last executing test programs: 1m40.53400564s ago: executing program 2 (id=263): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="00000003ffffffff00"/25], 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) eventfd(0xfffffc00) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@init_itable}]}, 0x82, 0x48f, &(0x7f0000000840)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044040}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 1m38.130583495s ago: executing program 2 (id=270): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x3, 0x4002) r3 = syz_open_dev$usbfs(0x0, 0x70, 0x103301) syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x154) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 1m37.045612685s ago: executing program 2 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x80000000, 0x0, 0x14, "1b10b9ad00"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xe, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x1, 0x1, 0x0, "b9"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x4, &(0x7f0000000000)='BBBB') 1m35.168093916s ago: executing program 2 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbdabbbbbb86dd6064103e0000000000000038301b5ba61c24c31c9e9052f93bc2e2b13ad300ffff0a010100"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000070a010100000000000000000500000009003200000000a173f003be2733005c195ad257eb8a241291c938dc62812bba95125bea5c0cab91b22cc8fd6ab14e118da6d7a48b717266f8f4d9fb8c82dd1b366463944ddc4a530e834c92a345370596f92635ed69c07f"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a000000"], 0x44}}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8050640a, &(0x7f00000001c0)={0x1, 0x30000, 0x10, 0x5, 0x2, 0x8, 0x100, 0x0, 0x40, 0x7, 0x10, 0xffffff19, &(0x7f0000000280)=[0x800], 0x1, 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000428bd7000fbdbdf25040000000800020007000000080002000300002ca8798fbabb3c11001800068014000400fe8800000000000000000000000001014000098014000400fe8800000000000000000000000000010800060000000000080003007f000001060001000a000000080006000c000000080006000a00000008000200000000000500050003000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0xe}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m34.061606966s ago: executing program 2 (id=281): socket$inet6(0xa, 0x2, 0x0) capset(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = getpid() prlimit64(r2, 0x7, &(0x7f0000000140)={0x10000000008, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4, 0x80000000}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r6, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa050013"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 1m29.976069458s ago: executing program 2 (id=288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 1m13.779629199s ago: executing program 32 (id=288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 20.592205889s ago: executing program 4 (id=451): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x67) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r4, &(0x7f0000004440)=""/4096, 0x1000) 19.303882774s ago: executing program 4 (id=454): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003d20"], 0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000180)={0x97, 0x7}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x64a9, 0x0) keyctl$setperm(0x5, 0x0, 0x20004) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0105000000000000002525000000"], 0x14}}, 0x6048800) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) 17.732388997s ago: executing program 4 (id=457): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) 16.359986834s ago: executing program 5 (id=460): syslog(0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 15.168061246s ago: executing program 5 (id=465): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r6, 0x0, 0x0, 0x1822b, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r7, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6(0xa, 0x80002, 0x0) 11.987580293s ago: executing program 5 (id=470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)='y', 0x1}], 0x1}}], 0x1, 0x20044040) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000005c0)=0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='securityfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) 11.933973125s ago: executing program 4 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 10.087944705s ago: executing program 3 (id=473): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e2000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000fc0100"/380], 0x190) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) wait4(0x0, 0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) 8.566594977s ago: executing program 5 (id=476): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085a30000860000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x4, 0x4, 0xc, 0xb}, {0x2, 0x2, 0x4, 0x3}], 0x10, 0x1000}, 0x94) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x105000, 0x53) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x100, 0x80000000, 0x2, 0x400, 0xe, 0x800001, 0x75d, 0x3, 0x2, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x5, 0x7c, 0xfffffffe, 0x40000003, 0x1, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x3, 0x8, 0x8, 0x0, 0x1]}) ioctl$COMEDI_DEVINFO(r4, 0x80b06401, &(0x7f00000000c0)) 8.548180347s ago: executing program 0 (id=477): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001380), 0x1ff, 0xa8b01) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x5, 0x0, r5}) 6.99389017s ago: executing program 0 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x10000004}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x76) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$inet6(0xa, 0x80003, 0xff) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/184, 0x1b}], 0x1) syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x1080}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETGROUP(r5, 0x400454ce, 0xffffffffffffffff) 6.394093746s ago: executing program 3 (id=480): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001380), 0x1ff, 0xa8b01) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 5.979469057s ago: executing program 0 (id=481): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043) 5.539453089s ago: executing program 1 (id=482): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)=0x3) getrlimit(0x7, &(0x7f0000000180)) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r6, 0x0, 0x0, 0x1822b, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r7, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6(0xa, 0x80002, 0x0) 5.092248031s ago: executing program 5 (id=483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.41331242s ago: executing program 1 (id=484): mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 4.323632672s ago: executing program 3 (id=485): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 3.856228395s ago: executing program 3 (id=486): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.807283366s ago: executing program 3 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xc54c295c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x7, 0x2000, 0xffffffffffffffef, 0x7d, 0xfffffffffffffffc, 0x8000, 0xf, 0xfffffffffffff942}, 0x0, &(0x7f00000002c0)={0x3fe, 0x3ffffff, 0x397e, 0x9, 0x7fffffffffffffff, 0x4000000000f, 0x2, 0x7fffffffffffffff}, 0x0, 0x0) 3.761178018s ago: executing program 5 (id=488): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044040) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='securityfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) readv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/162, 0xa2}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) 2.751797735s ago: executing program 4 (id=489): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000001c0)={0x1, 0x30000, 0x10, 0x5, 0x2, 0x8, 0x100, 0x0, 0x40, 0x7, 0x10, 0xffffff19, &(0x7f0000000280)=[0x800], 0x1, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x6, 0x0, &(0x7f0000000200)="df12c9f7b9a6", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = fanotify_init(0x1a, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r4, 0x641, 0x1028, r5, 0x0) fanotify_mark(r4, 0x1, 0x48000038, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = syz_io_uring_setup(0x4a7b, &(0x7f00000000c0)={0x0, 0x679d, 0x0, 0x2000003, 0x3ce}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) 1.322491154s ago: executing program 3 (id=490): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e2000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000fc0100"/380], 0x190) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) wait4(0x0, 0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) 1.235381216s ago: executing program 0 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x10000004}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$inet6(0xa, 0x80003, 0xff) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/184, 0x1b}], 0x1) syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x1080}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, 0xffffffffffffffff) 858.455437ms ago: executing program 1 (id=492): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040001) setresuid(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 497.470067ms ago: executing program 0 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040), 0x0) 295.956252ms ago: executing program 0 (id=494): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$igmp(0x2, 0x3, 0x2) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0xb0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000022c0)) io_uring_setup(0x49c6, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x0, 0x0, 0x0, 0x4000007}) 271.677513ms ago: executing program 1 (id=495): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) 173.049676ms ago: executing program 1 (id=496): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 0s ago: executing program 1 (id=497): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. syzkaller login: [ 46.941308][ T4175] cgroup: Unknown subsys name 'net' [ 47.084905][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.271177][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.482101][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 49.559731][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.566976][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.575629][ T4189] device bridge_slave_0 entered promiscuous mode [ 49.606636][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.614175][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.622269][ T4189] device bridge_slave_1 entered promiscuous mode [ 49.644179][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 49.662517][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.673892][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.730850][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 49.751038][ T4189] team0: Port device team_slave_0 added [ 49.761556][ T4189] team0: Port device team_slave_1 added [ 49.806122][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 49.822089][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.829180][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.837386][ T4190] device bridge_slave_0 entered promiscuous mode [ 49.857821][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.864887][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.890849][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.902809][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 49.912292][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.919333][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.927624][ T4190] device bridge_slave_1 entered promiscuous mode [ 49.942782][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.949721][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.975749][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.039788][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.046965][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.054679][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.069040][ T4189] device hsr_slave_0 entered promiscuous mode [ 50.075770][ T4189] device hsr_slave_1 entered promiscuous mode [ 50.083770][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.096802][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.104014][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.111973][ T4188] device bridge_slave_1 entered promiscuous mode [ 50.122705][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.154011][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.189341][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.210719][ T4190] team0: Port device team_slave_0 added [ 50.216630][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.223837][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.231915][ T4199] device bridge_slave_0 entered promiscuous mode [ 50.244440][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.251655][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.259422][ T4199] device bridge_slave_1 entered promiscuous mode [ 50.277169][ T4190] team0: Port device team_slave_1 added [ 50.310605][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.317730][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.325682][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.333334][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.340570][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.367185][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.384660][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.392250][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.418174][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.431364][ T4188] team0: Port device team_slave_0 added [ 50.440621][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.447666][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.455671][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.463947][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.482492][ T4188] team0: Port device team_slave_1 added [ 50.504431][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.547658][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.554807][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.580909][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.593204][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.600379][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.626373][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.639534][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.655894][ T4199] team0: Port device team_slave_0 added [ 50.673365][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.686999][ T4199] team0: Port device team_slave_1 added [ 50.694883][ T4190] device hsr_slave_0 entered promiscuous mode [ 50.702006][ T4190] device hsr_slave_1 entered promiscuous mode [ 50.708624][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.716397][ T4190] Cannot create hsr debugfs directory [ 50.762988][ T4188] device hsr_slave_0 entered promiscuous mode [ 50.770494][ T4188] device hsr_slave_1 entered promiscuous mode [ 50.776970][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.784614][ T4188] Cannot create hsr debugfs directory [ 50.807449][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.814448][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.840558][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.853737][ T4191] team0: Port device team_slave_0 added [ 50.859819][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.866915][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.893091][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.912615][ T4191] team0: Port device team_slave_1 added [ 50.972478][ T4199] device hsr_slave_0 entered promiscuous mode [ 50.979021][ T4199] device hsr_slave_1 entered promiscuous mode [ 50.986382][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.994171][ T4199] Cannot create hsr debugfs directory [ 51.000218][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.007151][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.033195][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.046757][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.054314][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.080524][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.149203][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.156502][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.163224][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.170917][ T4191] Cannot create hsr debugfs directory [ 51.301023][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 51.305487][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 51.308206][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 51.314550][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 51.319782][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 51.331650][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.342056][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.351735][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.366026][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.431387][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.440769][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.456382][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.466436][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.520420][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.529358][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.538413][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.567803][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.593303][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.607786][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.620363][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.638659][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.655703][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.663795][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.675956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.686486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.707984][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.729656][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.738284][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.747529][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.754714][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.763135][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.778449][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.787938][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.804019][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.816179][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.833321][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.841408][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.848919][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.858148][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.867211][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.874287][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.885103][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.895241][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.921100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.931619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.942354][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.949395][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.957355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.965762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.974353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.982645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.991215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.999418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.007764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.016680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.025607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.034145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.042123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.068247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.078238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.087754][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.094834][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.103799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.116314][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.129217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.170181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.187444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.223456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.237691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.248242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.263021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.272801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.281623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.289777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.301710][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.313909][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.321657][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.355858][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.364488][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.372229][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.381326][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.393839][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.402848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.413343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.425752][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.442036][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.463781][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.481083][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.500884][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.507950][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.516524][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.532575][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.541979][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.550756][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.557803][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.571830][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.593034][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.616057][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.626465][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.640858][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.647915][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.657199][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.667048][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.676850][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.686013][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.694944][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.702690][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.710497][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.719091][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.732580][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.741122][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.748667][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.757377][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.766610][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.775256][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.782331][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.795895][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.809711][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.821868][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.853637][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.863264][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.888500][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.911446][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.919772][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.928555][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.937614][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.946204][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.954888][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.962903][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.972866][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.000286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.009736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.024563][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.031670][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.045993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.054695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.064383][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.071463][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.079044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.087808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.096258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.105817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.114092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.124882][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.134433][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.149473][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.163091][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.188084][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.196439][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.205393][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.214826][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.226692][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.236095][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.251630][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.261141][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.271148][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.287532][ T4189] device veth0_vlan entered promiscuous mode [ 53.309417][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.323168][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.336294][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.344622][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.353497][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.362378][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.370694][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.378820][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.386788][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 53.387491][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.392988][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 53.406466][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.406835][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 53.415212][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.421016][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 53.430102][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.434104][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 53.446002][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.454817][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.464756][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.489791][ T4189] device veth1_vlan entered promiscuous mode [ 53.509716][ T4190] device veth0_vlan entered promiscuous mode [ 53.532298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.549168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.558415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.573818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.593739][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.615177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.623680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.632522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.639954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.649280][ T4190] device veth1_vlan entered promiscuous mode [ 53.663117][ T4189] device veth0_macvtap entered promiscuous mode [ 53.678866][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.688624][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.698760][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.720620][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.731396][ T4189] device veth1_macvtap entered promiscuous mode [ 53.753906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.762092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.771159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.786751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.795355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.824780][ T4190] device veth0_macvtap entered promiscuous mode [ 53.832820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.841134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.848504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.856298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.866227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.874616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.882729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.894760][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.908155][ T4190] device veth1_macvtap entered promiscuous mode [ 53.918247][ T4191] device veth0_vlan entered promiscuous mode [ 53.936999][ T4191] device veth1_vlan entered promiscuous mode [ 53.944237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.952910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.961323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.969785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.985816][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.007275][ T4188] device veth0_vlan entered promiscuous mode [ 54.018264][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.032060][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.042941][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.058442][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.066177][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.075084][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.083670][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.092433][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.101605][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.109706][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.118643][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.127533][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.136739][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.145597][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.153526][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.168173][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.178670][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.192064][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.202275][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.211490][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.220940][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.229620][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.247759][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.256923][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.266976][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.275911][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.287920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.296854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.305997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.314751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.335451][ T4191] device veth0_macvtap entered promiscuous mode [ 54.367725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.376466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.395953][ T4188] device veth1_vlan entered promiscuous mode [ 54.414471][ T4199] device veth0_vlan entered promiscuous mode [ 54.425358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.433896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.442151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.451008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.461593][ T4191] device veth1_macvtap entered promiscuous mode [ 54.485310][ T4199] device veth1_vlan entered promiscuous mode [ 54.492569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.505759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.514351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.522031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.529611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.555431][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.572944][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.584435][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.595291][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.606645][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.637511][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.648096][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.659070][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.670698][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.681872][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.689183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.697539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.706258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.715842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.724531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.754453][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.763814][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.773240][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.782023][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.794918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.803624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.813402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.822427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.836357][ T4199] device veth0_macvtap entered promiscuous mode [ 54.843201][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.848846][ T4188] device veth0_macvtap entered promiscuous mode [ 54.852603][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.873513][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.882249][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.889149][ T4199] device veth1_macvtap entered promiscuous mode [ 54.907525][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.915614][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.924880][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.933027][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.941449][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.953321][ T4188] device veth1_macvtap entered promiscuous mode [ 54.976682][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.987998][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.998747][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.009377][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.019412][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.030182][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.041507][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.070101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.077978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.088070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.113938][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.124457][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.135463][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.146124][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.157093][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.167728][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.179279][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.194763][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.203565][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.212585][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.222023][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.235545][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.247802][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.257647][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.269001][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.278998][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.289440][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.299258][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.310340][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.321209][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.340093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.348672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.358456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.368249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.377695][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.383123][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.397599][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.409132][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.412000][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.416748][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.434401][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.445517][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.459447][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.472440][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.480464][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 55.482925][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.488661][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 55.498694][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.500959][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.510813][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 55.529247][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 55.535995][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 55.543141][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.551230][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.561008][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.569432][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.580542][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.589239][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.599328][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.608100][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.631951][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.639774][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.648690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.682479][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.700370][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.742240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.815685][ T481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.838642][ T481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.882609][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.379447][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.401371][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.471656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.483162][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.537211][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.555607][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.621262][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.641342][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.902645][ T4280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 57.391976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.589266][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 58.281975][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 58.298837][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 58.305168][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 58.318592][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 58.333141][ T4295] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 58.405724][ T4302] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.431989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.453363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.464044][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.474734][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.485418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.496106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.506793][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.517477][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.528162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.538848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.894802][ T4307] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 62.036442][ T4319] loop4: detected capacity change from 0 to 512 [ 62.207367][ T4334] sched: RT throttling activated [ 62.747352][ T4332] futex_wake_op: syz.3.10 tries to shift op by -1; fix this program [ 63.133548][ T4340] loop2: detected capacity change from 0 to 2048 [ 63.277045][ T4340] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 63.515324][ T4340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.040576][ T4319] EXT4-fs: error -4 creating inode table initialization thread [ 64.087090][ T4319] EXT4-fs (loop4): mount failed [ 64.157982][ T4349] process 'syz.1.16' launched './file2' with NULL argv: empty string added [ 66.895469][ T4364] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 67.819148][ T4367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.400950][ T4232] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 69.411261][ T4232] Bluetooth: hci4: Injecting HCI hardware error event [ 69.419578][ T4204] Bluetooth: hci4: hardware error 0x00 [ 70.482344][ T4384] sctp: failed to load transform for md5: -2 [ 71.032094][ T4416] Zero length message leads to an empty skb [ 71.126730][ T4417] loop2: detected capacity change from 0 to 512 [ 72.124484][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.130775][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.753197][ T4417] EXT4-fs (loop2): 1 truncate cleaned up [ 72.760825][ T4417] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 73.065990][ T4427] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 73.745894][ T4429] futex_wake_op: syz.3.33 tries to shift op by -1; fix this program [ 73.975775][ T4432] loop0: detected capacity change from 0 to 2048 [ 75.582232][ T4432] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 75.618307][ T4432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.865651][ T4437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.072553][ T1324] cfg80211: failed to load regulatory.db [ 78.641330][ T4465] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.662642][ T4461] syz.2.45: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 78.677145][ T4461] CPU: 1 PID: 4461 Comm: syz.2.45 Not tainted syzkaller #0 [ 78.684329][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 78.694366][ T4461] Call Trace: [ 78.697652][ T4461] [ 78.700566][ T4461] dump_stack_lvl+0x188/0x250 [ 78.705233][ T4461] ? rcu_lock_release+0x5/0x20 [ 78.710014][ T4461] ? show_regs_print_info+0x20/0x20 [ 78.715190][ T4461] ? load_image+0x400/0x400 [ 78.719676][ T4461] warn_alloc+0x243/0x320 [ 78.724022][ T4461] ? rcu_lock_release+0x20/0x20 [ 78.728859][ T4461] ? zone_watermark_ok_safe+0x240/0x240 [ 78.734385][ T4461] ? dvb_demux_do_ioctl+0x313/0x530 [ 78.739584][ T4461] ? kfree+0xef/0x2a0 [ 78.743549][ T4461] __vmalloc_node_range+0x2b1/0x8b0 [ 78.748729][ T4461] ? mutex_lock_io_nested+0x60/0x60 [ 78.753918][ T4461] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 78.759709][ T4461] vmalloc+0x75/0x80 [ 78.763589][ T4461] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 78.769380][ T4461] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 78.774995][ T4461] dvb_demux_do_ioctl+0x450/0x530 [ 78.780002][ T4461] dvb_usercopy+0x191/0x2b0 [ 78.784510][ T4461] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 78.790073][ T4461] ? dvb_generic_ioctl+0xb0/0xb0 [ 78.795003][ T4461] ? dvb_demux_poll+0x210/0x210 [ 78.799841][ T4461] dvb_demux_ioctl+0x25/0x30 [ 78.804419][ T4461] __se_sys_ioctl+0xfa/0x170 [ 78.808999][ T4461] do_syscall_64+0x4c/0xa0 [ 78.813395][ T4461] ? clear_bhb_loop+0x30/0x80 [ 78.818053][ T4461] ? clear_bhb_loop+0x30/0x80 [ 78.822710][ T4461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.828588][ T4461] RIP: 0033:0x7f2bc5f95dd9 [ 78.832984][ T4461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.852570][ T4461] RSP: 002b:00007f2bc41ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.860972][ T4461] RAX: ffffffffffffffda RBX: 00007f2bc620efa0 RCX: 00007f2bc5f95dd9 [ 78.868922][ T4461] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 78.876877][ T4461] RBP: 00007f2bc602bd69 R08: 0000000000000000 R09: 0000000000000000 [ 78.884831][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.892793][ T4461] R13: 00007f2bc620f038 R14: 00007f2bc620efa0 R15: 00007ffe7c1790b8 [ 78.900753][ T4461] [ 78.904088][ T4461] Mem-Info: [ 78.907223][ T4461] active_anon:3134 inactive_anon:11493 isolated_anon:0 [ 78.907223][ T4461] active_file:4586 inactive_file:36470 isolated_file:0 [ 78.907223][ T4461] unevictable:768 dirty:554 writeback:0 [ 78.907223][ T4461] slab_reclaimable:20259 slab_unreclaimable:93234 [ 78.907223][ T4461] mapped:36103 shmem:10219 pagetables:627 bounce:0 [ 78.907223][ T4461] kernel_misc_reclaimable:0 [ 78.907223][ T4461] free:1386922 free_pcp:8780 free_cma:0 [ 78.949028][ T4461] Node 0 active_anon:12504kB inactive_anon:45464kB active_file:18140kB inactive_file:145880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144412kB dirty:2216kB writeback:0kB shmem:38800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10604kB pagetables:2508kB all_unreclaimable? no [ 78.980708][ T4461] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 79.009952][ T4461] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 79.036126][ T4461] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 79.041853][ T4461] Node 0 DMA32 free:1620800kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:12504kB inactive_anon:45464kB active_file:18140kB inactive_file:145880kB unevictable:1536kB writepending:2216kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:22204kB local_pcp:7016kB free_cma:0kB [ 79.071902][ T4461] lowmem_reserve[]: 0 0 0 0 0 [ 79.076585][ T4461] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 79.102143][ T4461] lowmem_reserve[]: 0 0 0 0 0 [ 79.107031][ T4461] Node 1 Normal free:3911528kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:12916kB local_pcp:8408kB free_cma:0kB [ 79.135822][ T4461] lowmem_reserve[]: 0 0 0 0 0 [ 79.140502][ T4461] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 79.153116][ T4461] Node 0 DMA32: 2*4kB (UM) 3*8kB (UME) 2*16kB (UE) 0*32kB 2*64kB (UE) 3*128kB (UME) 1*256kB (E) 2*512kB (UM) 7*1024kB (UM) 3*2048kB (UME) 392*4096kB (M) = 1620800kB [ 79.169646][ T4461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 79.181247][ T4461] Node 1 Normal: 74*4kB (UME) 29*8kB (UME) 18*16kB (UME) 51*32kB (UME) 30*64kB (UE) 19*128kB (UE) 3*256kB (UM) 3*512kB (U) 1*1024kB (U) 1*2048kB (M) 952*4096kB (ME) = 3911568kB [ 79.198802][ T4461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 79.208336][ T4461] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 79.217775][ T4461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 79.227314][ T4461] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 79.236570][ T4461] 51273 total pagecache pages [ 79.241258][ T4461] 0 pages in swap cache [ 79.245392][ T4461] Swap cache stats: add 0, delete 0, find 0/0 [ 79.251450][ T4461] Free swap = 124996kB [ 79.255580][ T4461] Total swap = 124996kB [ 79.259731][ T4461] 2097051 pages RAM [ 79.263511][ T4461] 0 pages HighMem/MovableOnly [ 79.268157][ T4461] 411492 pages reserved [ 79.272318][ T4461] 0 pages cma reserved [ 79.714714][ T4476] loop4: detected capacity change from 0 to 512 [ 81.195619][ T4476] EXT4-fs (loop4): 1 truncate cleaned up [ 81.236405][ T4476] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 81.275448][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 81.509567][ T4486] loop3: detected capacity change from 0 to 2048 [ 81.883508][ T4235] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 82.569870][ T4486] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 82.589283][ T4486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.795262][ T4235] Bluetooth: hci3: Injecting HCI hardware error event [ 82.802771][ T4204] Bluetooth: hci3: hardware error 0x00 [ 84.673088][ T4514] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.560433][ T4493] loop0: detected capacity change from 0 to 32768 [ 86.533350][ T4396] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (4396) [ 87.014237][ T4537] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 87.689970][ T7] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 87.776188][ T7] Bluetooth: hci2: Injecting HCI hardware error event [ 87.783715][ T4200] Bluetooth: hci2: hardware error 0x00 [ 88.787705][ T4531] ODEBUG: Out of memory. ODEBUG disabled [ 89.110399][ T4559] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.534867][ T4205] Bluetooth: hci2: unexpected event for opcode 0x203d [ 90.569446][ T4577] loop0: detected capacity change from 0 to 164 [ 91.014788][ T7] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 91.044984][ T7] Bluetooth: hci1: Injecting HCI hardware error event [ 91.156126][ T4201] Bluetooth: hci1: hardware error 0x00 [ 92.360601][ T4594] loop3: detected capacity change from 0 to 2048 [ 92.670927][ T4594] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 92.962312][ T4594] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.457828][ T4570] loop4: detected capacity change from 0 to 32768 [ 94.145888][ T4614] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.644382][ T4629] loop0: detected capacity change from 0 to 1024 [ 95.813825][ T4204] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 95.813885][ T4204] Bluetooth: hci0: Dropping invalid advertising data [ 95.828035][ T4204] Bluetooth: hci0: Malicious advertising data. [ 95.853624][ T4629] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 97.927786][ T4653] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 98.343445][ T4204] Bluetooth: hci2: unexpected event for opcode 0x203d [ 98.371809][ T4662] loop0: detected capacity change from 0 to 4096 [ 98.514436][ T4665] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.559514][ T4662] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 100.515802][ T4688] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.238367][ T4689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 101.314201][ T4689] ======================================================= [ 101.314201][ T4689] WARNING: The mand mount option has been deprecated and [ 101.314201][ T4689] and is ignored by this kernel. Remove the mand [ 101.314201][ T4689] option from the mount to silence this warning. [ 101.314201][ T4689] ======================================================= [ 101.468286][ T4692] loop2: detected capacity change from 0 to 164 [ 102.097309][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.509614][ T4705] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 104.285979][ T4722] loop3: detected capacity change from 0 to 4096 [ 104.420286][ T4725] loop2: detected capacity change from 0 to 2048 [ 104.462166][ T4722] ntfs3: Unknown parameter 'nocase' [ 105.218487][ T4725] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 105.321032][ T4725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.469549][ T4733] loop3: detected capacity change from 0 to 128 [ 105.482116][ T4711] loop1: detected capacity change from 0 to 32768 [ 105.892568][ T4733] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 106.281498][ T4733] hpfs: filesystem error: improperly stopped [ 106.287857][ T4733] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 106.357607][ T4733] hpfs: You really don't want any checks? You are crazy... [ 106.361552][ T4738] loop4: detected capacity change from 0 to 164 [ 106.379956][ T4733] hpfs: hpfs_map_sector(): read error [ 106.409797][ T4733] hpfs: code page support is disabled [ 106.418598][ T4733] hpfs: hpfs_map_4sectors(): unaligned read [ 106.425295][ T4733] hpfs: hpfs_map_4sectors(): unaligned read [ 106.431302][ T4733] hpfs: filesystem error: unable to find root dir [ 106.449289][ T4733] hpfs: hpfs_map_4sectors(): unaligned read [ 107.278720][ T4749] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 108.211339][ T4757] vivid-002: kernel_thread() failed [ 111.065852][ T4783] loop2: detected capacity change from 0 to 2048 [ 111.280826][ T4783] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 111.314363][ T4760] loop1: detected capacity change from 0 to 32768 [ 111.374352][ T4783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.416111][ T4760] JBD2: Ignoring recovery information on journal [ 111.681331][ T4760] JBD2: recovery failed [ 111.737979][ T4760] (syz.1.130,4760,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 111.849820][ T4760] (syz.1.130,4760,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 112.017855][ T4760] (syz.1.130,4760,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 112.148918][ T4760] (syz.1.130,4760,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 112.164975][ T4793] loop2: detected capacity change from 0 to 164 [ 112.403647][ T4760] (syz.1.130,4760,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 113.753741][ T13] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 114.497058][ T4823] loop4: detected capacity change from 0 to 256 [ 114.550472][ T4822] netlink: 'syz.0.147': attribute type 6 has an invalid length. [ 114.559358][ T4820] netlink: 'syz.0.147': attribute type 6 has an invalid length. [ 114.583491][ T4823] exfat: Unknown parameter 'keep_last_dots' [ 115.003073][ T4825] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 116.041572][ T4833] loop0: detected capacity change from 0 to 164 [ 117.034481][ T4835] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 117.814473][ T13] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 117.822290][ T13] usb 4-1: can't read configurations, error -71 [ 117.893333][ T4838] loop4: detected capacity change from 0 to 2048 [ 117.914275][ T4842] loop3: detected capacity change from 0 to 2048 [ 118.087032][ T4842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.490026][ T4838] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 119.504247][ T4838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.627503][ T4855] loop1: detected capacity change from 0 to 512 [ 119.657038][ T4842] capability: warning: `syz.3.154' uses deprecated v2 capabilities in a way that may be insecure [ 119.706883][ T4855] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.737637][ T4855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.901114][ T4855] EXT4-fs (loop1): 1 truncate cleaned up [ 120.026546][ T4855] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.687477][ T4876] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 125.416013][ T4882] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 126.197563][ T4889] loop1: detected capacity change from 0 to 164 [ 128.268184][ T4908] loop0: detected capacity change from 0 to 40427 [ 128.481105][ T4908] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 128.489027][ T4908] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 128.674643][ T4915] loop2: detected capacity change from 0 to 32768 [ 129.345075][ T4908] F2FS-fs (loop0): invalid crc value [ 129.371657][ T4910] loop3: detected capacity change from 0 to 2048 [ 129.412072][ T4915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.175 (4915) [ 129.435657][ T4908] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.481510][ T4910] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 129.515361][ T4915] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 129.524607][ T4915] BTRFS info (device loop2): using free space tree [ 129.531372][ T4915] BTRFS info (device loop2): has skinny extents [ 129.701290][ T4908] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.701476][ T4930] loop4: detected capacity change from 0 to 512 [ 129.708674][ T4908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.878146][ T4931] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 130.601786][ T4910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.605786][ T4235] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 130.618899][ T4235] Bluetooth: hci0: Injecting HCI hardware error event [ 130.626705][ T4200] Bluetooth: hci0: hardware error 0x00 [ 130.741738][ T25] audit: type=1800 audit(1777598916.579:2): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.171" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 134.856277][ T4930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.928439][ T4930] EXT4-fs: failed to create workqueue [ 134.944220][ T4930] EXT4-fs (loop4): mount failed [ 134.997030][ T4191] attempt to access beyond end of device [ 134.997030][ T4191] loop0: rw=2049, want=40968, limit=40427 [ 135.086066][ T4915] BTRFS error (device loop2): open_ctree failed: -12 [ 135.094215][ T4181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4181) [ 135.986666][ T4984] loop4: detected capacity change from 0 to 164 [ 137.584110][ T5001] loop0: detected capacity change from 0 to 1024 [ 137.797127][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.853095][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.976309][ T4991] loop2: detected capacity change from 0 to 32768 [ 137.997385][ T5001] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 138.050644][ T4991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.188 (4991) [ 138.141805][ T4991] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 138.203631][ T4991] BTRFS info (device loop2): setting nodatacow, compression disabled [ 138.278463][ T4991] BTRFS info (device loop2): enabling auto defrag [ 138.364145][ T4991] BTRFS info (device loop2): max_inline at 0 [ 138.372446][ T5009] loop1: detected capacity change from 0 to 2048 [ 138.394820][ T4991] BTRFS info (device loop2): using free space tree [ 138.401665][ T4991] BTRFS info (device loop2): has skinny extents [ 138.414793][ T5009] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 139.232897][ T5009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.611053][ T5033] loop1: detected capacity change from 0 to 512 [ 139.702535][ T4991] BTRFS error (device loop2): open_ctree failed: -12 [ 139.716543][ T5033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.761706][ T4396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4396) [ 139.776470][ T5033] EXT4-fs (loop1): 1 truncate cleaned up [ 139.782132][ T5033] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.875374][ T5038] loop4: detected capacity change from 0 to 256 [ 140.744847][ T4997] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.752950][ T4997] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.072314][ T5041] netlink: 88 bytes leftover after parsing attributes in process `syz.4.195'. [ 142.252644][ T5051] loop1: detected capacity change from 0 to 256 [ 142.784247][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.820639][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.617620][ T5057] loop1: detected capacity change from 0 to 164 [ 143.949257][ T4997] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.958322][ T4997] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.967221][ T4997] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.976090][ T4997] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.115707][ T4997] syz.3.190 (4997) used greatest stack depth: 19952 bytes left [ 145.870684][ T5075] loop1: detected capacity change from 0 to 2048 [ 145.900500][ T5075] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 146.631706][ T5082] loop2: detected capacity change from 0 to 256 [ 146.799244][ T5075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.911742][ T5093] misc userio: No port type given on /dev/userio [ 148.253489][ T5096] netlink: 100 bytes leftover after parsing attributes in process `syz.2.207'. [ 150.029167][ T5117] loop2: detected capacity change from 0 to 164 [ 152.458496][ T5142] futex_wake_op: syz.0.220 tries to shift op by -1; fix this program [ 154.456052][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.474455][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.486478][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.497474][ T5146] device bridge_slave_0 left promiscuous mode [ 154.507746][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.527119][ T5146] device bridge_slave_1 left promiscuous mode [ 154.533550][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.534510][ T5151] loop3: detected capacity change from 0 to 256 [ 154.563418][ T5146] bond0: (slave bond_slave_0): Releasing backup interface [ 154.709324][ T5146] bond0: (slave bond_slave_1): Releasing backup interface [ 155.599029][ T5159] netlink: 100 bytes leftover after parsing attributes in process `syz.3.224'. [ 156.378002][ T5146] team0: Port device team_slave_0 removed [ 156.407348][ T5146] team0: Port device team_slave_1 removed [ 156.419919][ T5146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.421083][ T5164] loop0: detected capacity change from 0 to 64 [ 156.427931][ T5146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.448947][ T5146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.459338][ T5146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.210078][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.251038][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.441618][ T5212] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.830756][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.123618][ T5220] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 161.286723][ T5223] loop0: detected capacity change from 0 to 256 [ 161.610481][ T5227] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.231657][ T5229] netlink: 100 bytes leftover after parsing attributes in process `syz.0.240'. [ 164.549551][ T5256] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 165.698652][ T5267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 165.889912][ T5270] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.417703][ T5276] loop3: detected capacity change from 0 to 256 [ 166.815701][ T5286] overlayfs: missing 'lowerdir' [ 167.383604][ T5290] 9pnet_virtio: no channels available for device #! ./file0 [ 167.383604][ T5290] [ 168.076459][ T5276] netlink: 100 bytes leftover after parsing attributes in process `syz.3.253'. [ 168.196673][ T5294] futex_wake_op: syz.2.258 tries to shift op by -1; fix this program [ 168.315308][ T5299] lo speed is unknown, defaulting to 1000 [ 168.322061][ T5299] lo speed is unknown, defaulting to 1000 [ 168.333353][ T5299] lo speed is unknown, defaulting to 1000 [ 168.353379][ T5299] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 168.386061][ T5299] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 168.565107][ T5299] lo speed is unknown, defaulting to 1000 [ 168.571431][ T5299] lo speed is unknown, defaulting to 1000 [ 168.581631][ T5299] lo speed is unknown, defaulting to 1000 [ 168.589242][ T5299] lo speed is unknown, defaulting to 1000 [ 168.597855][ T5299] lo speed is unknown, defaulting to 1000 [ 169.457237][ T5308] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 169.981121][ T5317] loop2: detected capacity change from 0 to 512 [ 171.108995][ T5317] EXT4-fs (loop2): 1 truncate cleaned up [ 171.174522][ T5317] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 172.181808][ T5340] loop3: detected capacity change from 0 to 256 [ 172.439563][ T5343] 9pnet_virtio: no channels available for device #! ./file0 [ 172.439563][ T5343] [ 173.172359][ T5340] netlink: 100 bytes leftover after parsing attributes in process `syz.3.271'. [ 173.321772][ T5348] loop4: detected capacity change from 0 to 256 [ 173.406834][ T5350] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.423869][ T5351] futex_wake_op: syz.3.274 tries to shift op by -1; fix this program [ 175.364047][ T5358] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 175.895515][ T5371] loop3: detected capacity change from 0 to 512 [ 177.286296][ T5377] overlayfs: missing 'lowerdir' [ 177.545231][ T5371] EXT4-fs (loop3): 1 truncate cleaned up [ 177.554385][ T5371] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 177.870023][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 178.001567][ T5388] securityfs: Unknown parameter '' [ 179.024431][ T4233] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.033809][ T4233] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 179.047898][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.153112][ T5397] lo speed is unknown, defaulting to 1000 [ 179.159132][ T5397] lo speed is unknown, defaulting to 1000 [ 179.166740][ T5397] lo speed is unknown, defaulting to 1000 [ 179.247697][ T5397] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 179.306547][ T5397] lo speed is unknown, defaulting to 1000 [ 179.321897][ T5397] lo speed is unknown, defaulting to 1000 [ 179.332640][ T5397] lo speed is unknown, defaulting to 1000 [ 179.343634][ T5397] lo speed is unknown, defaulting to 1000 [ 179.353887][ T5397] lo speed is unknown, defaulting to 1000 [ 180.055800][ T4233] usb 5-1: config 0 descriptor?? [ 180.546082][ T1324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.053643][ T4233] usb 5-1: USB disconnect, device number 2 [ 182.187650][ T1324] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.198739][ T1324] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 182.251293][ T4235] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 182.294489][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.311330][ T1324] usb 1-1: config 0 descriptor?? [ 182.512757][ T5416] overlayfs: missing 'lowerdir' [ 182.908548][ T4233] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 183.298739][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.434069][ T1324] usb 1-1: USB disconnect, device number 2 [ 183.491214][ T4235] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 183.946472][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.033049][ T4235] usb 4-1: config 0 descriptor?? [ 184.065542][ T5425] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 184.080207][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.105299][ T4233] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 184.117731][ T4235] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 184.160788][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.188115][ T4233] usb 5-1: config 0 descriptor?? [ 184.262256][ T4233] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 184.409128][ T5430] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 185.431763][ T5436] loop1: detected capacity change from 0 to 512 [ 185.565079][ T5436] EXT4-fs (loop1): 1 truncate cleaned up [ 185.570825][ T5436] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 186.443999][ T13] usb 5-1: USB disconnect, device number 3 [ 186.563456][ T5444] loop0: detected capacity change from 0 to 256 [ 186.609373][ T4233] usb 4-1: USB disconnect, device number 5 [ 186.709469][ T5444] exfat: Unknown parameter 'keep_last_dots' [ 186.739766][ T5449] loop3: detected capacity change from 0 to 512 [ 187.924462][ T5439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 188.331155][ T5449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.403272][ T5449] EXT4-fs: failed to create workqueue [ 190.437513][ T5449] EXT4-fs (loop3): mount failed [ 190.764558][ T5471] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 196.521121][ T5527] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 198.312529][ T4956] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 198.453458][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.504939][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 198.719032][ T4956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.798244][ T4956] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 198.956521][ T4956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.753633][ T4957] Bluetooth: hci5: command 0x0409 tx timeout [ 199.784113][ T4956] usb 5-1: config 0 descriptor?? [ 199.811619][ T5532] lo speed is unknown, defaulting to 1000 [ 199.958329][ T4956] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 200.235205][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.063598][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.079598][ T5556] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.139806][ T1324] usb 5-1: USB disconnect, device number 4 [ 201.456905][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.570822][ T5571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 201.579706][ T5571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.116428][ T4958] Bluetooth: hci5: command 0x041b tx timeout [ 202.187078][ T5575] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 202.404944][ T5532] chnl_net:caif_netlink_parms(): no params data found [ 203.435921][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.442303][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.142908][ T5614] siw: device registration error -23 [ 204.286313][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 204.542504][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.520575][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.646203][ T5532] device bridge_slave_0 entered promiscuous mode [ 205.678389][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.696884][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.769863][ T5630] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 205.778766][ T5630] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 206.045274][ T5532] device bridge_slave_1 entered promiscuous mode [ 206.679943][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 206.992721][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.036946][ T5644] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 207.519673][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.558825][ T5532] team0: Port device team_slave_0 added [ 208.645221][ T5532] team0: Port device team_slave_1 added [ 208.809300][ T5665] ubi16: attaching mtd0 [ 209.509441][ T5665] ubi16: scanning is finished [ 209.515007][ T5665] ubi16: empty MTD device detected [ 209.640125][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.671019][ T5665] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 209.954714][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.074136][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.145576][ T5676] loop0: detected capacity change from 0 to 1024 [ 210.256027][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.265097][ T5676] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 210.289863][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.289938][ T5676] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 210.289938][ T5676] [ 210.611094][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.192539][ T5683] loop4: detected capacity change from 0 to 512 [ 212.566184][ T5683] EXT4-fs (loop4): 1 truncate cleaned up [ 212.571950][ T5683] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 212.922884][ T5532] device hsr_slave_0 entered promiscuous mode [ 213.435160][ T5532] device hsr_slave_1 entered promiscuous mode [ 213.457140][ T5532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.464728][ T5532] Cannot create hsr debugfs directory [ 213.594793][ T5701] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 214.470807][ T9] device hsr_slave_0 left promiscuous mode [ 214.490380][ T9] device hsr_slave_1 left promiscuous mode [ 214.519161][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.552020][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.572305][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.585020][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.597085][ T9] device bridge_slave_1 left promiscuous mode [ 214.607281][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.672239][ T9] device bridge_slave_0 left promiscuous mode [ 214.678670][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.784955][ T4310] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.842479][ T5728] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.914050][ T5730] MPTCP: kernel_bind error, err=-99 [ 215.317570][ T4310] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.511873][ T4310] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 215.527670][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.541132][ T4310] usb 5-1: config 0 descriptor?? [ 215.552201][ T9] device veth1_macvtap left promiscuous mode [ 215.568324][ T9] device veth0_macvtap left promiscuous mode [ 215.575858][ T9] device veth1_vlan left promiscuous mode [ 215.582621][ T9] device veth0_vlan left promiscuous mode [ 218.532905][ T9] team0 (unregistering): Port device team_slave_1 removed [ 218.550478][ T9] team0 (unregistering): Port device team_slave_0 removed [ 218.566089][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.593057][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.727034][ T9] bond0 (unregistering): Released all slaves [ 218.814384][ T5532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.824188][ T5532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.881590][ T5532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.909650][ T5748] loop1: detected capacity change from 0 to 1024 [ 218.964363][ T21] usb 5-1: USB disconnect, device number 5 [ 218.985296][ T5532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.081044][ T5752] loop4: detected capacity change from 0 to 512 [ 220.382138][ T5748] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 220.414566][ T5754] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 220.422812][ T5748] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 220.422812][ T5748] [ 220.601351][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.618983][ T5532] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.651943][ T5532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.662596][ T5532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.678745][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.703472][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.759772][ T5752] EXT4-fs (loop4): 1 truncate cleaned up [ 220.767534][ T5752] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 220.791046][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.461182][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.590178][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.597308][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.758163][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.841751][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.896247][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.903414][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.952067][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.960957][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.969623][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.978784][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.999531][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.029971][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.068147][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.089649][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.169337][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.187611][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.198070][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.335861][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.345827][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.667009][ T5801] xt_TPROXY: Can be used only with -p tcp or -p udp [ 223.733632][ T5815] loop4: detected capacity change from 0 to 1024 [ 223.759717][ T5816] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 223.856926][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.870373][ T5815] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 223.905361][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.968533][ T5815] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 223.968533][ T5815] [ 224.860905][ T5532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.497099][ T5863] siw: device registration error -23 [ 227.965124][ T5865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.401010][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.466910][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.541366][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.585226][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.658911][ T5532] device veth0_vlan entered promiscuous mode [ 228.672555][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.693413][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.718352][ T5532] device veth1_vlan entered promiscuous mode [ 228.821439][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.838539][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.636829][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.645756][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.658868][ T5893] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 229.685854][ T5532] device veth0_macvtap entered promiscuous mode [ 229.699522][ T5532] device veth1_macvtap entered promiscuous mode [ 229.770473][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.792882][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.807035][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.819226][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.841640][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.854474][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.866648][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.969985][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.023891][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.066557][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.132391][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.238253][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.247862][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.260341][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.290447][ T5532] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.340269][ T5532] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.368618][ T5532] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.377975][ T5532] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.525293][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.550352][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.632350][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.684152][ T4903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.719449][ T4903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.807955][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.109977][ T5930] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 233.857793][ T5966] overlayfs: missing 'workdir' [ 236.008846][ T5998] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 237.366435][ T6013] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.897114][ T6012] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 238.256264][ T6012] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 238.633930][ T6012] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 239.365577][ T6030] loop4: detected capacity change from 0 to 512 [ 239.398771][ T6032] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 239.447691][ T6030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.531078][ T6030] EXT4-fs (loop4): 1 truncate cleaned up [ 239.547206][ T6030] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.989537][ T6056] securityfs: Unknown parameter '' [ 241.349367][ T6065] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 242.997161][ T6081] overlayfs: missing 'workdir' [ 243.547147][ T6086] securityfs: Unknown parameter '' [ 243.564693][ T6086] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 244.599206][ T6100] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 244.678910][ T6105] securityfs: Unknown parameter '' [ 244.687254][ T6106] futex_wake_op: syz.4.443 tries to shift op by -1; fix this program [ 247.461292][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 247.970686][ T4958] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 247.985145][ T4958] Bluetooth: hci5: Injecting HCI hardware error event [ 248.008493][ T4201] Bluetooth: hci5: hardware error 0x00 [ 248.900418][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 252.769388][ T6178] futex_wake_op: syz.3.458 tries to shift op by -1; fix this program [ 254.985153][ T6208] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 255.211449][ T6214] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 255.219862][ T6214] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 255.228505][ T6214] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 257.910033][ T6233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 258.476154][ T6247] securityfs: Unknown parameter '' [ 259.838993][ T6249] futex_wake_op: syz.0.472 tries to shift op by -1; fix this program [ 265.925288][ T6321] futex_wake_op: syz.1.484 tries to shift op by -1; fix this program [ 265.941206][ T6314] ubi16: attaching mtd0 [ 265.947179][ T6314] ubi16: scanning is finished [ 267.432449][ T6331] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 267.568358][ T6333] securityfs: Unknown parameter '' [ 267.581763][ T6333] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 268.944031][ T6314] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 269.126282][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.139939][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.432417][ T6374] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 270.441627][ T6374] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6374, name: syz.1.497 [ 270.450639][ T6374] 7 locks held by syz.1.497/6374: [ 270.455820][ T6374] #0: ffffffff8d446f68 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 270.465200][ T6374] #1: ffffffff8d446e28 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 270.475615][ T6374] #2: ffff88806209a698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 270.486528][ T6374] #3: ffffffff8d521028 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 270.497074][ T6374] #4: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 270.506438][ T6374] #5: ffffc900018694d8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 270.516450][ T6374] #6: ffff88807504e320 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 270.526465][ T6374] Preemption disabled at: [ 270.526472][ T6374] [<0000000000000000>] 0x0 [ 270.535248][ T6374] CPU: 1 PID: 6374 Comm: syz.1.497 Not tainted syzkaller #0 [ 270.542510][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.552544][ T6374] Call Trace: [ 270.555805][ T6374] [ 270.558717][ T6374] dump_stack_lvl+0x188/0x250 [ 270.563387][ T6374] ? show_regs_print_info+0x20/0x20 [ 270.568596][ T6374] ? load_image+0x400/0x400 [ 270.573098][ T6374] ___might_sleep+0x493/0x610 [ 270.577766][ T6374] ? __might_sleep+0xf0/0xf0 [ 270.582350][ T6374] ? nla_put+0x130/0x1e0 [ 270.586576][ T6374] ? read_lock_is_recursive+0x10/0x10 [ 270.591930][ T6374] ? sock_diag_put_meminfo+0xc6/0x120 [ 270.597293][ T6374] ? sock_diag_save_cookie+0xc0/0xc0 [ 270.602592][ T6374] __lock_sock_fast+0x2f/0xe0 [ 270.607255][ T6374] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 270.612464][ T6374] mptcp_diag_get_info+0x1fe/0x9e0 [ 270.617569][ T6374] inet_sk_diag_fill+0xf5e/0x1ca0 [ 270.622588][ T6374] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 270.628292][ T6374] ? do_raw_spin_lock+0x128/0x2f0 [ 270.633317][ T6374] ? __rwlock_init+0x140/0x140 [ 270.638064][ T6374] ? inet_diag_bc_sk+0x18b/0x1120 [ 270.643076][ T6374] mptcp_diag_dump+0xce6/0x12b0 [ 270.647935][ T6374] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 270.654529][ T6374] __inet_diag_dump+0x1f6/0x380 [ 270.659416][ T6374] inet_diag_dump_compat+0x17e/0x220 [ 270.664685][ T6374] ? inet_diag_dump_start_compat+0x20/0x20 [ 270.670484][ T6374] ? __alloc_skb+0x473/0x750 [ 270.675060][ T6374] netlink_dump+0x694/0xcf0 [ 270.679571][ T6374] ? netlink_lookup+0x1d0/0x1d0 [ 270.684431][ T6374] ? __inet_diag_dump_start+0x805/0x970 [ 270.689962][ T6374] __netlink_dump_start+0x523/0x700 [ 270.695157][ T6374] inet_diag_rcv_msg_compat+0x207/0x420 [ 270.700722][ T6374] ? inet_diag_unregister+0xb0/0xb0 [ 270.705966][ T6374] ? __mutex_trylock_common+0x155/0x260 [ 270.711496][ T6374] ? mutex_lock_io_nested+0x60/0x60 [ 270.716689][ T6374] ? __inet_diag_dump+0x380/0x380 [ 270.721696][ T6374] ? inet_diag_dump_start_compat+0x20/0x20 [ 270.727489][ T6374] ? inet_diag_dump+0x50/0x50 [ 270.732154][ T6374] ? inet_diag_unregister+0xb0/0xb0 [ 270.737335][ T6374] sock_diag_rcv_msg+0x164/0x3e0 [ 270.742264][ T6374] netlink_rcv_skb+0x1f5/0x440 [ 270.747011][ T6374] ? sock_diag_bind+0xa0/0xa0 [ 270.751673][ T6374] ? netlink_ack+0xb50/0xb50 [ 270.756253][ T6374] ? __lock_acquire+0x7d10/0x7d10 [ 270.761300][ T6374] sock_diag_rcv+0x26/0x40 [ 270.765728][ T6374] netlink_unicast+0x774/0x920 [ 270.770501][ T6374] netlink_sendmsg+0x8ba/0xbe0 [ 270.775261][ T6374] ? netlink_getsockopt+0x570/0x570 [ 270.780441][ T6374] ? aa_sock_msg_perm+0x94/0x150 [ 270.785366][ T6374] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 270.792086][ T6374] ? security_socket_sendmsg+0x7c/0xa0 [ 270.792143][ T6374] ? netlink_getsockopt+0x570/0x570 [ 270.792162][ T6374] ____sys_sendmsg+0x5b7/0x8f0 [ 270.792195][ T6374] ? __sys_sendmsg_sock+0x30/0x30 [ 270.812734][ T6374] ? import_iovec+0x6f/0xa0 [ 270.817261][ T6374] ___sys_sendmsg+0x236/0x2e0 [ 270.821937][ T6374] ? __sys_sendmsg+0x2a0/0x2a0 [ 270.826688][ T6374] ? percpu_counter_add_batch+0x13b/0x160 [ 270.832402][ T6374] __se_sys_sendmsg+0x1af/0x290 [ 270.837244][ T6374] ? __x64_sys_sendmsg+0x80/0x80 [ 270.842168][ T6374] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 270.848162][ T6374] ? lockdep_hardirqs_on+0x94/0x140 [ 270.853349][ T6374] do_syscall_64+0x4c/0xa0 [ 270.857750][ T6374] ? clear_bhb_loop+0x30/0x80 [ 270.862428][ T6374] ? clear_bhb_loop+0x30/0x80 [ 270.867096][ T6374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.872970][ T6374] RIP: 0033:0x7fdd349e6dd9 [ 270.877368][ T6374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.896957][ T6374] RSP: 002b:00007fdd32c1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.905359][ T6374] RAX: ffffffffffffffda RBX: 00007fdd34c60090 RCX: 00007fdd349e6dd9 [ 270.913313][ T6374] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 270.921268][ T6374] RBP: 00007fdd34a7cd69 R08: 0000000000000000 R09: 0000000000000000 [ 270.929327][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.937289][ T6374] R13: 00007fdd34c60128 R14: 00007fdd34c60090 R15: 00007ffe82def8a8 [ 270.945277][ T6374] [ 270.948345][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 271.686816][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.871333][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.006992][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.137217][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.251006][ T154] device hsr_slave_0 left promiscuous mode [ 273.262524][ T154] device hsr_slave_1 left promiscuous mode [ 273.274258][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.284221][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.297426][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.305514][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.313275][ T154] device bridge_slave_1 left promiscuous mode [ 273.319492][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.327411][ T154] device bridge_slave_0 left promiscuous mode [ 273.333871][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.346713][ T154] device veth1_macvtap left promiscuous mode [ 273.352799][ T154] device veth0_macvtap left promiscuous mode [ 273.358830][ T154] device veth1_vlan left promiscuous mode [ 273.364954][ T154] device veth0_vlan left promiscuous mode [ 273.486561][ T154] team0 (unregistering): Port device team_slave_1 removed [ 273.499005][ T154] team0 (unregistering): Port device team_slave_0 removed [ 273.512319][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.524884][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.572824][ T154] bond0 (unregistering): Released all slaves