last executing test programs: 20.27352233s ago: executing program 2 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r4, 0x0, 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 19.988057472s ago: executing program 2 (id=54): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) dup2(r3, r2) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19.755321582s ago: executing program 2 (id=56): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r0, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="7ebc384cf9a0265a36c1b32490db20004f25", 0x12}, {&(0x7f0000000180)="27aa23db8f7020e30fedffc30faacdcdc31a770658b0d12b87605c4fe8153eca", 0x20}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x180}}], 0x1, 0x4000020) 10.388933444s ago: executing program 3 (id=80): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000840)="7dc6c1e4019550edc59b2d768d0b", 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.607870078s ago: executing program 0 (id=82): pipe2$9p(&(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000100)=r0, 0x4) 9.572422469s ago: executing program 3 (id=83): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48010) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 9.359598788s ago: executing program 0 (id=85): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000380)='acl') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x11a) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x2000000, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0x202}, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x13f}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000000010104000000000000000002000002240001800ef118c654ba4d6ae000000108000200e00000010c00028005000100000045faa1e2f7f0"], 0x3c}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x41595556, 0x3, 0x0, [{0x0, 0xffffffff}, {}, {}, {0xffffffff}, {0x5}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff0700350600000ee60000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0xffffffffffffffe6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000740)='f2fs_unlink_enter\x00', r5, 0x0, 0x7}, 0xffffffffffffffcc) uname(&(0x7f00000011c0)=""/250) acct(&(0x7f0000000180)='./file0\x00') 9.165534317s ago: executing program 0 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 9.0919604s ago: executing program 3 (id=88): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) 9.08933755s ago: executing program 2 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f00007ca000/0x800000)=nil, 0x800000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) 9.019603793s ago: executing program 0 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[], 0xa8) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 8.896045438s ago: executing program 0 (id=91): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 6.376955717s ago: executing program 4 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0xf8, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_ZONE={0x6}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c084}, 0x811) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='#\x00'}, 0x30) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xffffff96) 4.052382886s ago: executing program 3 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000780)="f6d4e9a1d78a5fcddfdbd62ceef18843c171f748", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x4c) 4.052268276s ago: executing program 2 (id=99): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 2.966705673s ago: executing program 3 (id=100): memfd_create(0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001480)=@newtaction={0xff8, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xfe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf44, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x2a, 0x6, "7cf17ed4d67b8906bc20c78c1e04189070f842659f4299954046ee427b01120b9d0423821689"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xff8}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x48) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r2, 0x3) accept4(r2, 0x0, 0x0, 0x0) 2.962280923s ago: executing program 4 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[], 0xa8) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.936266504s ago: executing program 1 (id=102): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff6, 0x4031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x206f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0}) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) syz_genetlink_get_family_id$tipc2(0x0, r3) close_range(r0, 0xffffffffffffffff, 0x0) 2.848483428s ago: executing program 4 (id=103): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31", 0x10}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x700}], 0x40000cf, 0x0) 2.731953943s ago: executing program 1 (id=104): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000840)="7dc6c1e4019550edc59b2d768d0b", 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.731798492s ago: executing program 4 (id=105): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.702414914s ago: executing program 1 (id=106): pipe2$9p(&(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000100)=r0, 0x4) 2.661917636s ago: executing program 1 (id=107): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0xec, 0x8, 0xa3, 0x4, @empty, @private0, 0x8000, 0x40, 0x9, 0x40}}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000400)={0x0, 0x1, 0x6, 0x8000, @vifc_lcl_ifindex=r6, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2.196022796s ago: executing program 2 (id=108): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) syz_usb_connect(0x2, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x79, 0xcc, 0x75, 0x20, 0x5c6, 0x9048, 0xe314, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x9, 0x50}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.176912996s ago: executing program 0 (id=109): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2019) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x2) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x578410eb) pipe(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) 2.1067211s ago: executing program 3 (id=110): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) 1.831859102s ago: executing program 4 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0xf8, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_ZONE={0x6}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c084}, 0x811) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='#\x00'}, 0x30) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xffffff96) 1.618028311s ago: executing program 1 (id=112): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, 0x0) syz_open_procfs(0x0, 0x0) clock_gettime(0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdir(0x0, 0x0) 251.813039ms ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 0s ago: executing program 4 (id=114): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4008840) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ppoll(&(0x7f0000000e80)=[{}], 0x2000000000000016, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x700}], 0x40000cf, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 51.499308][ T4171] cgroup: Unknown subsys name 'net' [ 51.631169][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.123773][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.605851][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.617116][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.630509][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.672089][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.720042][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 54.805011][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.812721][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.821065][ T4187] device bridge_slave_0 entered promiscuous mode [ 54.852498][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.859886][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.868734][ T4187] device bridge_slave_1 entered promiscuous mode [ 54.876660][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.884305][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.892140][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.923030][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.930306][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.941293][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.948753][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.955989][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.963997][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.002658][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.011951][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.019199][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.027139][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.040174][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.047647][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.056048][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.074749][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.090873][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.098207][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.106599][ T4184] device bridge_slave_0 entered promiscuous mode [ 55.115093][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.122291][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.131437][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.140484][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.152708][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.176837][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.184388][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.192191][ T4184] device bridge_slave_1 entered promiscuous mode [ 55.228075][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.261262][ T4187] team0: Port device team_slave_0 added [ 55.269029][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.280049][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.291145][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.302495][ T4185] team0: Port device team_slave_0 added [ 55.310122][ T4187] team0: Port device team_slave_1 added [ 55.322999][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.334548][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.345198][ T4185] team0: Port device team_slave_1 added [ 55.391990][ T4183] team0: Port device team_slave_0 added [ 55.421080][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.428466][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.455004][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.468255][ T4183] team0: Port device team_slave_1 added [ 55.476522][ T4184] team0: Port device team_slave_0 added [ 55.492084][ T4186] team0: Port device team_slave_0 added [ 55.498808][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.505917][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.532025][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.543806][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.550896][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.577441][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.591103][ T4184] team0: Port device team_slave_1 added [ 55.613524][ T4186] team0: Port device team_slave_1 added [ 55.619678][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.626750][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.652768][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.675047][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.682023][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.708476][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.755816][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.762915][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.789033][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.822241][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.830233][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.856882][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.872158][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.879397][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.905669][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.928202][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.935336][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.942669][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.949908][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.975986][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.992361][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.999625][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.026200][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.039739][ T4187] device hsr_slave_0 entered promiscuous mode [ 56.046778][ T4187] device hsr_slave_1 entered promiscuous mode [ 56.053682][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.061374][ T4187] Cannot create hsr debugfs directory [ 56.121148][ T4183] device hsr_slave_0 entered promiscuous mode [ 56.128368][ T4183] device hsr_slave_1 entered promiscuous mode [ 56.135538][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.143690][ T4183] Cannot create hsr debugfs directory [ 56.198149][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.205047][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.211507][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.219444][ T4186] Cannot create hsr debugfs directory [ 56.224071][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 56.224971][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 56.231375][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 56.256348][ T4184] device hsr_slave_0 entered promiscuous mode [ 56.263483][ T4184] device hsr_slave_1 entered promiscuous mode [ 56.270275][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.277960][ T4184] Cannot create hsr debugfs directory [ 56.313555][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 56.319821][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 56.553594][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.566027][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.576720][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.586376][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.648622][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.667053][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.682143][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.691491][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.752783][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.775376][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.805335][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.815113][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.858014][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.870252][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.882748][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.906166][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.934398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.945824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.955445][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.968782][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.978936][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.024348][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.033072][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.042342][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.049623][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.068040][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.092188][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.102752][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.110924][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.120038][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.129034][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.138093][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.145418][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.159218][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.168932][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.177763][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.184886][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.193913][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.202523][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.211413][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.218636][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.227889][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.237489][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.263750][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.271821][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.283467][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.292066][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.301493][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.311450][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.319701][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.329555][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.353335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.362074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.388716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.400569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.418396][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.436097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.444918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.454185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.462870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.471615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.480563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.489129][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.489168][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.498157][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.529868][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.548220][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.559927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.569620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.588968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.599452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.609019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.617981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.626606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.642568][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.661623][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.670136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.687861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.699326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.708536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.717625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.739327][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.755103][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.770371][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.777740][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.791901][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.834149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.848614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.865386][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.872515][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.887851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.897010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.907297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.916478][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.923591][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.931288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.940863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.948440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.956261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.965335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.973915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.982437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.991434][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.998666][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.006843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.016215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.027987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.036923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.050068][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.080486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.089542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.099828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.112290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.121359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.130752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.139323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.148759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.157874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.182159][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.191717][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.200987][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.209597][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.219035][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.228749][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.249579][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.262624][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.273593][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.281122][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.296415][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.303800][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 58.310026][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 58.316755][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 58.325829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.335665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.358493][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.384918][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 58.391053][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 58.436812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.446501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.460854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.474739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.484738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.492534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.504639][ T4185] device veth0_vlan entered promiscuous mode [ 58.517598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.526967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.554488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.563942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.581053][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.591324][ T4187] device veth0_vlan entered promiscuous mode [ 58.614275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.625138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.634823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.644565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.653081][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.660293][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.669687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.685082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.692559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.706915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.716166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.725083][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.732172][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.744958][ T4185] device veth1_vlan entered promiscuous mode [ 58.756031][ T4187] device veth1_vlan entered promiscuous mode [ 58.768674][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.791172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.799148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.812284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.839969][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.850567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.861057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.887184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.901172][ T4185] device veth0_macvtap entered promiscuous mode [ 58.924713][ T4183] device veth0_vlan entered promiscuous mode [ 58.935595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.948333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.958872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.968333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.977099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.985878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.997397][ T4185] device veth1_macvtap entered promiscuous mode [ 59.020562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.030337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.040545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.048872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.058622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.069376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.078522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.092052][ T4183] device veth1_vlan entered promiscuous mode [ 59.101319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.111251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.120643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.133824][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.150657][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.161285][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.178909][ T4187] device veth0_macvtap entered promiscuous mode [ 59.188310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.204593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.219083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.229970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.239328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.249490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.258136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.267587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.292703][ T4187] device veth1_macvtap entered promiscuous mode [ 59.302481][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.324297][ T4183] device veth0_macvtap entered promiscuous mode [ 59.331779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.341283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.356730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.370849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.384341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.394466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.402937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.415717][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.428754][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.437733][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.446597][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.460896][ T4183] device veth1_macvtap entered promiscuous mode [ 59.480165][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.497876][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.514606][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.546698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.558350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.567372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.577101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.585263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.596481][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.608456][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.620767][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.630566][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.641477][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.651919][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.663573][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.675997][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.685464][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.708458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.717420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.729049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.738275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.755138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.764415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.775984][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.785731][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.795076][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.805347][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.822655][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.834944][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.845087][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.855537][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.867730][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.894025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.906625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.916066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.926005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.936797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.945800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.957419][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.967015][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.977161][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.986417][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.999115][ T4186] device veth0_vlan entered promiscuous mode [ 60.063975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.072689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.091450][ T4186] device veth1_vlan entered promiscuous mode [ 60.179056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.187654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.197448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.205927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.214798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.222654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.232337][ T4184] device veth0_vlan entered promiscuous mode [ 60.253875][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.261909][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.277902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.301427][ T4184] device veth1_vlan entered promiscuous mode [ 60.319059][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.322756][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.327114][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.328261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.352164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.359979][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.366268][ T4186] device veth0_macvtap entered promiscuous mode [ 60.383972][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 60.391028][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 60.395398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.397780][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 60.411869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.421429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.431621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.440821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.462558][ T4186] device veth1_macvtap entered promiscuous mode [ 60.469352][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 60.475751][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 60.480300][ T4184] device veth0_macvtap entered promiscuous mode [ 60.493985][ T4184] device veth1_macvtap entered promiscuous mode [ 60.510184][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.519126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.527382][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.530623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.545096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.554694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.577725][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.582014][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.599637][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.601573][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.609665][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.609689][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.609701][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.609714][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.611116][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.670756][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.682439][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.692590][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.704838][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.714950][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.725802][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.736116][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.746862][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.758649][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.775422][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.786489][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.797749][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.808466][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.818443][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.829967][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.841522][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.849497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.857854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.867584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.875939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.884978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.896085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.904764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.913839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.922407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.934266][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.956181][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.966367][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.977011][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.987124][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.997665][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.007890][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.018524][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.043050][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.059885][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.074990][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.088580][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.097722][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.116604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.126658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.144395][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.154629][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.164496][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.174484][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.220622][ T473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.240931][ T473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.258732][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.296625][ T4291] input: syz1 as /devices/virtual/input/input5 [ 61.381442][ T4293] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.469100][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.498380][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.522357][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.536021][ T4297] loop3: detected capacity change from 0 to 256 [ 61.575955][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.593396][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.614820][ T4297] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.623632][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.642771][ T4297] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 61.669804][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.716302][ T4297] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 61.789969][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.864271][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.892297][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.944118][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.320261][ T4305] loop2: detected capacity change from 0 to 1024 [ 62.469127][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 62.498434][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 62.580255][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 62.647963][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 62.659024][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 63.593132][ C0] sched: RT throttling activated [ 63.614494][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.941186][ T4305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.110526][ T4303] xt_hashlimit: size too large, truncated to 1048576 [ 68.846077][ T4334] loop3: detected capacity change from 0 to 512 [ 68.918348][ T4334] ======================================================= [ 68.918348][ T4334] WARNING: The mand mount option has been deprecated and [ 68.918348][ T4334] and is ignored by this kernel. Remove the mand [ 68.918348][ T4334] option from the mount to silence this warning. [ 68.918348][ T4334] ======================================================= [ 69.334484][ T4334] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 69.554319][ T4341] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12'. [ 69.619795][ T4334] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.627911][ T4334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 69.669349][ T4334] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 69.927751][ T4334] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 70.623796][ T4334] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 70.796094][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.901623][ T4334] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 70.971699][ T4334] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 71.193426][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 71.235356][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 71.332336][ T4346] loop4: detected capacity change from 0 to 1024 [ 71.343150][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 71.378959][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 71.437082][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.443856][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.899987][ T4357] loop2: detected capacity change from 0 to 512 [ 72.202117][ T4346] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 72.369636][ T4357] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 72.538290][ T26] audit: type=1800 audit(1764397690.967:2): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 72.624637][ T4346] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 72.624637][ T4346] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 72.624637][ T4346] [ 73.334093][ T4346] EXT4-fs (loop4): Ignoring removed oldalloc option [ 73.563520][ T4367] loop1: detected capacity change from 0 to 512 [ 73.612840][ T4346] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,abort,noacl,oldalloc,bsddf,max_dir_size_kb=0x00000000000007b1,nolazytime,nodelalloc,abort,nodelalloc,inode_readahead_blks=0x0000000000000400,,errors=continue. Quota mode: none. [ 73.693280][ T4367] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.861631][ T4367] EXT4-fs (loop1): 1 orphan inode deleted [ 73.924118][ T4367] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.987794][ T4367] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.163168][ T21] usb 1-1: string descriptor 0 read error: -71 [ 74.169489][ T21] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 74.178632][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.215721][ T21] usb 1-1: config 0 descriptor?? [ 74.243780][ T21] usb 1-1: can't set config #0, error -71 [ 74.436298][ T21] usb 1-1: USB disconnect, device number 2 [ 75.700966][ T4388] loop1: detected capacity change from 0 to 512 [ 75.758273][ T4388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.885219][ T4388] EXT4-fs (loop1): 1 truncate cleaned up [ 75.890942][ T4388] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 76.739657][ T4404] loop0: detected capacity change from 0 to 1024 [ 76.901531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.913140][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.922102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.930998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.939951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.948943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.958081][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.967004][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.976074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.984977][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 78.467266][ T4404] EXT4-fs (loop0): Ignoring removed nobh option [ 79.489383][ T4404] EXT4-fs: failed to create workqueue [ 79.494860][ T4404] EXT4-fs (loop0): mount failed [ 81.517953][ T4419] loop0: detected capacity change from 0 to 1024 [ 81.530327][ T4422] loop2: detected capacity change from 0 to 512 [ 81.614624][ T4424] loop1: detected capacity change from 0 to 512 [ 81.687169][ T13] cfg80211: failed to load regulatory.db [ 82.169658][ T4419] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 82.294135][ T4419] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 82.294135][ T4419] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 82.294135][ T4419] [ 82.630677][ T4424] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 82.734168][ T26] audit: type=1800 audit(1764397701.187:3): pid=4424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.32" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 83.457431][ T4422] EXT4-fs (loop2): 1 orphan inode deleted [ 83.607412][ T4419] EXT4-fs (loop0): Ignoring removed oldalloc option [ 83.613555][ T4422] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.635005][ T4419] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 83.645663][ T4422] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.638454][ T4437] loop0: detected capacity change from 0 to 512 [ 85.702626][ T4437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.839638][ T4437] EXT4-fs (loop0): 1 truncate cleaned up [ 85.869397][ T4437] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 86.254329][ T4446] netlink: 96 bytes leftover after parsing attributes in process `syz.2.38'. [ 88.033538][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.433883][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 88.459475][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 88.607901][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 88.619419][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 88.949457][ T21] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 88.988045][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.092497][ T4459] loop4: detected capacity change from 0 to 1024 [ 89.182782][ T21] usb 4-1: Product: syz [ 89.187091][ T21] usb 4-1: Manufacturer: syz [ 89.192253][ T21] usb 4-1: SerialNumber: syz [ 89.198852][ T21] usb 4-1: config 0 descriptor?? [ 89.223332][ T21] usb 4-1: can't set config #0, error -71 [ 89.238210][ T4464] loop2: detected capacity change from 0 to 512 [ 89.251378][ T21] usb 4-1: USB disconnect, device number 2 [ 89.307111][ T4459] EXT4-fs (loop4): Ignoring removed nobh option [ 89.535632][ T4466] loop1: detected capacity change from 0 to 1024 [ 90.615137][ T4459] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.39: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 90.648421][ T4459] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.39: couldn't read orphan inode 11 (err -117) [ 90.664335][ T4459] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 90.746988][ T4464] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 90.765314][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 91.159361][ T4474] loop0: detected capacity change from 0 to 512 [ 91.950856][ T4466] EXT4-fs: failed to create workqueue [ 91.956332][ T4466] EXT4-fs (loop1): mount failed [ 92.619894][ T4464] EXT4-fs: failed to create workqueue [ 92.643574][ T4464] EXT4-fs (loop2): mount failed [ 92.763300][ T4474] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 93.032772][ T4470] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 93.593731][ T26] audit: type=1800 audit(1764397711.337:4): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.46" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 94.131303][ T4483] loop1: detected capacity change from 0 to 256 [ 94.278934][ T4483] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.362954][ T4483] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 94.468349][ T4483] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 94.817175][ T4488] loop4: detected capacity change from 0 to 512 [ 94.886081][ T26] audit: type=1804 audit(1764397713.367:5): pid=4480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.47" name="/newroot/12/file0/bus" dev="loop1" ino=1048590 res=1 errno=0 [ 94.919380][ T4490] loop0: detected capacity change from 0 to 512 [ 94.935224][ T4490] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.986518][ T4490] EXT4-fs (loop0): 1 truncate cleaned up [ 94.992221][ T4490] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 95.101341][ T4488] EXT4-fs (loop4): 1 orphan inode deleted [ 95.111194][ T4488] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.122494][ T4488] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.501469][ T4508] input: syz1 as /devices/virtual/input/input6 [ 96.743175][ T4240] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.244336][ T4240] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 97.264151][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.277196][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.631496][ T4240] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 99.073863][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 100.923491][ T4240] usb 1-1: string descriptor 0 read error: -71 [ 100.930343][ T4240] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 100.939730][ T4240] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 100.953384][ T4240] usb 1-1: config 0 descriptor?? [ 100.973312][ T4240] usb 1-1: can't set config #0, error -71 [ 100.990852][ T4240] usb 1-1: USB disconnect, device number 3 [ 101.039786][ T4539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 101.489108][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 104.013950][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 105.773146][ T4592] ceph: No source [ 105.796116][ T4592] 9pnet_virtio: no channels available for device syz [ 105.809221][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 105.818193][ T4592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.85'. [ 106.436774][ T4604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.383905][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 112.180305][ T4604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.195106][ T4639] binder: 4638:4639 ioctl c0306201 0 returned -14 [ 112.205579][ T4639] binder: 4638:4639 ioctl c0306201 0 returned -14 [ 112.294526][ T4604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.561898][ T4604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.609783][ T4653] loop1: detected capacity change from 0 to 1024 [ 112.649250][ T4604] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.666747][ T4653] EXT4-fs (loop1): Ignoring removed nobh option [ 112.680000][ T4604] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.695875][ T4604] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.711088][ T4653] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.107: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 112.731613][ T4653] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.107: couldn't read orphan inode 11 (err -117) [ 112.743878][ T4604] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.760358][ T4604] syz.0.91 (4604) used greatest stack depth: 20616 bytes left [ 112.770679][ T4653] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 112.800639][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 112.822274][ T4656] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.107: Invalid block bitmap block 0 in block_group 0 [ 112.838964][ T4656] Quota error (device loop1): write_blk: dquota write failed [ 112.849378][ T4656] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 112.859475][ T4656] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.107: Failed to acquire dquot type 0 [ 112.883730][ T4656] syz.1.107 (4656) used greatest stack depth: 19432 bytes left [ 113.397831][ T4294] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 113.653184][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.653478][ T4294] usb 3-1: config 0 has no interfaces? [ 114.659061][ T4294] usb 3-1: New USB device found, idVendor=05c6, idProduct=9048, bcdDevice=e3.14 [ 114.698237][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.739256][ T4294] usb 3-1: config 0 descriptor?? [ 114.863365][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 115.031443][ T146] ================================================================== [ 115.040041][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 115.048006][ T146] Read of size 1 at addr ffff88802b1eb401 by task kworker/u5:0/146 [ 115.055923][ T146] [ 115.058274][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 115.065757][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.075837][ T146] Workqueue: hci2 hci_rx_work [ 115.080560][ T146] Call Trace: [ 115.083863][ T146] [ 115.086797][ T146] dump_stack_lvl+0x168/0x230 [ 115.091510][ T146] ? show_regs_print_info+0x20/0x20 [ 115.096707][ T146] ? load_image+0x3b0/0x3b0 [ 115.101233][ T146] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 115.106811][ T146] print_address_description+0x60/0x2d0 [ 115.112380][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 115.117703][ T146] kasan_report+0xdf/0x130 [ 115.122142][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 115.127345][ T146] hci_le_meta_evt+0x12c0/0x3b80 [ 115.132295][ T146] ? hci_event_packet+0x2a0/0x12f0 [ 115.137697][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 115.143755][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 115.149381][ T146] ? mark_lock+0x94/0x320 [ 115.153704][ T146] ? mutex_unlock+0x10/0x10 [ 115.158520][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 115.164507][ T146] ? lock_chain_count+0x20/0x20 [ 115.169439][ T146] ? __rwlock_init+0x140/0x140 [ 115.174406][ T146] hci_event_packet+0xe05/0x12f0 [ 115.179338][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 115.184552][ T146] ? rcu_lock_release+0x20/0x20 [ 115.189397][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 115.194846][ T146] hci_rx_work+0x255/0xa10 [ 115.199287][ T146] process_one_work+0x863/0x1000 [ 115.204239][ T146] ? worker_detach_from_pool+0x240/0x240 [ 115.209870][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 115.215329][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 115.220511][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 115.225881][ T146] ? wq_worker_running+0x97/0x170 [ 115.230900][ T146] worker_thread+0xaa8/0x12a0 [ 115.235602][ T146] kthread+0x436/0x520 [ 115.239783][ T146] ? rcu_lock_release+0x20/0x20 [ 115.244721][ T146] ? kthread_blkcg+0xd0/0xd0 [ 115.249319][ T146] ret_from_fork+0x1f/0x30 [ 115.253736][ T146] [ 115.256837][ T146] [ 115.259151][ T146] Allocated by task 4660: [ 115.263470][ T146] __kasan_kmalloc+0xb5/0xf0 [ 115.268050][ T146] __alloc_skb+0x22c/0x750 [ 115.272531][ T146] vhci_write+0xbc/0x450 [ 115.276854][ T146] vfs_write+0x712/0xd00 [ 115.281086][ T146] ksys_write+0x14d/0x250 [ 115.285513][ T146] do_syscall_64+0x4c/0xa0 [ 115.289927][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.295840][ T146] [ 115.298176][ T146] The buggy address belongs to the object at ffff88802b1eb000 [ 115.298176][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 115.312480][ T146] The buggy address is located 1 bytes to the right of [ 115.312480][ T146] 1024-byte region [ffff88802b1eb000, ffff88802b1eb400) [ 115.326447][ T146] The buggy address belongs to the page: [ 115.332066][ T146] page:ffffea0000ac7a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b1e8 [ 115.342305][ T146] head:ffffea0000ac7a00 order:3 compound_mapcount:0 compound_pincount:0 [ 115.350717][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 115.358830][ T146] raw: 00fff00000010200 0000000000000000 0000000b00000001 ffff888016841dc0 [ 115.367417][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 115.375987][ T146] page dumped because: kasan: bad access detected [ 115.382391][ T146] page_owner tracks the page as allocated [ 115.388092][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4184, ts 60572854399, free_ts 60570037613 [ 115.407306][ T146] get_page_from_freelist+0x1b77/0x1c60 [ 115.413138][ T146] __alloc_pages+0x1e1/0x470 [ 115.417725][ T146] new_slab+0xc0/0x4b0 [ 115.421803][ T146] ___slab_alloc+0x81e/0xdf0 [ 115.426383][ T146] __kmalloc_node+0x200/0x3b0 [ 115.431047][ T146] qdisc_alloc+0x8d/0xb10 [ 115.435407][ T146] qdisc_create_dflt+0x5f/0x430 [ 115.440250][ T146] dev_activate+0x331/0x12b0 [ 115.444975][ T146] __dev_open+0x32c/0x420 [ 115.449320][ T146] __dev_change_flags+0x20a/0x6a0 [ 115.454362][ T146] dev_change_flags+0x82/0x1a0 [ 115.459157][ T146] do_setlink+0xc01/0x3980 [ 115.463855][ T146] rtnl_newlink+0x1419/0x17d0 [ 115.468523][ T146] rtnetlink_rcv_msg+0x7ff/0xe90 [ 115.473454][ T146] netlink_rcv_skb+0x1e0/0x430 [ 115.478310][ T146] netlink_unicast+0x774/0x920 [ 115.483249][ T146] page last free stack trace: [ 115.489557][ T146] free_unref_page_prepare+0x637/0x6c0 [ 115.495255][ T146] free_unref_page+0x94/0x280 [ 115.500182][ T146] qlist_free_all+0x35/0x90 [ 115.504962][ T146] kasan_quarantine_reduce+0x150/0x160 [ 115.510687][ T146] __kasan_slab_alloc+0x2f/0xd0 [ 115.515550][ T146] slab_post_alloc_hook+0x4c/0x380 [ 115.520671][ T146] __kmalloc+0x127/0x330 [ 115.525134][ T146] fib_create_info+0xabc/0x24f0 [ 115.530380][ T146] fib_table_insert+0xe4/0x1b20 [ 115.535238][ T146] fib_magic+0x2c1/0x390 [ 115.539623][ T146] fib_add_ifaddr+0x3f7/0x5e0 [ 115.544759][ T146] fib_netdev_event+0x35c/0x480 [ 115.549749][ T146] raw_notifier_call_chain+0xcb/0x160 [ 115.555159][ T146] __dev_notify_flags+0x178/0x2d0 [ 115.560531][ T146] dev_change_flags+0xe3/0x1a0 [ 115.565333][ T146] do_setlink+0xc01/0x3980 [ 115.569785][ T146] [ 115.572392][ T146] Memory state around the buggy address: [ 115.578212][ T146] ffff88802b1eb300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.586300][ T146] ffff88802b1eb380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.594388][ T146] >ffff88802b1eb400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.602465][ T146] ^ [ 115.606634][ T146] ffff88802b1eb480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.614717][ T146] ffff88802b1eb500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.622972][ T146] ================================================================== [ 115.631062][ T146] Disabling lock debugging due to kernel taint [ 115.653355][ T23] usb 1-1: config 0 has no interfaces? [ 115.659171][ T4294] usb 3-1: string descriptor 0 read error: -71 [ 115.746693][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.753950][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 115.762828][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.772902][ T146] Workqueue: hci2 hci_rx_work [ 115.777695][ T146] Call Trace: [ 115.780989][ T146] [ 115.783937][ T146] dump_stack_lvl+0x168/0x230 [ 115.788645][ T146] ? show_regs_print_info+0x20/0x20 [ 115.793858][ T146] ? load_image+0x3b0/0x3b0 [ 115.798555][ T146] panic+0x2c9/0x7f0 [ 115.802472][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 115.806999][ T146] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 115.812932][ T146] ? _raw_spin_unlock+0x40/0x40 [ 115.817810][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 115.823122][ T146] check_panic_on_warn+0x80/0xa0 [ 115.828165][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 115.833380][ T146] end_report+0x6d/0xf0 [ 115.837554][ T146] kasan_report+0x102/0x130 [ 115.842083][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 115.847212][ T146] hci_le_meta_evt+0x12c0/0x3b80 [ 115.852161][ T146] ? hci_event_packet+0x2a0/0x12f0 [ 115.857301][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 115.863562][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 115.869301][ T146] ? mark_lock+0x94/0x320 [ 115.873816][ T146] ? mutex_unlock+0x10/0x10 [ 115.878342][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 115.884340][ T146] ? lock_chain_count+0x20/0x20 [ 115.889207][ T146] ? __rwlock_init+0x140/0x140 [ 115.894073][ T146] hci_event_packet+0xe05/0x12f0 [ 115.899217][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 115.904479][ T146] ? rcu_lock_release+0x20/0x20 [ 115.909475][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 115.914669][ T146] hci_rx_work+0x255/0xa10 [ 115.919080][ T146] process_one_work+0x863/0x1000 [ 115.924016][ T146] ? worker_detach_from_pool+0x240/0x240 [ 115.929645][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 115.935007][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 115.940053][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 115.945412][ T146] ? wq_worker_running+0x97/0x170 [ 115.950631][ T146] worker_thread+0xaa8/0x12a0 [ 115.955568][ T146] kthread+0x436/0x520 [ 115.959648][ T146] ? rcu_lock_release+0x20/0x20 [ 115.964593][ T146] ? kthread_blkcg+0xd0/0xd0 [ 115.969323][ T146] ret_from_fork+0x1f/0x30 [ 115.973740][ T146] [ 115.976942][ T146] Kernel Offset: disabled [ 115.981281][ T146] Rebooting in 86400 seconds..