 [ 102.385763][ T4472] comedi: valid board names for dmm32at driver are: [ 102.412823][ T4472] dmm32at [ 102.434514][ T4472] comedi: valid board names for dt282x driver are: [ 102.468670][ T4472] dt2821 [ 102.492827][ T4472] dt2821-f [ 102.505857][ T4472] dt2821-g [ 102.530703][ T4472] dt2823 [ 102.533886][ T4472] dt2824-pgh [ 102.537207][ T4472] dt2824-pgl [ 102.540510][ T4472] dt2825 [ 102.600682][ T4472] dt2827 [ 102.626625][ T4472] dt2828 [ 102.629641][ T4472] dt2829 [ 102.688626][ T4472] dt21-ez [ 102.727036][ T4472] dt23-ez [ 102.741140][ T4472] dt24-ez [ 102.747273][ T4472] dt24-ez-pgl [ 102.758597][ T4472] comedi: valid board names for dt2817 driver are: [ 102.766920][ T4472] dt2817 [ 103.632532][ T4472] comedi: valid board names for dt2815 driver are: [ 103.665521][ T4472] dt2815 [ 103.685763][ T4472] comedi: valid board names for dt2814 driver are: [ 103.711130][ T4472] dt2814 [ 103.730882][ T4472] comedi: valid board names for dt2811 driver are: [ 103.792200][ T4472] dt2811-pgh [ 103.795555][ T4472] dt2811-pgl [ 103.798871][ T4472] comedi: valid board names for dt2801 driver are: [ 103.810006][ T4472] dt2801 [ 103.814028][ T4472] comedi: valid board names for das6402 driver are: [ 103.820767][ T4472] das6402-12 [ 103.827354][ T4472] das6402-16 [ 103.830783][ T4472] comedi: valid board names for das1800 driver are: [ 103.837867][ T4472] das-1701st [ 103.854851][ T4472] das-1701st-da [ 103.858801][ T4472] das-1702st [ 103.877121][ T4472] das-1702st-da [ 103.881679][ T4472] das-1702hr [ 103.894675][ T4472] das-1702hr-da [ 103.898247][ T4472] das-1701ao [ 103.911330][ T4472] das-1702ao [ 103.933474][ T4472] das-1801st [ 103.936828][ T4472] das-1801st-da [ 103.940403][ T4472] das-1802st [ 103.957599][ T4472] das-1802st-da [ 103.983714][ T4472] das-1802hr [ 103.987138][ T4472] das-1802hr-da [ 103.990719][ T4472] das-1801hc [ 104.001247][ T4472] das-1802hc [ 104.004684][ T4472] das-1801ao [ 104.011584][ T4472] das-1802ao [ 104.015096][ T4472] comedi: valid board names for das800 driver are: [ 104.053146][ T4472] das-800 [ 104.056334][ T4472] cio-das800 [ 104.059897][ T4472] das-801 [ 104.066222][ T4472] cio-das801 [ 104.069689][ T4472] das-802 [ 104.073642][ T4472] cio-das802 [ 104.077086][ T4472] cio-das802/16 [ 104.080655][ T4472] comedi: valid board names for isa-das08 driver are: [ 104.089531][ T4472] isa-das08 [ 104.093279][ T4472] das08-pgm [ 104.096617][ T4472] das08-pgh [ 104.099947][ T4472] das08-pgl [ 104.126333][ T4472] das08-aoh [ 104.129697][ T4472] das08-aol [ 104.132991][ T4472] das08-aom [ 104.136207][ T4472] das08/jr-ao [ 104.139612][ T4472] das08jr-16-ao [ 105.565745][ T4472] pc104-das08 [ 105.569167][ T4472] das08jr/16 [ 105.671118][ T4472] comedi: valid board names for das16m1 driver are: [ 105.677903][ T4472] das16m1 [ 105.708706][ T4472] comedi: valid board names for dac02 driver are: [ 105.741730][ T4472] dac02 [ 105.764874][ T4472] comedi: valid board names for rti802 driver are: [ 105.794374][ T4472] rti802 [ 105.805149][ T4472] comedi: valid board names for rti800 driver are: [ 105.830587][ T4472] rti800 [ 105.846336][ T4472] rti815 [ 105.849426][ T4472] comedi: valid board names for pcm3724 driver are: [ 105.871081][ T4472] pcm3724 [ 105.874289][ T4472] comedi: valid board names for pcl818 driver are: [ 105.880924][ T4472] pcl818l [ 105.884635][ T4472] pcl818h [ 105.887691][ T4472] pcl818hd [ 105.890821][ T4472] pcl818hg [ 105.904723][ T4472] pcl818 [ 105.907907][ T4472] pcl718 [ 105.922071][ T4472] pcm3718 [ 105.925346][ T4472] comedi: valid board names for pcl816 driver are: [ 105.939450][ T4472] pcl816 [ 105.951505][ T4472] pcl814b [ 105.954669][ T4472] comedi: valid board names for pcl812 driver are: [ 105.971237][ T4472] pcl812 [ 105.974321][ T4472] pcl812pg [ 105.977546][ T4472] acl8112pg [ 105.980801][ T4472] acl8112dg [ 105.994210][ T4472] acl8112hg [ 106.001686][ T4472] a821pgl [ 106.004749][ T4472] a821pglnda [ 106.008050][ T4472] a821pgh [ 106.021824][ T4472] a822pgl [ 106.025084][ T4472] a822pgh [ 106.033118][ T4472] a823pgl [ 106.036184][ T4472] a823pgh [ 106.039251][ T4472] pcl813 [ 106.051226][ T4472] pcl813b [ 106.054389][ T4472] acl8113 [ 106.057565][ T4472] iso813 [ 106.060543][ T4472] acl8216 [ 106.071710][ T4472] a826pg [ 106.074811][ T4472] comedi: valid board names for pcl730 driver are: [ 106.092277][ T4472] pcl730 [ 106.095377][ T4472] iso730 [ 106.098335][ T4472] acl7130 [ 106.111167][ T4472] pcm3730 [ 106.117109][ T4472] pcl725 [ 106.120312][ T4472] p8r8dio [ 106.132132][ T4472] acl7225b [ 106.135531][ T4472] p16r16dio [ 106.138752][ T4472] pcl733 [ 106.152153][ T4472] pcl734 [ 106.155338][ T4472] opmm-1616-xt [ 106.158825][ T4472] pearl-mm-p [ 106.171138][ T4472] ir104-pbf [ 106.174513][ T4472] comedi: valid board names for pcl726 driver are: [ 106.192107][ T4472] pcl726 [ 106.195302][ T4472] pcl727 [ 106.198373][ T4472] pcl728 [ 106.211173][ T4472] acl6126 [ 106.214371][ T4472] acl6128 [ 106.219025][ T4472] comedi: valid board names for pcl724 driver are: [ 106.238545][ T4472] pcl724 [ 106.251089][ T4472] pcl722 [ 106.254205][ T4472] pcl731 [ 106.257170][ T4472] acl7122 [ 106.260220][ T4472] acl7124 [ 106.293988][ T4472] pet48dio [ 106.297278][ T4472] pcmio48 [ 106.300389][ T4472] onyx-mm-dio [ 106.304823][ T4472] comedi: valid board names for pcl711 driver are: [ 106.328644][ T4472] pcl711 [ 106.345548][ T4472] pcl711b [ 106.356832][ T4472] acl8112hg [ 106.360124][ T4472] acl8112dg [ 106.370121][ T4472] comedi: valid board names for amplc_pc263 driver are: [ 106.387186][ T4472] pc263 [ 106.390279][ T4472] comedi: valid board names for amplc_pc236 driver are: [ 106.400474][ T4472] pc36at [ 106.407206][ T4472] comedi: valid board names for amplc_dio200 driver are: [ 106.566009][ T4472] pc212e [ 106.569070][ T4472] pc214e [ 106.584808][ T4472] pc215e [ 106.587895][ T4472] pc218e [ 106.590850][ T4472] pc272e [ 106.608263][ T4472] comedi: valid board names for comedi_parport driver are: [ 106.864200][ T4513] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 107.143279][ T4472] comedi_parport [ 107.147013][ T4472] comedi: valid board names for comedi_test driver are: [ 107.268571][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 108.797119][ T4472] comedi_test [ 108.872113][ T4472] comedi: valid board names for comedi_bond driver are: [ 108.879758][ T4472] comedi_bond [ 109.375010][ T4528] program syz.1.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.387404][ T4528] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.928076][ T4534] netlink: 830 bytes leftover after parsing attributes in process `syz.0.46'. [ 118.492618][ T4595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 118.502182][ T4595] netlink: del zone limit has 8 unknown bytes [ 119.632686][ T4607] ptrace attach of "./syz-executor exec"[4608] was attempted by "./syz-executor exec"[4607] [ 122.807376][ T4631] device syzkaller0 entered promiscuous mode [ 123.021202][ T3577] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.889727][ T4633] xt_TCPMSS: Only works on TCP SYN packets [ 124.161271][ T3577] usb 4-1: Using ep0 maxpacket: 32 [ 124.281352][ T3577] usb 4-1: config 255 has an invalid interface number: 253 but max is 0 [ 124.290075][ T3577] usb 4-1: config 255 has no interface number 0 [ 124.342704][ T3577] usb 4-1: config 255 interface 253 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 124.574781][ T3577] usb 4-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=89.4d [ 124.591076][ T3577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.599223][ T3577] usb 4-1: Product: syz [ 124.621170][ T3577] usb 4-1: Manufacturer: syz [ 124.625824][ T3577] usb 4-1: SerialNumber: syz [ 124.713040][ T3577] em28xx 4-1:255.253: New device syz syz @ 480 Mbps (2304:023f, interface 253, class 253) [ 124.738463][ T3577] em28xx 4-1:255.253: Video interface 253 found: [ 124.943490][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 125.619297][ T3577] em28xx 4-1:255.253: unknown em28xx chip ID (0) [ 126.437040][ T3577] em28xx 4-1:255.253: reading from i2c device at 0xa0 failed (error=-5) [ 126.492197][ T3577] em28xx 4-1:255.253: board has no eeprom [ 126.519364][ T4649] loop0: detected capacity change from 0 to 1024 [ 127.372925][ T3577] em28xx 4-1:255.253: Identified as Pinnacle PCTV HD Mini (card=59) [ 127.411401][ T3577] em28xx 4-1:255.253: Currently, V4L2 is not supported on this model [ 127.564041][ T4649] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 127.587725][ T4240] em28xx 4-1:255.253: Binding DVB extension [ 127.617913][ T4649] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 127.619642][ T4240] em28xx 4-1:255.253: no endpoint for DVB mode and transfer type 0 [ 127.643028][ T4652] sctp: failed to load transform for md5: -2 [ 127.666826][ T3577] usb 4-1: USB disconnect, device number 2 [ 127.703439][ T3577] em28xx 4-1:255.253: Disconnecting em28xx [ 127.707610][ T4649] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.81: Failed to acquire dquot type 0 [ 127.730311][ T4240] em28xx 4-1:255.253: failed to pre-allocate USB transfer buffers for DVB. [ 127.760369][ T4240] em28xx 4-1:255.253: Registering input extension [ 127.781894][ T3577] em28xx 4-1:255.253: Closing input extension [ 127.840799][ T4649] EXT4-fs error (device loop0): mb_free_blocks:1860: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 127.867288][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #13: comm syz.0.81: corrupted inode contents [ 127.892351][ T3577] em28xx 4-1:255.253: Freeing device [ 127.927175][ T4649] EXT4-fs error (device loop0): ext4_dirty_inode:6054: inode #13: comm syz.0.81: mark_inode_dirty error [ 127.947467][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #13: comm syz.0.81: corrupted inode contents [ 127.962907][ T4649] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #13: comm syz.0.81: mark_inode_dirty error [ 128.052464][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #13: comm syz.0.81: corrupted inode contents [ 128.153002][ T4649] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 128.223282][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #13: comm syz.0.81: corrupted inode contents [ 128.236128][ T4674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 128.246775][ T4674] netlink: del zone limit has 8 unknown bytes [ 128.258298][ T4649] EXT4-fs error (device loop0): ext4_truncate:4279: inode #13: comm syz.0.81: mark_inode_dirty error [ 128.301772][ T4649] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 128.328511][ T4649] EXT4-fs (loop0): 1 truncate cleaned up [ 128.348037][ T4649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.933921][ T4681] netlink: 'syz.0.81': attribute type 3 has an invalid length. [ 129.687237][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.88'. [ 130.240812][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 132.628862][ T4701] device syzkaller0 entered promiscuous mode [ 132.726902][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.745318][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.594598][ T4717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.99'. [ 133.603664][ T4717] netlink: del zone limit has 8 unknown bytes [ 134.044123][ T4723] loop0: detected capacity change from 0 to 1024 [ 134.185748][ T4723] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 134.261878][ T4723] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 134.441214][ T4723] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.102: Failed to acquire dquot type 0 [ 135.012747][ T4723] EXT4-fs error (device loop0): mb_free_blocks:1860: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 135.277539][ T4723] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #13: comm syz.0.102: corrupted inode contents [ 135.361098][ T4723] EXT4-fs error (device loop0): ext4_dirty_inode:6054: inode #13: comm syz.0.102: mark_inode_dirty error [ 135.432215][ T4723] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #13: comm syz.0.102: corrupted inode contents [ 136.266634][ T4723] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #13: comm syz.0.102: mark_inode_dirty error [ 136.455897][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 138.022083][ T4723] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #13: comm syz.0.102: corrupted inode contents [ 138.185849][ T4723] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 138.194930][ T4723] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #13: comm syz.0.102: corrupted inode contents [ 138.207221][ T4723] EXT4-fs error (device loop0): ext4_truncate:4279: inode #13: comm syz.0.102: mark_inode_dirty error [ 138.222053][ T4723] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 138.234420][ T4723] EXT4-fs (loop0): 1 truncate cleaned up [ 138.240227][ T4723] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.073633][ T4779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.113'. [ 141.082621][ T4779] netlink: del zone limit has 8 unknown bytes [ 142.150648][ T4789] loop3: detected capacity change from 0 to 1024 [ 142.590670][ T4789] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 142.606440][ T4789] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 142.731074][ T4789] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.119: Failed to acquire dquot type 0 [ 142.763046][ T4789] EXT4-fs error (device loop3): mb_free_blocks:1860: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 142.806273][ T4789] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.119: corrupted inode contents [ 142.925923][ T4789] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #13: comm syz.3.119: mark_inode_dirty error [ 142.948186][ T4789] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.119: corrupted inode contents [ 143.093440][ T4806] crypto_alloc_aead failed rc=-2 [ 143.366471][ T4789] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #13: comm syz.3.119: mark_inode_dirty error [ 143.590697][ T4789] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.119: corrupted inode contents [ 144.005191][ T4789] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 144.025175][ T4789] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.119: corrupted inode contents [ 144.087297][ T4789] EXT4-fs error (device loop3): ext4_truncate:4279: inode #13: comm syz.3.119: mark_inode_dirty error [ 144.172082][ T4789] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 144.201843][ T4789] EXT4-fs (loop3): 1 truncate cleaned up [ 144.229731][ T4789] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.497635][ T4843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.127'. [ 144.506738][ T4843] netlink: del zone limit has 8 unknown bytes [ 145.902045][ T4841] device syzkaller0 entered promiscuous mode [ 146.138296][ T4850] ALSA: mixer_oss: invalid OSS volume '' [ 147.083160][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 149.399429][ T4858] sctp: failed to load transform for md5: -4 [ 151.330241][ T4894] loop2: detected capacity change from 0 to 1024 [ 151.456821][ T4887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.140'. [ 151.465783][ T4887] netlink: del zone limit has 8 unknown bytes [ 152.960630][ T4894] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 152.988290][ T4894] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 152.998573][ T4894] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.143: Failed to acquire dquot type 0 [ 153.014617][ T4894] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 153.051361][ T4894] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #13: comm syz.2.143: corrupted inode contents [ 153.112530][ T4894] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #13: comm syz.2.143: mark_inode_dirty error [ 153.129525][ T4894] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #13: comm syz.2.143: corrupted inode contents [ 153.155342][ T4894] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #13: comm syz.2.143: mark_inode_dirty error [ 153.232804][ T4894] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #13: comm syz.2.143: corrupted inode contents [ 153.268886][ T4894] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 153.352022][ T4894] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #13: comm syz.2.143: corrupted inode contents [ 153.417865][ T4913] device syzkaller0 entered promiscuous mode [ 153.436762][ T4894] EXT4-fs error (device loop2): ext4_truncate:4279: inode #13: comm syz.2.143: mark_inode_dirty error [ 153.510173][ T4915] loop4: detected capacity change from 0 to 256 [ 153.518368][ T4894] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 153.537574][ T4894] EXT4-fs (loop2): 1 truncate cleaned up [ 153.557415][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.681397][ T4915] FAT-fs (loop4): Directory bread(block 64) failed [ 153.688361][ T4915] FAT-fs (loop4): Directory bread(block 65) failed [ 153.701395][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 153.777311][ T4915] FAT-fs (loop4): Directory bread(block 66) failed [ 153.818406][ T4915] FAT-fs (loop4): Directory bread(block 67) failed [ 153.831222][ T4915] FAT-fs (loop4): Directory bread(block 68) failed [ 153.838633][ T4915] FAT-fs (loop4): Directory bread(block 69) failed [ 153.879948][ T4915] FAT-fs (loop4): Directory bread(block 70) failed [ 153.911205][ T4915] FAT-fs (loop4): Directory bread(block 71) failed [ 153.938370][ T4915] FAT-fs (loop4): Directory bread(block 72) failed [ 153.951190][ T4915] FAT-fs (loop4): Directory bread(block 73) failed [ 155.367179][ T4928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'. [ 155.376572][ T4928] netlink: del zone limit has 8 unknown bytes [ 155.503248][ T4930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.156'. [ 155.621022][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 155.708376][ T4930] netlink: 'syz.4.156': attribute type 7 has an invalid length. [ 155.766317][ T4941] kernel read not supported for file /eth0 (pid: 4941 comm: syz.3.157) [ 155.820430][ T26] audit: type=1800 audit(1768751563.192:7): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.157" name=6574683004 dev="mqueue" ino=34416 res=0 errno=0 [ 155.841137][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 156.183794][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 158.246749][ T4954] device syzkaller0 entered promiscuous mode [ 159.828562][ T4961] loop3: detected capacity change from 0 to 256 [ 159.955111][ T4961] FAT-fs (loop3): Directory bread(block 64) failed [ 159.974543][ T4961] FAT-fs (loop3): Directory bread(block 65) failed [ 159.991462][ T4961] FAT-fs (loop3): Directory bread(block 66) failed [ 160.011265][ T4961] FAT-fs (loop3): Directory bread(block 67) failed [ 160.017945][ T4961] FAT-fs (loop3): Directory bread(block 68) failed [ 160.081443][ T4961] FAT-fs (loop3): Directory bread(block 69) failed [ 160.118753][ T4961] FAT-fs (loop3): Directory bread(block 70) failed [ 160.149071][ T4961] FAT-fs (loop3): Directory bread(block 71) failed [ 160.169469][ T4961] FAT-fs (loop3): Directory bread(block 72) failed [ 160.210167][ T4961] FAT-fs (loop3): Directory bread(block 73) failed [ 161.214436][ T4972] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 162.442178][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 163.210259][ T4987] device vlan2 entered promiscuous mode [ 163.255013][ T4987] device bridge0 entered promiscuous mode [ 163.265665][ T4992] netlink: 256 bytes leftover after parsing attributes in process `syz.3.172'. [ 163.281300][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 163.318758][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 164.404395][ T4240] libceph: connect (1)[c::]:6789 error -101 [ 164.410847][ T4240] libceph: mon0 (1)[c::]:6789 connect error [ 164.773848][ T5005] ceph: No mds server is up or the cluster is laggy [ 165.206758][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 165.235000][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 165.501315][ T5019] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 165.642107][ T5019] team0: Port device netdevsim0 added [ 166.072487][ T5027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 167.171862][ T5036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'. [ 167.181170][ T5036] netlink: del zone limit has 8 unknown bytes [ 168.350297][ T5045] tmpfs: Unknown parameter 'grpquota' [ 170.702728][ T5072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 171.485382][ T5074] device syzkaller0 entered promiscuous mode [ 172.590676][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 172.610928][ T5089] binder_alloc: 5087: pid 5087 spamming oneway? 2 buffers allocated for a total size of 5120 [ 172.726251][ T5093] binder_alloc: 5087: pid 5087 spamming oneway? 3 buffers allocated for a total size of 5128 [ 174.031200][ T5028] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 174.300578][ T5111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.200'. [ 174.574861][ T5028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 175.031906][ T5028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 175.089261][ T5113] device syzkaller0 entered promiscuous mode [ 175.264828][ T5028] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 175.284226][ T5028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.329662][ T5028] usb 2-1: Product: syz [ 175.362751][ T5028] usb 2-1: Manufacturer: syz [ 175.367415][ T5028] usb 2-1: SerialNumber: syz [ 175.412871][ T5028] usb 2-1: config 0 descriptor?? [ 175.514411][ T5028] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 176.776917][ T5028] scsi host1: usb-storage 2-1:0.0 [ 176.824509][ T5028] usb 2-1: USB disconnect, device number 2 [ 179.128351][ T5154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 179.789012][ T5156] device syzkaller0 entered promiscuous mode [ 181.212729][ T5176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.220'. [ 181.222027][ T5176] netlink: del zone limit has 8 unknown bytes [ 181.590114][ T5180] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 181.602098][ T5180] overlayfs: missing 'lowerdir' [ 181.711202][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.899004][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 182.531243][ T7] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 182.663265][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.700028][ T7] usb 2-1: config 0 descriptor?? [ 182.743422][ T7] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 183.901895][ T7] gspca_sunplus: reg_w_riv err -110 [ 183.917698][ T7] sunplus: probe of 2-1:0.0 failed with error -110 [ 184.831567][ T5206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'. [ 186.954661][ T4255] usb 2-1: USB disconnect, device number 3 [ 187.814296][ T5220] device syzkaller0 entered promiscuous mode [ 188.543000][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 189.610485][ T5244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 189.619493][ T5244] netlink: del zone limit has 8 unknown bytes [ 191.101324][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 191.558392][ T5255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.238'. [ 191.841100][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 191.847695][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 191.853806][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 192.037718][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 192.057399][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 192.311359][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 192.861580][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.887252][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.897996][ T1107] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 192.907515][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.933772][ T1107] usb 5-1: config 0 descriptor?? [ 193.524166][ T1107] kye 0003:0458:0087.0001: item fetching failed at offset 0/2 [ 193.577026][ T5265] device syzkaller0 entered promiscuous mode [ 193.605031][ T1107] kye 0003:0458:0087.0001: parse failed [ 193.630645][ T1107] kye: probe of 0003:0458:0087.0001 failed with error -22 [ 193.726616][ T21] usb 5-1: USB disconnect, device number 2 [ 194.103473][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 194.164909][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.172665][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.137356][ T5297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'. [ 198.146314][ T5297] netlink: del zone limit has 8 unknown bytes [ 198.978408][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 201.642292][ T5310] netlink: 44 bytes leftover after parsing attributes in process `syz.2.252'. [ 202.429021][ T5318] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 202.600368][ T5318] team0: Port device netdevsim0 added [ 202.914675][ T5322] loop3: detected capacity change from 0 to 1024 [ 203.109027][ T5322] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 203.147889][ T5322] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 203.291337][ T5322] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.257: Failed to acquire dquot type 0 [ 203.305176][ T5322] EXT4-fs error (device loop3): mb_free_blocks:1860: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 203.392128][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.257: corrupted inode contents [ 203.455074][ T5322] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #13: comm syz.3.257: mark_inode_dirty error [ 203.472353][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.257: corrupted inode contents [ 203.495660][ T5322] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #13: comm syz.3.257: mark_inode_dirty error [ 203.681921][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.257: corrupted inode contents [ 204.112022][ T5322] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 204.144255][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.257: corrupted inode contents [ 204.436399][ T5322] EXT4-fs error (device loop3): ext4_truncate:4279: inode #13: comm syz.3.257: mark_inode_dirty error [ 204.751902][ T5322] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 204.796569][ T5322] EXT4-fs (loop3): 1 truncate cleaned up [ 204.851432][ T5322] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.379263][ T5341] netlink: 'syz.3.257': attribute type 3 has an invalid length. [ 205.920478][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 207.945829][ T5350] device syzkaller0 entered promiscuous mode [ 211.666363][ T3577] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 211.922950][ T26] audit: type=1326 audit(1768751619.302:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9208cb9 code=0x7ffc0000 [ 211.991430][ T3577] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 211.996617][ T26] audit: type=1326 audit(1768751619.322:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9208cb9 code=0x7ffc0000 [ 212.074700][ T26] audit: type=1326 audit(1768751619.322:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f02d9208cb9 code=0x7ffc0000 [ 212.168622][ T26] audit: type=1326 audit(1768751619.322:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9208cb9 code=0x7ffc0000 [ 212.241742][ T26] audit: type=1326 audit(1768751619.322:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9208cb9 code=0x7ffc0000 [ 212.511392][ T5377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 212.520352][ T5377] netlink: del zone limit has 8 unknown bytes [ 213.073360][ T3577] usb 1-1: string descriptor 0 read error: -71 [ 213.079850][ T3577] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 213.134145][ T3577] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.150729][ T5382] binder: 5381:5382 unknown command 0 [ 213.273105][ T3577] usb 1-1: config 0 descriptor?? [ 213.284602][ T5382] binder: 5381:5382 ioctl c0306201 200000000080 returned -22 [ 213.401147][ T3577] usb 1-1: can't set config #0, error -71 [ 213.523237][ T3577] usb 1-1: USB disconnect, device number 2 [ 218.336873][ T5405] netlink: 264 bytes leftover after parsing attributes in process `syz.4.278'. [ 218.365649][ T5405] netlink: 56 bytes leftover after parsing attributes in process `syz.4.278'. [ 218.703609][ T5409] device syzkaller0 entered promiscuous mode [ 219.746707][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 220.604544][ T5421] loop6: detected capacity change from 0 to 7 [ 220.615209][ T5421] Dev loop6: unable to read RDB block 7 [ 220.621165][ T5421] loop6: unable to read partition table [ 220.626936][ T5421] loop6: partition table beyond EOD, truncated [ 220.633177][ T5421] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.451772][ T5452] syz.0.293 uses obsolete (PF_INET,SOCK_PACKET) [ 225.531643][ T5454] input: syz0 as /devices/virtual/input/input8 [ 227.115669][ T1201] block nbd0: Attempted send on invalid socket [ 227.123819][ T1201] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 227.169814][ T5452] XFS (nbd0): SB validate failed with error -5. [ 228.382429][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 231.594944][ T5477] chnl_net:caif_netlink_parms(): no params data found [ 232.961570][ T4233] Bluetooth: hci5: command 0x0409 tx timeout [ 233.255861][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.351921][ T4233] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 233.370707][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.390004][ T5477] device bridge_slave_0 entered promiscuous mode [ 233.414055][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.431052][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.459926][ T5477] device bridge_slave_1 entered promiscuous mode [ 233.558176][ T5477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.591643][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 233.619810][ T5477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.712316][ T4233] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 233.720833][ T4233] usb 2-1: config 0 has no interface number 0 [ 233.761311][ T4233] usb 2-1: config 0 interface 184 has no altsetting 0 [ 233.777098][ T4354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.931339][ T4233] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 233.940467][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.014452][ T4233] usb 2-1: Product: syz [ 234.018707][ T4233] usb 2-1: Manufacturer: syz [ 234.028953][ T5477] team0: Port device team_slave_0 added [ 234.063169][ T5477] team0: Port device team_slave_1 added [ 234.100026][ T4233] usb 2-1: SerialNumber: syz [ 234.131480][ T4233] usb 2-1: config 0 descriptor?? [ 234.170089][ T4354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.184451][ T4233] smsc75xx v1.0.0 [ 234.272937][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.290229][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.437075][ T5477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.496979][ T4354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.591762][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.598752][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.671074][ T5477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.720596][ T4354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.871164][ T4233] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 234.891118][ T4233] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 235.285740][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 235.376945][ T5536] device syzkaller0 entered promiscuous mode [ 235.438508][ T5477] device hsr_slave_0 entered promiscuous mode [ 235.482013][ T5477] device hsr_slave_1 entered promiscuous mode [ 235.537012][ T5477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.561663][ T4233] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 235.588517][ T5477] Cannot create hsr debugfs directory [ 235.601011][ T4233] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 235.641035][ T4233] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 235.666200][ T4233] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 235.704614][ T4233] usb 2-1: USB disconnect, device number 4 [ 238.746460][ T4233] Bluetooth: hci5: command 0x040f tx timeout [ 238.985308][ T5578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.313'. [ 239.058177][ T5578] nbd: must specify a device to reconfigure [ 239.077880][ T5477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.211453][ T5477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.234420][ T5477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.253101][ T5477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.423629][ T5598] device syzkaller0 entered promiscuous mode [ 240.801148][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 241.552634][ T5477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.675006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.700875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.801997][ T5477] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.552731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.578425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.607951][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.615092][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.667079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.881688][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.908742][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.961670][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.968870][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.276344][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.429249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.508658][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.562244][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.603066][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.627196][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.635477][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 243.645496][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.756326][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.812348][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.837904][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.878372][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.917891][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.006517][ T4354] device hsr_slave_0 left promiscuous mode [ 244.021605][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.041454][ T4354] device hsr_slave_1 left promiscuous mode [ 244.048248][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.072756][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.081063][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 244.120853][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.129553][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.139503][ T23] usb 5-1: config 0 descriptor?? [ 244.165141][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.185788][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.202198][ T4354] device bridge_slave_1 left promiscuous mode [ 244.220513][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.250017][ T4354] device bridge_slave_0 left promiscuous mode [ 244.272114][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.330803][ T4354] device veth1_macvtap left promiscuous mode [ 244.354114][ T4354] device veth0_macvtap left promiscuous mode [ 244.391354][ T4354] device veth1_vlan left promiscuous mode [ 244.417838][ T4354] device veth0_vlan left promiscuous mode [ 245.104471][ T23] hid-generic 0003:05AC:0324.0002: unknown main item tag 0x0 [ 245.168118][ T23] hid-generic 0003:05AC:0324.0002: item fetching failed at offset 5/7 [ 245.208349][ T23] hid-generic: probe of 0003:05AC:0324.0002 failed with error -22 [ 245.320153][ T23] usb 5-1: USB disconnect, device number 3 [ 246.427937][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 246.528616][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 246.644891][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.711346][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.870281][ T4354] bond0 (unregistering): Released all slaves [ 248.085567][ T5661] device syzkaller0 entered promiscuous mode [ 249.875409][ T5683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.330'. [ 250.733293][ T23] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 250.835003][ T23] Bluetooth: hci0: Injecting HCI hardware error event [ 250.884034][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 250.902800][ T4197] Bluetooth: hci0: hardware error 0x00 [ 250.925703][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.954324][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.006841][ T5477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.142952][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 251.261324][ T4232] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 251.269582][ T4232] usb 1-1: config 0 has no interface number 0 [ 252.281099][ T4232] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 252.290201][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.377631][ T4232] usb 1-1: Product: syz [ 252.385288][ T4232] usb 1-1: Manufacturer: syz [ 252.431735][ T4232] usb 1-1: config 0 descriptor?? [ 252.461074][ T4232] usb 1-1: can't set config #0, error -71 [ 252.502166][ T4232] usb 1-1: USB disconnect, device number 3 [ 252.623123][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.632444][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.719194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.778769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.803614][ T5477] device veth0_vlan entered promiscuous mode [ 252.823864][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.833931][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.907905][ T5477] device veth1_vlan entered promiscuous mode [ 252.927503][ T5727] device syzkaller0 entered promiscuous mode [ 253.156338][ T5477] device veth0_macvtap entered promiscuous mode [ 253.172354][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.200266][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.243108][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.334130][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.422083][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.515580][ T5477] device veth1_macvtap entered promiscuous mode [ 253.672543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.751974][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.798490][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.824074][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.861028][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.924642][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.974638][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.985202][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.995723][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.007359][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.018812][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.069113][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.095043][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.139246][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.195845][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.262641][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.275559][ T5751] loop0: detected capacity change from 0 to 256 [ 254.335069][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.383712][ T5751] FAT-fs (loop0): Directory bread(block 64) failed [ 254.411399][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.444485][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.449431][ T5751] FAT-fs (loop0): Directory bread(block 65) failed [ 254.501621][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.516579][ T5751] FAT-fs (loop0): Directory bread(block 66) failed [ 254.535655][ T5751] FAT-fs (loop0): Directory bread(block 67) failed [ 254.562727][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.597144][ T5751] FAT-fs (loop0): Directory bread(block 68) failed [ 254.634815][ T5751] FAT-fs (loop0): Directory bread(block 69) failed [ 254.669518][ T5751] FAT-fs (loop0): Directory bread(block 70) failed [ 254.679570][ T5751] FAT-fs (loop0): Directory bread(block 71) failed [ 254.694541][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.711892][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.731485][ T5751] FAT-fs (loop0): Directory bread(block 72) failed [ 254.738102][ T5751] FAT-fs (loop0): Directory bread(block 73) failed [ 254.753389][ T5477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.771693][ T5477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.801656][ T5477] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.832060][ T5477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.191512][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.236155][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.314136][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.329116][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.378720][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.426467][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.523465][ T5770] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.607363][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.613889][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.799717][ T5790] fuse: Unknown parameter '0xffffffffffffffff' [ 258.024371][ T5792] overlayfs: overlapping lowerdir path [ 258.754105][ T5801] device syzkaller0 entered promiscuous mode [ 261.153919][ T5818] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.564162][ T5872] ======================================================= [ 264.564162][ T5872] WARNING: The mand mount option has been deprecated and [ 264.564162][ T5872] and is ignored by this kernel. Remove the mand [ 264.564162][ T5872] option from the mount to silence this warning. [ 264.564162][ T5872] ======================================================= [ 264.599364][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.608192][ T5892] netlink: 132 bytes leftover after parsing attributes in process `syz.0.381'. [ 269.251095][ T5918] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.283441][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'. [ 271.292398][ T5954] netlink: del zone limit has 8 unknown bytes [ 271.622430][ T5952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.394'. [ 276.291602][ T5996] loop3: detected capacity change from 0 to 256 [ 276.471293][ T5996] FAT-fs (loop3): Directory bread(block 64) failed [ 276.510674][ T5996] FAT-fs (loop3): Directory bread(block 65) failed [ 276.549039][ T5996] FAT-fs (loop3): Directory bread(block 66) failed [ 276.590698][ T5996] FAT-fs (loop3): Directory bread(block 67) failed [ 276.626176][ T5996] FAT-fs (loop3): Directory bread(block 68) failed [ 276.657002][ T5996] FAT-fs (loop3): Directory bread(block 69) failed [ 276.706419][ T5996] FAT-fs (loop3): Directory bread(block 70) failed [ 276.733966][ T5996] FAT-fs (loop3): Directory bread(block 71) failed [ 276.756348][ T5996] FAT-fs (loop3): Directory bread(block 72) failed [ 276.791141][ T5996] FAT-fs (loop3): Directory bread(block 73) failed [ 278.316771][ T6020] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.459764][ T6045] device bridge1 entered promiscuous mode [ 281.824088][ T6045] team0: Port device bridge1 added [ 281.904667][ T6045] bridge0: port 3(team0) entered blocking state [ 281.941656][ T6045] bridge0: port 3(team0) entered disabled state [ 281.962503][ T6045] device team0 entered promiscuous mode [ 281.971257][ T6045] device team_slave_0 entered promiscuous mode [ 281.978386][ T6045] device team_slave_1 entered promiscuous mode [ 281.991831][ T6045] device netdevsim0 entered promiscuous mode [ 282.049967][ T6045] bridge0: port 3(team0) entered blocking state [ 282.056770][ T6045] bridge0: port 3(team0) entered forwarding state [ 282.246005][ T6060] netlink: 224 bytes leftover after parsing attributes in process `syz.4.420'. [ 282.769514][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'. [ 283.568686][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 284.431471][ T6088] kAFS: No cell specified [ 286.131654][ T6099] binder: BINDER_SET_CONTEXT_MGR already set [ 286.141152][ T6099] binder: 6090:6099 ioctl 4018620d 200000000180 returned -16 [ 286.161511][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'. [ 286.498623][ T6107] tipc: Enabling of bearer rejected, failed to enable media [ 286.707179][ T6112] device syzkaller0 entered promiscuous mode [ 286.814870][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.435'. [ 289.363462][ T6124] sched: RT throttling activated [ 294.489900][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 295.213441][ T6172] binder_alloc: 6170: pid 6170 spamming oneway? 2 buffers allocated for a total size of 5120 [ 295.311870][ T6177] binder_alloc: 6170: pid 6170 spamming oneway? 3 buffers allocated for a total size of 5128 [ 295.695301][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.446'. [ 300.997092][ T6239] nvme_fabrics: missing parameter 'transport=%s' [ 301.081715][ T6239] nvme_fabrics: missing parameter 'nqn=%s' [ 305.028169][ T6275] syz.5.462 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.830979][ T6289] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 308.315308][ T6307] nvme_fabrics: missing parameter 'transport=%s' [ 308.557474][ T6307] nvme_fabrics: missing parameter 'nqn=%s' [ 308.809153][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 310.260447][ T6325] netlink: del zone limit has 8 unknown bytes [ 311.398379][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 311.631003][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 311.890976][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 312.183443][ T6372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 312.871218][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 313.051415][ T4232] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 313.060806][ T4232] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 313.176773][ T4232] usb 1-1: Product: syz [ 313.222053][ T4232] usb 1-1: Manufacturer: syz [ 313.274137][ T4232] usb 1-1: SerialNumber: syz [ 313.691784][ T4232] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 313.720567][ T4232] usb 1-1: Handspring Visor / Palm OS: port 250, is for unknown use [ 313.797173][ T4232] usb 1-1: Handspring Visor / Palm OS: port 173, is for unknown use [ 314.062877][ T4232] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 314.081940][ T4232] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 314.091760][ T4232] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 314.108491][ T4232] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 314.133054][ T4232] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 315.141120][ T4232] usb 1-1: USB disconnect, device number 4 [ 315.761635][ T4232] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 315.830042][ T6394] INFO: trying to register non-static key. [ 315.835902][ T6394] The code is fine but needs lockdep annotation, or maybe [ 315.843167][ T6394] you didn't initialize this object before use? [ 315.849427][ T6394] turning off the locking correctness validator. [ 315.855804][ T6394] CPU: 0 PID: 6394 Comm: syz.3.487 Not tainted syzkaller #0 [ 315.863210][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.873307][ T6394] Call Trace: [ 315.876610][ T6394] [ 315.879544][ T6394] dump_stack_lvl+0x188/0x250 [ 315.884242][ T6394] ? show_regs_print_info+0x20/0x20 [ 315.889444][ T6394] ? load_image+0x400/0x400 [ 315.893949][ T6394] ? cpumask_next+0xb3/0xd0 [ 315.898457][ T6394] ? __is_module_percpu_address+0x2a7/0x410 [ 315.904349][ T6394] ? is_kernel_percpu_address+0x143/0x160 [ 315.910074][ T6394] assign_lock_key+0x1ec/0x200 [ 315.914838][ T6394] ? SOFTIRQ_verbose+0x10/0x10 [ 315.919600][ T6394] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 315.925591][ T6394] register_lock_class+0x21d/0x890 [ 315.930712][ T6394] ? __lock_acquire+0x13bc/0x7d10 [ 315.935762][ T6394] ? is_dynamic_key+0x1f0/0x1f0 [ 315.940664][ T6394] __lock_acquire+0x16f/0x7d10 [ 315.945432][ T6394] ? is_dynamic_key+0x1f0/0x1f0 [ 315.950297][ T6394] ? mark_lock+0x94/0x320 [ 315.954629][ T6394] ? verify_lock_unused+0x140/0x140 [ 315.959826][ T6394] ? mark_lock+0x94/0x320 [ 315.964178][ T6394] ? __lock_acquire+0x12e8/0x7d10 [ 315.969295][ T6394] ? verify_lock_unused+0x140/0x140 [ 315.974505][ T6394] ? __might_sleep+0xf0/0xf0 [ 315.979108][ T6394] lock_acquire+0x19e/0x400 [ 315.983642][ T6394] ? gsmld_write+0x57/0x120 [ 315.988153][ T6394] ? read_lock_is_recursive+0x10/0x10 [ 315.993582][ T6394] ? _copy_from_iter+0x6db/0x1170 [ 315.998622][ T6394] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 316.004104][ T6394] ? lockdep_hardirqs_off+0x70/0x100 [ 316.009393][ T6394] _raw_spin_lock_irqsave+0xb0/0x100 [ 316.014681][ T6394] ? gsmld_write+0x57/0x120 [ 316.019193][ T6394] ? _raw_spin_lock+0x40/0x40 [ 316.023948][ T6394] ? rcu_lock_release+0x20/0x20 [ 316.028802][ T6394] gsmld_write+0x57/0x120 [ 316.033143][ T6394] file_tty_write+0x557/0x910 [ 316.037843][ T6394] ? gsmld_read+0x10/0x10 [ 316.042189][ T6394] vfs_write+0x745/0xd60 [ 316.046431][ T6394] ? file_end_write+0x250/0x250 [ 316.051319][ T6394] ? __context_tracking_exit+0x4c/0x80 [ 316.056790][ T6394] ? __fdget_pos+0x1e2/0x370 [ 316.061400][ T6394] ksys_write+0x152/0x260 [ 316.065795][ T6394] ? __ia32_sys_read+0x80/0x80 [ 316.070772][ T6394] ? lockdep_hardirqs_on+0x94/0x140 [ 316.075994][ T6394] do_syscall_64+0x4c/0xa0 [ 316.080416][ T6394] ? clear_bhb_loop+0x30/0x80 [ 316.085095][ T6394] ? clear_bhb_loop+0x30/0x80 [ 316.089776][ T6394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 316.095678][ T6394] RIP: 0033:0x7f02d9208cb9 [ 316.100112][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.119825][ T6394] RSP: 002b:00007f02d7464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.128245][ T6394] RAX: ffffffffffffffda RBX: 00007f02d9483fa0 RCX: 00007f02d9208cb9 [ 316.136255][ T6394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 316.144261][ T6394] RBP: 00007f02d9276bf7 R08: 0000000000000000 R09: 0000000000000000 [ 316.152238][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.160315][ T6394] R13: 00007f02d9484038 R14: 00007f02d9483fa0 R15: 00007ffe77d88798 [ 316.168307][ T6394] [ 316.186036][ T4232] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 316.214965][ T4232] visor 1-1:1.0: device disconnected [ 317.044086][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.050462][ T1422] ieee802154 phy1 wpan1: encryption failed: -22