last executing test programs: 36.373043451s ago: executing program 1 (id=279): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70}, 0xc00) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230005) close(r0) 35.171091634s ago: executing program 1 (id=282): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f00004bf000/0x3000)=nil, 0x3000, 0x200000e, 0x13, r0, 0xd1639000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x60600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) r3 = io_uring_setup(0x4bea, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.720577541s ago: executing program 1 (id=287): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) io_uring_setup(0x2cef, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="fcf3b85e126f7c68b1ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 29.663305288s ago: executing program 1 (id=294): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) pwritev2(r4, &(0x7f0000001ec0)=[{&(0x7f0000001900)='\f', 0x1}], 0x1, 0x8, 0xff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 28.087707508s ago: executing program 1 (id=297): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[], 0x0) 27.612562636s ago: executing program 1 (id=300): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 21.612932721s ago: executing program 0 (id=313): r0 = socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d47c"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40001, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x40}}, 0x18}}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) truncate(0x0, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="c7", 0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x5, @local, 0x2, 0x4}, 0x20) 20.072380549s ago: executing program 0 (id=316): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e", @ANYRES64], 0xf8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x80003a}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 19.827380454s ago: executing program 4 (id=317): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f00004bf000/0x3000)=nil, 0x3000, 0x200000e, 0x13, r0, 0xd1639000) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x60600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) r3 = io_uring_setup(0x4bea, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.608811194s ago: executing program 0 (id=331): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00004bf000/0x3000)=nil, 0x3000, 0x200000e, 0x13, r0, 0xd1639000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x60600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) r3 = io_uring_setup(0x4bea, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.875432506s ago: executing program 4 (id=324): socket(0x40000000015, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x48, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d64697361626c652c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6661756c745f747970653d30303030303030303030303030303030303030342c008d73b6efef8bf6f516d60904182d07bca0e749cc80891d95a64e7017e017d72450a7d42539b57fb9c48865a0e2adbf3b690b6e666283ce3274281626e6b683df1e10a4b3b952294895df65e4a6b94f5c5a650e35a010e04bce2a92891fec6ae51521e10eeb1224f2905d434d7558325f47edf48ce3a8ad4664164f"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x20, 0x40000) fanotify_mark(r3, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {&(0x7f0000002540)=""/193, 0xc1}], 0x2}}], 0x1, 0x20, 0x0) sendmmsg$unix(r5, &(0x7f0000000680), 0x4924924924925c6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 11.336930185s ago: executing program 32 (id=300): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 11.286509816s ago: executing program 2 (id=336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="04006de3", 0x4) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000440)=0x0) io_submit(r3, 0x1ee, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfffffefb, 0x0, 0x0, 0x2}]) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) socket$kcm(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000a40), 0x1, 0x51b, &(0x7f0000001240)="$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") 11.200870818s ago: executing program 4 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) epoll_create1(0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 10.091600009s ago: executing program 4 (id=328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) mount(0x0, 0x0, &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3, 0x19ef, 0xfffffff7, 0x5, 0x2800, 0x6, 0x9, 0x4, 0xc, 0x11, {0x4, 0xffffffff}, 0xd0, 0x1}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 6.304609481s ago: executing program 2 (id=332): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400020}}, {@dioread_lock}], [{@smackfsroot}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x7f}}]}, 0x1, 0x4bf, &(0x7f0000000940)="$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") pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={'sit0\x00', 0x0}) 6.304095481s ago: executing program 3 (id=333): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c002e39a45aa9edcfe08671a816cb673d99851079b41e699eacf742"], 0x1, 0x373, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, @in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}], 0x38) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x100001) sync_file_range(0xffffffffffffffff, 0x9, 0x4, 0x7) 6.303380541s ago: executing program 0 (id=334): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) io_uring_setup(0x2cef, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.137009834s ago: executing program 4 (id=335): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f00004bf000/0x3000)=nil, 0x3000, 0x200000e, 0x13, r0, 0xd1639000) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x60600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) r3 = io_uring_setup(0x4bea, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.183626642s ago: executing program 3 (id=337): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) io_uring_setup(0x2cef, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="fcf3b85e126f7c68b1ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.850828737s ago: executing program 0 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x34c3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r5}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 3.850598947s ago: executing program 2 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) epoll_create1(0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.1461267s ago: executing program 3 (id=340): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) mount(0x0, 0x0, &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3, 0x19ef, 0xfffffff7, 0x5, 0x2800, 0x6, 0x9, 0x4, 0xc, 0x11, {0x4, 0xffffffff}, 0xd0, 0x1}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.814751127s ago: executing program 0 (id=341): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x20000003}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48811}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000040), 0x2, r3}, 0x38) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 2.767635568s ago: executing program 2 (id=342): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) time(0xfffffffffffffffc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$inet6(0xa, 0x3, 0x8000000003c) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2, 0x44540, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 2.059614721s ago: executing program 3 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.772430407s ago: executing program 2 (id=344): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x8000) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x28, r3, 0x1, 0x70bd25, 0xbafc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x36}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040884) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000002dc0)=""/4088, 0xff8}], 0x1, 0x8, 0x0) 1.0510837s ago: executing program 3 (id=345): r0 = socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d47c"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40001, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x40}}, 0x18}}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) truncate(0x0, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="c7", 0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380), 0x0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x5, @local, 0x2, 0x4}, 0x20) 428.518752ms ago: executing program 2 (id=346): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00004bf000/0x3000)=nil, 0x3000, 0x200000e, 0x13, r0, 0xd1639000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x60600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) r3 = io_uring_setup(0x4bea, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 348.744953ms ago: executing program 4 (id=347): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) io_uring_setup(0x2cef, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 3 (id=348): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r3, 0x0, r8, 0x0, 0x39000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x6, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000005c0)=""/158, 0x2f, 0x9e, 0x1}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 52.355638][ T4253] cgroup: Unknown subsys name 'net' [ 52.489689][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.764349][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.026124][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.034025][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.045636][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.053099][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.061225][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.065995][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.069105][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.076562][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.083530][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.090636][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.097356][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.103505][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.111783][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.118467][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.125493][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.131781][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.146033][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.148100][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.153636][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.161731][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.167937][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.175114][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.181452][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.188613][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.197114][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.202346][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.209531][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.216572][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.223751][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.237830][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.643427][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 55.669995][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 55.709847][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 55.786292][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 55.837830][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 55.864211][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.871463][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.880375][ T4265] device bridge_slave_0 entered promiscuous mode [ 55.912644][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.919841][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.928038][ T4265] device bridge_slave_1 entered promiscuous mode [ 55.947317][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.954405][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.962712][ T4271] device bridge_slave_0 entered promiscuous mode [ 55.994522][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.001756][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.009509][ T4271] device bridge_slave_1 entered promiscuous mode [ 56.016767][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.023852][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.031583][ T4275] device bridge_slave_0 entered promiscuous mode [ 56.048906][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.071408][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.078962][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.087009][ T4275] device bridge_slave_1 entered promiscuous mode [ 56.102001][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.135563][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.142703][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.150551][ T4264] device bridge_slave_0 entered promiscuous mode [ 56.173422][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.185363][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.199628][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.207415][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.215567][ T4264] device bridge_slave_1 entered promiscuous mode [ 56.228091][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.235457][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.243326][ T4276] device bridge_slave_0 entered promiscuous mode [ 56.259914][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.279027][ T4265] team0: Port device team_slave_0 added [ 56.286938][ T4265] team0: Port device team_slave_1 added [ 56.292859][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.300093][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.307911][ T4276] device bridge_slave_1 entered promiscuous mode [ 56.323336][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.356099][ T4271] team0: Port device team_slave_0 added [ 56.378075][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.396317][ T4271] team0: Port device team_slave_1 added [ 56.402674][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.409833][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.435729][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.449156][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.465529][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.480741][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.488156][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.514218][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.534272][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.545212][ T4275] team0: Port device team_slave_0 added [ 56.575711][ T4275] team0: Port device team_slave_1 added [ 56.592136][ T4276] team0: Port device team_slave_0 added [ 56.603762][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.611048][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.637490][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.650773][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.658073][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.684123][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.697004][ T4276] team0: Port device team_slave_1 added [ 56.710772][ T4264] team0: Port device team_slave_0 added [ 56.740752][ T4264] team0: Port device team_slave_1 added [ 56.761513][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.768796][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.794914][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.823902][ T4265] device hsr_slave_0 entered promiscuous mode [ 56.830607][ T4265] device hsr_slave_1 entered promiscuous mode [ 56.838385][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.845486][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.871389][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.882820][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.890230][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.916576][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.934403][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.941460][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.967473][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.979541][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.986572][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.012808][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.042366][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.049408][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.075324][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.100738][ T4271] device hsr_slave_0 entered promiscuous mode [ 57.107490][ T4271] device hsr_slave_1 entered promiscuous mode [ 57.113940][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.121931][ T4271] Cannot create hsr debugfs directory [ 57.181387][ T4264] device hsr_slave_0 entered promiscuous mode [ 57.188185][ T4264] device hsr_slave_1 entered promiscuous mode [ 57.195235][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.202811][ T4264] Cannot create hsr debugfs directory [ 57.216782][ T4275] device hsr_slave_0 entered promiscuous mode [ 57.223363][ T4275] device hsr_slave_1 entered promiscuous mode [ 57.230281][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.238022][ T4275] Cannot create hsr debugfs directory [ 57.245413][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 57.269157][ T4276] device hsr_slave_0 entered promiscuous mode [ 57.276238][ T4276] device hsr_slave_1 entered promiscuous mode [ 57.282718][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.290401][ T4276] Cannot create hsr debugfs directory [ 57.324794][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 57.331066][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 57.336747][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 57.338083][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 57.596161][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.611363][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.632025][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.647309][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.670712][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.697498][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.707240][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.730666][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.772131][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.799321][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.843409][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.858832][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.876725][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.885988][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.901969][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.922496][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.962754][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.977436][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.990873][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.012178][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.042790][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.072786][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.083183][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.093047][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.102302][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.135800][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.154367][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.163116][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.178478][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.199068][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.208825][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.218207][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.225475][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.234475][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.259611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.267695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.276611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.286971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.295579][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.302638][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.310620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.319210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.328110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.339116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.347774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.371365][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.380154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.390557][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.397714][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.406075][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.415535][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.423882][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.430979][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.440782][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.467064][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.478192][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.494075][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.503208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.517879][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.531991][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.539364][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.553553][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.562666][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.577056][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.588950][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.598157][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.609057][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.618069][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.627287][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.636525][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.651850][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.663228][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.673141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.686564][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.693683][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.710622][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.728923][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.740356][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.751113][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.764117][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.773304][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.790453][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.802801][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.823818][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.842440][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.857495][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.867816][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.878544][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.887742][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.897633][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.907630][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.915922][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.923661][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.932761][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.941535][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.951534][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.960699][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.972009][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.980898][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.989758][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.996940][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.011310][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.021972][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.047258][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.056067][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.073373][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.084115][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.099418][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.108097][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.117284][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.126421][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.133584][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.142062][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.171897][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.188227][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.202294][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.209462][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.224098][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.233261][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.246741][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.254470][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.267975][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.278098][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.287521][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.298162][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.311259][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.325410][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 59.338216][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.350132][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.361886][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.379350][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.390960][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.398118][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.407115][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 59.413148][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 59.419554][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 59.425645][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 59.433613][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.449804][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.460923][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.469726][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.478545][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.487613][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.500317][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.530514][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.538416][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.546882][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.557001][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.578045][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.597257][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.612831][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.623774][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.639101][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.651500][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.660879][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.674149][ T4264] device veth0_vlan entered promiscuous mode [ 59.683579][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.705555][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.727055][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.747993][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.766018][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.790380][ T4264] device veth1_vlan entered promiscuous mode [ 59.819076][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.827415][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.835909][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.844931][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.853445][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.870794][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.881405][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.900337][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.909618][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.930341][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.981364][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.008468][ T4264] device veth0_macvtap entered promiscuous mode [ 60.029023][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.038084][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.056365][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.080618][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.122821][ T4264] device veth1_macvtap entered promiscuous mode [ 60.157227][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.171434][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.195811][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.239087][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.252575][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.268843][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.293676][ T4265] device veth0_vlan entered promiscuous mode [ 60.306982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.326063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.345459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.355856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.383321][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.394168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.416041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.438689][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.452753][ T4265] device veth1_vlan entered promiscuous mode [ 60.462029][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.471848][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.481409][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.490680][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.501527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.510447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.518216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.556759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.566604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.614030][ T4265] device veth0_macvtap entered promiscuous mode [ 60.659669][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.667856][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.678310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.689634][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.698880][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.707834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.716762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.725156][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.733195][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.741325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.756575][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.764080][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.776131][ T4275] device veth0_vlan entered promiscuous mode [ 60.806679][ T4271] device veth0_vlan entered promiscuous mode [ 60.819611][ T4265] device veth1_macvtap entered promiscuous mode [ 60.827730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.838125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.847806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.856134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.869561][ T4271] device veth1_vlan entered promiscuous mode [ 60.876161][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.882256][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.884133][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.899844][ T4275] device veth1_vlan entered promiscuous mode [ 60.934470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.943008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.951577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.967111][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.978788][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.990920][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.030600][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.041355][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.050970][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.061099][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.072308][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.083427][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.094499][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.117635][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.121531][ T4271] device veth0_macvtap entered promiscuous mode [ 61.132055][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.138343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.153365][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.162490][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.171806][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.180309][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.191641][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.200319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.208636][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.216507][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.224185][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.241340][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.250321][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.260989][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.270482][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.283010][ T4276] device veth0_vlan entered promiscuous mode [ 61.299585][ T4276] device veth1_vlan entered promiscuous mode [ 61.307077][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.320769][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.330899][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.345036][ T4271] device veth1_macvtap entered promiscuous mode [ 61.354019][ T4275] device veth0_macvtap entered promiscuous mode [ 61.387411][ T4275] device veth1_macvtap entered promiscuous mode [ 61.407657][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.418474][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 61.426224][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.436625][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.447375][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.459196][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.485033][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 61.485153][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 61.491208][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 61.498017][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 61.546887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.556339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.571191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.580162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.594349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.612259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.623219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.637724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.701430][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.712294][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.722442][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.736050][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.748870][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.762518][ T4276] device veth0_macvtap entered promiscuous mode [ 61.772874][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.783720][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.793875][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.869869][ T4377] 9pnet_fd: Insufficient options for proto=fd [ 61.923502][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.981905][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.042536][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.162745][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.356645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.368321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.378824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.399511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.451021][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.513675][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.534673][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.543420][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.559863][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.570587][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.583092][ T4276] device veth1_macvtap entered promiscuous mode [ 62.596709][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.611083][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.621923][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.632895][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.643462][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.653371][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.665448][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.677180][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.695591][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.707016][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.720709][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.731727][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.742093][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.752549][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.762657][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.773431][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.785695][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.794364][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.803116][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.804340][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.819141][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.828278][ T4381] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.836987][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.847409][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.858495][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.867437][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.876942][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.885929][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.905643][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.916933][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.928669][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.939227][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.949378][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.959839][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.970115][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.980928][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.992274][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.001662][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.010463][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.020066][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.024641][ T4381] usb 1-1: Using ep0 maxpacket: 16 [ 63.050415][ T4381] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 63.058461][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.071429][ T4381] usb 1-1: config 0 has no interface number 0 [ 63.073823][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.087703][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.091542][ T4381] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 63.096697][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.118921][ T4381] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 63.129327][ T4381] usb 1-1: config 0 interface 41 has no altsetting 0 [ 63.160889][ T4381] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 63.170271][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.215533][ T4381] usb 1-1: Product: syz [ 63.219747][ T4381] usb 1-1: Manufacturer: syz [ 63.229101][ T4381] usb 1-1: SerialNumber: syz [ 63.286085][ T4381] usb 1-1: config 0 descriptor?? [ 63.293012][ T4383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.303724][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.325667][ T4383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.343234][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.385641][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.434028][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.442532][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.452833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.483223][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.492491][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 63.500939][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.509750][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.524914][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.624874][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 63.632062][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 63.640470][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 63.648941][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 63.739094][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.920800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.056134][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.186395][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.199520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.782553][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.981554][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.297412][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.372430][ T4381] CoreChips: probe of 1-1:0.41 failed with error -71 [ 67.094989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 67.121282][ T4413] sctp: [Deprecated]: syz.3.8 (pid 4413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.121282][ T4413] Use struct sctp_sack_info instead [ 67.223947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.245427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.325314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.333563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 67.342228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 67.350533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 67.359054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 67.367344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 67.375847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 69.221551][ T4417] can0: slcan on ttyS3. [ 69.241972][ T4430] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.242836][ T4381] usb 1-1: USB disconnect, device number 2 [ 69.416347][ T4431] loop2: detected capacity change from 0 to 512 [ 69.425881][ T4430] 0ªX¹¦À: renamed from caif0 [ 69.465499][ T4430] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 70.207292][ T4431] EXT4-fs: failed to create workqueue [ 70.325872][ T4416] can0 (unregistered): slcan off ttyS3. [ 70.408699][ T4445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'. [ 70.855272][ T4431] EXT4-fs (loop2): mount failed [ 71.249515][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.256302][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.539267][ T4461] sched: RT throttling activated [ 76.772565][ T128] cfg80211: failed to load regulatory.db [ 77.092793][ T4489] loop0: detected capacity change from 0 to 256 [ 77.124934][ T4487] loop3: detected capacity change from 0 to 1024 [ 77.151242][ T4489] ======================================================= [ 77.151242][ T4489] WARNING: The mand mount option has been deprecated and [ 77.151242][ T4489] and is ignored by this kernel. Remove the mand [ 77.151242][ T4489] option from the mount to silence this warning. [ 77.151242][ T4489] ======================================================= [ 77.820923][ T4489] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.838474][ T4487] EXT4-fs: Ignoring removed nobh option [ 77.844078][ T4487] EXT4-fs: inline encryption not supported [ 77.939602][ T4487] EXT4-fs: Ignoring removed bh option [ 77.945308][ T4489] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 78.000187][ T4487] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.108009][ T4494] loop1: detected capacity change from 0 to 2048 [ 78.132879][ T4489] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 78.408524][ T4487] EXT4-fs: test_dummy_encryption requires encrypt feature [ 85.228618][ T4546] loop3: detected capacity change from 0 to 512 [ 85.235970][ T4546] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 85.286630][ T4549] kernel read not supported for file /file1 (pid: 4549 comm: syz.1.32) [ 86.187809][ T26] audit: type=1800 audit(1756839680.006:2): pid=4549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.32" name="file1" dev="mqueue" ino=33711 res=0 errno=0 [ 87.993031][ T4545] sctp: failed to load transform for md5: -4 [ 90.707888][ T4595] loop4: detected capacity change from 0 to 2048 [ 92.050187][ T4601] loop2: detected capacity change from 0 to 1024 [ 92.901568][ T4595] loop4: unable to read partition table [ 92.967178][ T4595] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 93.185666][ T4610] process 'syz.0.46' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.512036][ T3637] Alternate GPT is invalid, using primary GPT. [ 93.599155][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.549560][ T3637] loop4: p1 p2 p3 [ 97.213410][ T4639] loop1: detected capacity change from 0 to 2048 [ 97.663524][ T4639] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.639133][ T4648] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.418871][ T4504] udevd[4504]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 99.994360][ T4668] loop0: detected capacity change from 0 to 1024 [ 101.209605][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 101.296046][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 101.349396][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 101.372120][ T26] audit: type=1326 audit(1756839695.196:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.2.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b7f8ebe9 code=0x0 [ 101.434122][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 103.782507][ T4694] wlan0 speed is unknown, defaulting to 1000 [ 103.789496][ T4694] wlan0 speed is unknown, defaulting to 1000 [ 103.803216][ T4694] wlan0 speed is unknown, defaulting to 1000 [ 103.825565][ T4694] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.867639][ T4694] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.005957][ T4694] wlan0 speed is unknown, defaulting to 1000 [ 104.016943][ T4694] wlan0 speed is unknown, defaulting to 1000 [ 104.027458][ T4694] wlan0 speed is unknown, defaulting to 1000 [ 104.037946][ T4694] wlan0 speed is unknown, defaulting to 1000 [ 104.048486][ T4694] wlan0 speed is unknown, defaulting to 1000 [ 104.383665][ T4693] loop3: detected capacity change from 0 to 4096 [ 105.996019][ T4693] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 106.009949][ T4693] ntfs3: loop3: Failed to load $Extend. [ 107.880908][ T4714] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 108.553110][ T4719] loop0: detected capacity change from 0 to 1024 [ 108.839275][ T4730] loop1: detected capacity change from 0 to 256 [ 111.763522][ T4730] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 112.485413][ T4739] Zero length message leads to an empty skb [ 114.150124][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 116.250843][ T4762] loop3: detected capacity change from 0 to 1024 [ 116.770677][ T4760] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.78'. [ 120.056738][ T4780] loop3: detected capacity change from 0 to 164 [ 121.739966][ T4792] loop3: detected capacity change from 0 to 8 [ 121.788371][ T4792] SQUASHFS error: zlib decompression failed, data probably corrupt [ 121.796720][ T4792] SQUASHFS error: Failed to read block 0x9b: -5 [ 121.803490][ T4792] SQUASHFS error: Unable to read metadata cache entry [99] [ 121.810954][ T4792] SQUASHFS error: Unable to read inode 0x127 [ 122.475403][ T4795] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.372104][ T4809] binder_alloc: 4799: binder_alloc_buf, no vma [ 125.088162][ T4823] loop1: detected capacity change from 0 to 1024 [ 125.555825][ T4831] program syz.2.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.568428][ T4831] program syz.2.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.577880][ T4831] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.169385][ T4832] loop4: detected capacity change from 0 to 128 [ 127.977312][ T4840] loop3: detected capacity change from 0 to 4096 [ 128.257720][ T4840] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 128.288597][ T4840] ntfs3: loop3: Failed to load $Extend. [ 129.566963][ T4861] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 129.573325][ T26] audit: type=1800 audit(1756839723.396:4): pid=4857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.109" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 131.070789][ T4865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 131.389898][ T4871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 133.522321][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.528715][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.006441][ T4887] netlink: 260 bytes leftover after parsing attributes in process `syz.3.110'. [ 134.384588][ T4887] netlink: 260 bytes leftover after parsing attributes in process `syz.3.110'. [ 135.053410][ T4899] loop1: detected capacity change from 0 to 8 [ 135.061490][ T4899] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 135.419117][ T4900] cramfs: Error -5 while decompressing! [ 135.425596][ T4900] cramfs: ffffffff96d75138(16)->ffff888071c77000(4096) [ 135.433510][ T4900] cramfs: Error -5 while decompressing! [ 135.439258][ T4900] cramfs: ffffffff96d75138(16)->ffff888071c77000(4096) [ 135.654692][ T26] audit: type=1800 audit(1756839729.276:5): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.113" name="file0" dev="loop1" ino=244 res=0 errno=0 [ 136.045263][ T4892] block device autoloading is deprecated and will be removed. [ 136.046683][ T4893] loop4: detected capacity change from 0 to 512 [ 136.148974][ T4283] udevd[4283]: incorrect cramfs checksum on /dev/loop1 [ 136.194822][ T4893] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 136.346669][ T4906] loop3: detected capacity change from 0 to 32768 [ 136.383359][ T4893] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 136.402989][ T4283] udevd[4283]: incorrect cramfs checksum on /dev/loop1 [ 136.428880][ T4283] udevd[4283]: incorrect cramfs checksum on /dev/loop1 [ 136.438450][ T4893] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.112: Corrupt directory, running e2fsck is recommended [ 136.457328][ T4906] XFS (loop3): Mounting V5 Filesystem [ 136.518464][ T4893] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 136.603270][ T4893] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.112: corrupted in-inode xattr [ 136.635917][ T4893] EXT4-fs (loop4): Remounting filesystem read-only [ 136.660110][ T4906] XFS (loop3): Ending clean mount [ 136.725811][ T4893] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.112: couldn't read orphan inode 15 (err -117) [ 136.909697][ T4893] EXT4-fs (loop4): Remounting filesystem read-only [ 137.314877][ T4893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.770488][ T4265] XFS (loop3): Unmounting Filesystem [ 138.154622][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 138.169946][ T4932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.487209][ T4948] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.564596][ T4970] loop4: detected capacity change from 0 to 1764 [ 147.242184][ T4984] loop0: detected capacity change from 0 to 1024 [ 148.041489][ T126] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 149.638001][ T126] usb 2-1: config 9 interface 0 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 149.942920][ T126] usb 2-1: config 9 interface 0 has no altsetting 0 [ 149.986862][ T4999] loop3: detected capacity change from 0 to 16 [ 150.002794][ T126] usb 2-1: New USB device found, idVendor=147a, idProduct=e03e, bcdDevice= 8.f4 [ 150.040364][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.056540][ T4999] erofs: (device loop3): mounted with root inode @ nid 36. [ 150.193773][ T126] usb 2-1: Product: syz [ 150.268546][ T5003] hfsplus: request for non-existent node 62977 in B*Tree [ 150.276571][ T5003] hfsplus: request for non-existent node 62977 in B*Tree [ 150.422505][ T126] usb 2-1: Manufacturer: syz [ 150.563290][ T126] usb 2-1: SerialNumber: syz [ 150.649922][ T126] usb 2-1: can't set config #9, error -71 [ 150.695819][ T126] usb 2-1: USB disconnect, device number 2 [ 150.828224][ T4446] hfsplus: b-tree write err: -5, ino 3 [ 150.876562][ T5007] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 150.910009][ T5007] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 150.921218][ T5007] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 151.807865][ T5017] loop1: detected capacity change from 0 to 24 [ 151.822160][ T5017] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 151.984723][ T5017] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 152.167689][ T5019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 152.560627][ T5024] loop0: detected capacity change from 0 to 1024 [ 152.569644][ T5024] EXT4-fs (loop0): unable to read superblock [ 152.604467][ T5023] loop3: detected capacity change from 0 to 512 [ 153.933610][ T5023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 154.056202][ T5023] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.890482][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 157.286122][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 158.280110][ T5070] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.462087][ T5083] loop2: detected capacity change from 0 to 131072 [ 163.491597][ T5083] F2FS-fs (loop2): invalid crc value [ 163.543323][ T5083] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 4 [ 163.562614][ T5083] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 166.342558][ T4279] Bluetooth: hci4: link tx timeout [ 166.348769][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.549915][ T5126] loop3: detected capacity change from 0 to 1024 [ 167.248027][ T5126] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 167.737768][ T4279] Bluetooth: hci4: link tx timeout [ 167.743014][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.410391][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 168.465014][ T5141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.707786][ T5145] loop4: detected capacity change from 0 to 8192 [ 168.746267][ T5145] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.759773][ T5145] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 168.769707][ T5145] REISERFS (device loop4): using ordered data mode [ 168.776394][ T5145] reiserfs: using flush barriers [ 168.789968][ T5145] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.810449][ T5145] REISERFS (device loop4): checking transaction log (loop4) [ 168.835704][ T5145] REISERFS (device loop4): Using r5 hash to sort names [ 168.851096][ T5145] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 170.237164][ T5162] binder: BINDER_SET_CONTEXT_MGR already set [ 170.244038][ T5162] binder: 5159:5162 ioctl 4018620d 2000000002c0 returned -16 [ 171.860532][ T5176] overlayfs: missing 'lowerdir' [ 173.928429][ T5186] capability: warning: `syz.0.173' uses 32-bit capabilities (legacy support in use) [ 175.611691][ T5187] loop2: detected capacity change from 0 to 40427 [ 176.388123][ T5187] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 178.982399][ T5208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.118285][ T5212] loop3: detected capacity change from 0 to 256 [ 179.164322][ T5212] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.245268][ T5212] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 179.283678][ T5212] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 180.947142][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 180.947228][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 180.948206][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 180.966513][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 181.525199][ T5226] xt_TPROXY: Can be used only with -p tcp or -p udp [ 183.782224][ T5235] loop2: detected capacity change from 0 to 1024 [ 186.152553][ T5256] loop3: detected capacity change from 0 to 1024 [ 187.267470][ T4418] hfsplus: b-tree write err: -5, ino 4 [ 187.365865][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.924081][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.114138][ T4394] hfsplus: b-tree write err: -5, ino 4 [ 192.019057][ T5291] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.096868][ T5287] wlan0 speed is unknown, defaulting to 1000 [ 192.463795][ T26] audit: type=1326 audit(1756839786.286:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 192.519224][ T26] audit: type=1326 audit(1756839786.336:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 192.541222][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.576477][ T5297] loop2: detected capacity change from 0 to 2048 [ 193.476029][ T26] audit: type=1326 audit(1756839786.336:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 193.499523][ T26] audit: type=1326 audit(1756839786.336:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 193.522354][ T26] audit: type=1326 audit(1756839786.336:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 193.544412][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.551586][ T26] audit: type=1326 audit(1756839786.346:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 193.573701][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.622316][ T5297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.627612][ T26] audit: type=1326 audit(1756839786.346:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 193.654025][ T26] audit: type=1326 audit(1756839786.346:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 193.676122][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.682816][ T26] audit: type=1326 audit(1756839786.346:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 193.707604][ T26] audit: type=1326 audit(1756839786.346:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b7f8ebe9 code=0x7ffc0000 [ 193.759255][ T5308] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.198: inline data xattr refers to an external xattr inode [ 194.155661][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169774][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.808052][ T5321] trusted_key: encrypted_key: insufficient parameters specified [ 197.091620][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 200.455957][ T5364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.975052][ T5367] loop1: detected capacity change from 0 to 64 [ 201.006120][ T5367] hfs: creator requires a 4 character value [ 201.012386][ T5367] hfs: unable to parse mount options [ 201.386146][ T5279] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.495704][ T5377] loop4: detected capacity change from 0 to 128 [ 206.026889][ T5398] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 206.231404][ T5398] loop3: detected capacity change from 0 to 1024 [ 206.606120][ T5417] xt_TPROXY: Can be used only with -p tcp or -p udp [ 210.209379][ T5433] loop4: detected capacity change from 0 to 4096 [ 210.250016][ T5433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.223619][ T26] kauditd_printk_skb: 106 callbacks suppressed [ 211.255183][ T26] audit: type=1800 audit(1756839804.936:122): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.229" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 211.577589][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 215.290154][ T5474] fuse: Unknown parameter 'fd0x0000000000000004' [ 215.490702][ T5474] loop2: detected capacity change from 0 to 1024 [ 217.164133][ T5487] xt_TPROXY: Can be used only with -p tcp or -p udp [ 217.738178][ T5494] loop1: detected capacity change from 0 to 256 [ 218.358352][ T5494] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 218.386031][ T5495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.242'. [ 219.339791][ T5506] exFAT-fs (loop1): hint_cluster is invalid (17) [ 219.385845][ T5510] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.643699][ T5515] loop2: detected capacity change from 0 to 256 [ 219.740917][ T5515] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 225.496159][ T5549] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.609370][ T5542] loop0: detected capacity change from 0 to 1024 [ 228.375993][ T5575] wlan0 speed is unknown, defaulting to 1000 [ 228.874328][ T5574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'. [ 233.772813][ T5621] loop1: detected capacity change from 0 to 1024 [ 234.623006][ T5279] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.678586][ T5634] loop2: detected capacity change from 0 to 4096 [ 236.052342][ T5649] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.582433][ T5654] tty tty21: ldisc open failed (-12), clearing slot 20 [ 236.589667][ T5655] tty tty21: ldisc open failed (-12), clearing slot 20 [ 236.770209][ T5647] loop1: detected capacity change from 0 to 1024 [ 238.023821][ T5665] loop3: detected capacity change from 0 to 512 [ 238.051933][ T5665] EXT4-fs: Ignoring removed orlov option [ 238.478887][ T5665] journal_path: Lookup failure for './file0' [ 238.659171][ T5665] EXT4-fs: error: could not find journal device path [ 238.788270][ T5671] loop0: detected capacity change from 0 to 1024 [ 238.842631][ T5634] syz.2.272 (5634) used greatest stack depth: 19728 bytes left [ 239.878854][ T5680] loop4: detected capacity change from 0 to 256 [ 240.495664][ T5679] sd 0:0:1:0: PR command failed: 1026 [ 240.501111][ T5679] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 240.508108][ T5679] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 240.685929][ T5689] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.107381][ T5691] loop4: detected capacity change from 0 to 2048 [ 241.259843][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 241.678706][ T5696] ubi31: attaching mtd0 [ 241.686141][ T5696] ubi31: scanning is finished [ 241.690872][ T5696] ubi31: empty MTD device detected [ 241.800550][ T5704] loop0: detected capacity change from 0 to 164 [ 242.333459][ T5696] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 242.345665][ T5704] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 242.378451][ T5700] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 242.430911][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 242.863200][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.886736][ T126] syz_tun: tun_net_xmit 110 [ 242.906328][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.934750][ T5418] syz_tun: tun_net_xmit 110 [ 242.944784][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.974143][ T5707] device bridge_slave_0 left promiscuous mode [ 243.004919][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.414810][ T5707] device bridge_slave_1 left promiscuous mode [ 243.421135][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.475798][ T5707] bond0: (slave bond_slave_0): Releasing backup interface [ 243.539331][ T5707] bond0: (slave bond_slave_1): Releasing backup interface [ 244.359076][ T5707] team0: Port device team_slave_0 removed [ 244.509341][ T5707] team0: Port device team_slave_1 removed [ 244.529618][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.537942][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.155207][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.180527][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.221413][ T5715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.230394][ T5715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.242864][ T5715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.252061][ T5715] device bridge_slave_0 left promiscuous mode [ 245.259854][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.268469][ T5715] device bridge_slave_1 left promiscuous mode [ 245.277296][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.287867][ T5715] bond0: (slave bond_slave_0): Releasing backup interface [ 245.300551][ T5715] bond0: (slave bond_slave_1): Releasing backup interface [ 245.334338][ T5715] team0: Port device team_slave_0 removed [ 245.351249][ T5715] team0: Port device team_slave_1 removed [ 245.357628][ T5715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.366027][ T5715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.373996][ T5715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.381563][ T5715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.562094][ T5733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.577143][ T5733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.590301][ T5733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.553551][ T5733] device bridge_slave_0 left promiscuous mode [ 246.590895][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.060221][ T5733] device bridge_slave_1 left promiscuous mode [ 247.090354][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.112474][ T5745] loop2: detected capacity change from 0 to 1024 [ 247.122946][ T5733] bond0: (slave bond_slave_0): Releasing backup interface [ 247.151999][ T5733] bond0: (slave bond_slave_1): Releasing backup interface [ 247.272081][ T5733] team0: Port device team_slave_0 removed [ 247.286486][ T5733] team0: Port device team_slave_1 removed [ 247.292789][ T5733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.302085][ T5733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.313158][ T5733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.321206][ T5733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.501852][ T5754] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 247.562134][ T5762] input: syz0 as /devices/virtual/input/input6 [ 247.594018][ T1043] block nbd0: Attempted send on invalid socket [ 247.600682][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.126636][ T5757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.738429][ T5800] loop3: detected capacity change from 0 to 32768 [ 250.052372][ T5800] XFS (loop3): Mounting V5 Filesystem [ 250.486980][ T5800] XFS (loop3): Ending clean mount [ 250.503813][ T5800] XFS (loop3): Quotacheck needed: Please wait. [ 250.699037][ T5800] XFS (loop3): Quotacheck: Done. [ 250.767032][ T128] wlan0 speed is unknown, defaulting to 1000 [ 251.432339][ T4265] XFS (loop3): Unmounting Filesystem [ 251.576133][ T5824] loop4: detected capacity change from 0 to 4096 [ 251.661309][ T5824] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 251.691778][ T5824] UDF-fs: Scanning with blocksize 512 failed [ 251.771771][ T5824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.623560][ T26] audit: type=1800 audit(1756839846.446:123): pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.309" name="bus" dev="loop4" ino=1347 res=0 errno=0 [ 253.409302][ T5844] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.418985][ T5844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.427009][ T5844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.558903][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.578597][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.626716][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.171450][ T5861] loop4: detected capacity change from 0 to 32768 [ 254.789078][ T5857] loop3: detected capacity change from 0 to 1024 [ 254.811681][ T5861] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.312 (5861) [ 254.864301][ T5861] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.875057][ T5861] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 254.884090][ T5861] BTRFS info (device loop4): setting nodatacow, compression disabled [ 254.892557][ T5861] BTRFS info (device loop4): max_inline at 0 [ 254.898612][ T5861] BTRFS info (device loop4): turning on async discard [ 254.905381][ T5861] BTRFS info (device loop4): turning off barriers [ 254.911778][ T5861] BTRFS info (device loop4): turning on flush-on-commit [ 254.918787][ T5861] BTRFS info (device loop4): enabling disk space caching [ 254.925860][ T5861] BTRFS info (device loop4): turning on barriers [ 254.932190][ T5861] BTRFS info (device loop4): force clearing of disk cache [ 254.939353][ T5861] BTRFS info (device loop4): enabling ssd optimizations [ 254.946301][ T5861] BTRFS info (device loop4): turning off barriers [ 254.952720][ T5861] BTRFS info (device loop4): max_inline at 8 [ 254.958898][ T5861] BTRFS error (device loop4): unrecognized mount option 'dont_measure' [ 254.971074][ T5861] BTRFS error (device loop4): open_ctree failed: -22 [ 255.495866][ T5876] sctp: [Deprecated]: syz.0.316 (pid 5876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.495866][ T5876] Use struct sctp_sack_info instead [ 255.575898][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.616459][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.265136][ T5879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.401065][ T5279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (5279) [ 257.542287][ T5882] loop2: detected capacity change from 0 to 4096 [ 258.443587][ T5882] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 258.469769][ T5882] ntfs3: loop2: Failed to load $Extend. [ 259.640318][ T5903] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.726792][ T5920] loop4: detected capacity change from 0 to 40427 [ 262.820892][ T5920] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 262.829459][ T5920] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 262.841719][ T5920] F2FS-fs (loop4): invalid crc value [ 262.887838][ T5920] F2FS-fs (loop4): Found nat_bits in checkpoint [ 262.920808][ T5920] F2FS-fs (loop4): Start checkpoint disabled! [ 262.943468][ T5920] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 265.003874][ T5944] loop2: detected capacity change from 0 to 512 [ 266.516663][ T5944] EXT4-fs (loop2): orphan cleanup on readonly fs [ 266.670577][ T5944] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 267.323891][ T5944] EXT4-fs warning (device loop2): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 267.497875][ T5944] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 267.708872][ T5944] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.336: iget: bad i_size value: 360287970189639690 [ 267.756749][ T5944] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.336: couldn't read orphan inode 15 (err -117) [ 267.789206][ T5944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.775105][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 268.845838][ T5965] loop3: detected capacity change from 0 to 512 [ 268.891606][ T5965] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.179269][ T5977] loop2: detected capacity change from 0 to 512 [ 269.239100][ T5977] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 269.876548][ T5976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.643667][ T6021] device veth1_macvtap left promiscuous mode [ 272.689223][ T6022] device veth1_macvtap entered promiscuous mode [ 272.718499][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.100174][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.116114][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.724836][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.006600][ T4404] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 275.291664][ T4404] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.542387][ T4404] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 275.882422][ T4404] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.914343][ T4404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.187112][ T6052] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.503908][ T4404] usb 1-1: can't set config #27, error -71 [ 277.540755][ T4404] usb 1-1: USB disconnect, device number 3 [ 317.008581][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.014944][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.457042][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.463329][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.404529][ T27] INFO: task kworker/1:0:22 blocked for more than 143 seconds. [ 403.412111][ T27] Not tainted syzkaller #0 [ 403.417106][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.425817][ T27] task:kworker/1:0 state:D stack:25520 pid:22 ppid:2 flags:0x00004000 [ 403.435089][ T27] Workqueue: events rfkill_global_led_trigger_worker [ 403.441803][ T27] Call Trace: [ 403.445167][ T27] [ 403.448109][ T27] __schedule+0x10ec/0x40b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 403.452619][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 403.459679][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 403.475504][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 403.480735][ T27] schedule+0xb9/0x180 [ 403.530583][ T27] schedule_preempt_disabled+0xf/0x20 [ 403.561962][ T27] __mutex_lock+0x555/0xaf0 [ 403.579047][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 403.583777][ T27] ? rfkill_global_led_trigger_worker+0x23/0xc0 [ 403.658280][ T27] ? mutex_lock_nested+0x10/0x10 [ 403.663303][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 403.694454][ T27] ? read_lock_is_recursive+0x10/0x10 [ 403.699880][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 403.734523][ T27] ? _raw_spin_unlock+0x40/0x40 [ 403.739422][ T27] rfkill_global_led_trigger_worker+0x23/0xc0 [ 403.774455][ T27] ? process_one_work+0x7a1/0x1160 [ 403.779624][ T27] process_one_work+0x898/0x1160 [ 403.804433][ T27] ? worker_detach_from_pool+0x240/0x240 [ 403.810213][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 403.815541][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 403.820933][ T27] ? kthread_data+0x4b/0xc0 [ 403.834426][ T27] worker_thread+0xaa2/0x1250 [ 403.839160][ T27] kthread+0x29d/0x330 [ 403.843237][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 403.869800][ T27] ? kthread_blkcg+0xd0/0xd0 [ 403.890110][ T27] ret_from_fork+0x1f/0x30 [ 403.894791][ T27] [ 403.914045][ T27] INFO: task kworker/1:9:4384 blocked for more than 143 seconds. [ 403.934514][ T27] Not tainted syzkaller #0 [ 403.939476][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.964418][ T27] task:kworker/1:9 state:D stack:25248 pid:4384 ppid:2 flags:0x00004000 [ 403.973770][ T27] Workqueue: events rfkill_op_handler [ 403.995115][ T27] Call Trace: [ 403.998440][ T27] [ 404.001385][ T27] __schedule+0x10ec/0x40b0 [ 404.014458][ T27] ? preempt_schedule+0xa7/0xb0 [ 404.019354][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 404.026199][ T27] schedule+0xb9/0x180 [ 404.030295][ T27] schedule_preempt_disabled+0xf/0x20 [ 404.036600][ T27] __mutex_lock+0x555/0xaf0 [ 404.041132][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 404.046572][ T27] ? nfc_rfkill_set_block+0x4c/0x2d0 [ 404.051965][ T27] ? mutex_lock_nested+0x10/0x10 [ 404.057259][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 404.062482][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 404.068777][ T27] ? _raw_spin_unlock+0x40/0x40 [ 404.073654][ T27] ? kobject_uevent_env+0x35f/0x8a0 [ 404.079182][ T27] ? nfc_unregister_device+0x290/0x290 [ 404.084878][ T27] nfc_rfkill_set_block+0x4c/0x2d0 [ 404.089999][ T27] ? nfc_unregister_device+0x290/0x290 [ 404.095572][ T27] rfkill_set_block+0x1c6/0x420 [ 404.100433][ T27] ? process_one_work+0x7a1/0x1160 [ 404.106286][ T27] rfkill_epo+0x75/0x170 [ 404.110540][ T27] rfkill_op_handler+0x76/0x220 [ 404.115411][ T27] process_one_work+0x898/0x1160 [ 404.120356][ T27] ? worker_detach_from_pool+0x240/0x240 [ 404.126038][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 404.131075][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 404.136469][ T27] ? kthread_data+0x4b/0xc0 [ 404.141009][ T27] worker_thread+0xaa2/0x1250 [ 404.145738][ T27] kthread+0x29d/0x330 [ 404.149808][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 404.154856][ T27] ? kthread_blkcg+0xd0/0xd0 [ 404.159448][ T27] ret_from_fork+0x1f/0x30 [ 404.163855][ T27] [ 404.166940][ T27] INFO: task syz.1.300:5757 blocked for more than 144 seconds. [ 404.176142][ T27] Not tainted syzkaller #0 [ 404.181096][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.189826][ T27] task:syz.1.300 state:D stack:25920 pid:5757 ppid:4271 flags:0x00004002 [ 404.199078][ T27] Call Trace: [ 404.202361][ T27] [ 404.205340][ T27] __schedule+0x10ec/0x40b0 [ 404.209874][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 404.229176][ T27] ? __mutex_trylock_common+0x80/0x250 [ 404.235971][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 404.242336][ T27] schedule+0xb9/0x180 [ 404.251261][ T27] schedule_preempt_disabled+0xf/0x20 [ 404.258003][ T27] __mutex_lock+0x555/0xaf0 [ 404.262533][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 404.271389][ T27] ? rfkill_unregister+0xc4/0x220 [ 404.278216][ T27] ? mutex_lock_nested+0x10/0x10 [ 404.283177][ T27] ? kill_device+0x160/0x160 [ 404.293321][ T27] ? nfc_genl_device_removed+0x22a/0x310 [ 404.300724][ T27] ? nfc_genl_setup_device_added+0x310/0x310 [ 404.310870][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 404.317334][ T27] rfkill_unregister+0xc4/0x220 [ 404.322206][ T27] nfc_unregister_device+0x92/0x290 [ 404.334084][ T27] ? virtual_ncidev_open+0xc0/0xc0 [ 404.341042][ T27] virtual_ncidev_close+0x55/0x90 [ 404.346305][ T27] __fput+0x22c/0x920 [ 404.350363][ T27] task_work_run+0x1ca/0x250 [ 404.355769][ T27] ? task_work_cancel+0x230/0x230 [ 404.360800][ T27] ? do_exit+0x939/0x2400 [ 404.365582][ T27] ? kmem_cache_free+0xf7/0x290 [ 404.370535][ T27] do_exit+0x93e/0x2400 [ 404.374801][ T27] ? put_task_struct+0x80/0x80 [ 404.379572][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 404.386207][ T27] ? lock_chain_count+0x20/0x20 [ 404.391066][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 404.396214][ T27] do_group_exit+0x217/0x2d0 [ 404.400810][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 404.406044][ T27] get_signal+0x1272/0x1350 [ 404.410565][ T27] arch_do_signal_or_restart+0xb0/0x1230 [ 404.416219][ T27] ? __schedule+0x10f4/0x40b0 [ 404.420922][ T27] ? preempt_schedule_irq+0xd0/0x150 [ 404.426241][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 404.432237][ T27] ? get_sigframe_size+0x10/0x10 [ 404.437332][ T27] exit_to_user_mode_loop+0x70/0x110 [ 404.442658][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 404.448327][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 404.453799][ T27] do_syscall_64+0x58/0xa0 [ 404.458654][ T27] ? clear_bhb_loop+0x60/0xb0 [ 404.463329][ T27] ? clear_bhb_loop+0x60/0xb0 [ 404.468072][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.473973][ T27] RIP: 0033:0x7fcba5d8ebe9 [ 404.478417][ T27] RSP: 002b:00007fcba6b92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.486890][ T27] RAX: 000000000000001c RBX: 00007fcba5fc5fa0 RCX: 00007fcba5d8ebe9 [ 404.494961][ T27] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 404.502945][ T27] RBP: 00007fcba5e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 404.511025][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.519029][ T27] R13: 00007fcba5fc6038 R14: 00007fcba5fc5fa0 R15: 00007ffd6bc2ebe8 [ 404.527509][ T27] [ 404.530650][ T27] [ 404.530650][ T27] Showing all locks held in the system: [ 404.539654][ T27] 1 lock held by rcu_tasks_kthre/12: [ 404.547680][ T27] #0: ffffffff8cb2b370 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 404.558248][ T27] 1 lock held by rcu_tasks_trace/13: [ 404.563546][ T27] #0: ffffffff8cb2bb90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 404.574733][ T27] 3 locks held by kworker/1:0/22: [ 404.579759][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 404.590187][ T27] #1: ffffc900001c7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 404.603205][ T27] #2: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xc0 [ 404.614622][ T27] 1 lock held by khungtaskd/27: [ 404.619464][ T27] #0: ffffffff8cb2a9e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 404.629361][ T27] 2 locks held by getty/4028: [ 404.634031][ T27] #0: ffff88814cf67098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 404.643839][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 404.653991][ T27] 1 lock held by syz-executor/4271: [ 404.659239][ T27] #0: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 404.669416][ T27] 1 lock held by syz-executor/4275: [ 404.674669][ T27] #0: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 404.685017][ T27] 1 lock held by syz-executor/4276: [ 404.690206][ T27] #0: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 404.700362][ T27] 4 locks held by kworker/1:9/4384: [ 404.705572][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 404.715965][ T27] #1: ffffc90004867d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 404.726380][ T27] #2: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 404.735958][ T27] #3: ffff888056bca100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2d0 [ 404.745662][ T27] 3 locks held by kworker/0:6/4404: [ 404.750836][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 404.761216][ T27] #1: ffffc90004a67d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 404.770909][ T27] #2: ffffffff8cb306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 404.781848][ T27] 1 lock held by syz.0.28/4528: [ 404.786730][ T27] #0: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 404.796979][ T27] 2 locks held by kworker/0:8/5418: [ 404.802168][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 404.812536][ T27] #1: ffffc900031b7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 404.823971][ T27] 2 locks held by syz.1.300/5757: [ 404.829023][ T27] #0: ffff888056bca100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 404.838833][ T27] #1: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 404.849130][ T27] 1 lock held by syz.3.330/5960: [ 404.854073][ T27] #0: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 404.864504][ T27] 2 locks held by syz-executor/5966: [ 404.869815][ T27] #0: ffff88805b338118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 404.879918][ T27] #1: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 404.889894][ T27] 2 locks held by syz-executor/6071: [ 404.895237][ T27] #0: ffff8880581a8118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 404.905377][ T27] #1: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 404.915341][ T27] 2 locks held by syz-executor/6078: [ 404.920613][ T27] #0: ffff888057848118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 404.930640][ T27] #1: ffffffff8dffdd88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 404.940639][ T27] [ 404.942965][ T27] ============================================= [ 404.942965][ T27] [ 404.951464][ T27] NMI backtrace for cpu 1 [ 404.955801][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 404.962972][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.973003][ T27] Call Trace: [ 404.976266][ T27] [ 404.979177][ T27] dump_stack_lvl+0x168/0x22e [ 404.983836][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 404.989192][ T27] ? show_regs_print_info+0x12/0x12 [ 404.994367][ T27] ? load_image+0x3b0/0x3b0 [ 404.998859][ T27] ? vprintk_emit+0x571/0x680 [ 405.003514][ T27] ? printk_sprint+0x460/0x460 [ 405.008268][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 405.013196][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 405.019330][ T27] ? _printk+0xcc/0x110 [ 405.023470][ T27] ? load_image+0x3b0/0x3b0 [ 405.027959][ T27] ? load_image+0x3b0/0x3b0 [ 405.032447][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 405.038498][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 405.044465][ T27] watchdog+0xeee/0xf30 [ 405.048607][ T27] ? watchdog+0x1ed/0xf30 [ 405.052924][ T27] kthread+0x29d/0x330 [ 405.056977][ T27] ? hungtask_pm_notify+0x40/0x40 [ 405.061984][ T27] ? kthread_blkcg+0xd0/0xd0 [ 405.066561][ T27] ret_from_fork+0x1f/0x30 [ 405.070974][ T27] [ 405.074328][ T27] Sending NMI from CPU 1 to CPUs 0: [ 405.079615][ C0] NMI backtrace for cpu 0 [ 405.079624][ C0] CPU: 0 PID: 4359 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 405.079638][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.079646][ C0] Workqueue: events_unbound toggle_allocation_gate [ 405.079665][ C0] RIP: 0010:lockdep_hardirqs_on+0xa6/0x140 [ 405.079685][ C0] Code: 48 3b 83 d0 0a 00 00 75 76 49 89 fe 48 c7 c7 00 03 8c 8a e8 0c 15 00 00 65 c7 05 01 33 eb 75 01 00 00 00 4c 89 b3 80 0a 00 00 <8b> 83 78 0a 00 00 ff c0 89 83 78 0a 00 00 89 83 90 0a 00 00 65 48 [ 405.079703][ C0] RSP: 0018:ffffc90004827838 EFLAGS: 00000082 [ 405.079714][ C0] RAX: 0000000000000000 RBX: ffff88807e20bb80 RCX: 641a5c341b78e500 [ 405.079724][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c0300 RDI: ffffffff8adefae0 [ 405.079735][ C0] RBP: ffffc90004827990 R08: dffffc0000000000 R09: fffffbfff215c249 [ 405.079745][ C0] R10: fffffbfff215c249 R11: 1ffffffff215c248 R12: 00002aaaaaaac000 [ 405.079755][ C0] R13: ffff88807e20bb80 R14: ffffffff812e37fb R15: ffffffff81d01826 [ 405.079766][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 405.079777][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.079787][ C0] CR2: 00007ffce2840f70 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 405.079800][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.079807][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 405.079816][ C0] Call Trace: [ 405.079821][ C0] [ 405.079827][ C0] __text_poke+0x64b/0x810 [ 405.079846][ C0] ? __text_poke+0x810/0x810 [ 405.079862][ C0] ? kmem_cache_alloc_lru+0x56/0x2e0 [ 405.079875][ C0] ? text_poke+0x90/0x90 [ 405.079891][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 405.079906][ C0] ? text_poke_loc_init+0x349/0x570 [ 405.079928][ C0] text_poke_bp_batch+0x425/0x7d0 [ 405.079947][ C0] ? kmem_cache_alloc_lru+0x56/0x2e0 [ 405.079960][ C0] ? text_poke_loc_init+0x570/0x570 [ 405.079978][ C0] ? arch_jump_label_transform_queue+0x76/0xd0 [ 405.079997][ C0] text_poke_finish+0x16/0x30 [ 405.080018][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 405.080032][ C0] static_key_disable_cpuslocked+0xc1/0x1a0 [ 405.080054][ C0] static_key_disable+0x16/0x20 [ 405.080073][ C0] toggle_allocation_gate+0x38f/0x430 [ 405.080087][ C0] ? show_object+0xa0/0xa0 [ 405.080101][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 405.080120][ C0] ? read_lock_is_recursive+0x10/0x10 [ 405.080137][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 405.080157][ C0] ? _raw_spin_unlock+0x40/0x40 [ 405.080175][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 405.080195][ C0] ? process_one_work+0x7a1/0x1160 [ 405.080209][ C0] process_one_work+0x898/0x1160 [ 405.080230][ C0] ? worker_detach_from_pool+0x240/0x240 [ 405.080247][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 405.080265][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 405.080283][ C0] ? kthread_data+0x4b/0xc0 [ 405.080303][ C0] worker_thread+0xaa2/0x1250 [ 405.080329][ C0] kthread+0x29d/0x330 [ 405.080346][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 405.080360][ C0] ? kthread_blkcg+0xd0/0xd0 [ 405.080379][ C0] ret_from_fork+0x1f/0x30 [ 405.080403][ C0] [ 405.088956][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 405.088966][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 405.088980][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.088989][ T27] Call Trace: [ 405.088994][ T27] [ 405.089000][ T27] dump_stack_lvl+0x168/0x22e [ 405.089024][ T27] ? memcpy+0x3c/0x60 [ 405.089051][ T27] ? show_regs_print_info+0x12/0x12 [ 405.089067][ T27] ? load_image+0x3b0/0x3b0 [ 405.089094][ T27] panic+0x2c9/0x710 [ 405.089111][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 405.089131][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 405.089157][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 405.089175][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 405.089197][ T27] watchdog+0xf2d/0xf30 [ 405.089218][ T27] ? watchdog+0x1ed/0xf30 [ 405.089237][ T27] kthread+0x29d/0x330 [ 405.089255][ T27] ? hungtask_pm_notify+0x40/0x40 [ 405.089269][ T27] ? kthread_blkcg+0xd0/0xd0 [ 405.089293][ T27] ret_from_fork+0x1f/0x30 [ 405.089334][ T27] [ 405.096486][ T27] Kernel Offset: disabled [ 405.502962][ T27] Rebooting in 86400 seconds..