last executing test programs: 4m13.048648169s ago: executing program 2 (id=3): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 4m11.848905828s ago: executing program 2 (id=6): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 4m10.73187452s ago: executing program 2 (id=8): getpid() r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) 4m10.641838648s ago: executing program 2 (id=9): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m54.467360139s ago: executing program 32 (id=9): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m32.507972861s ago: executing program 0 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000020100c0"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x1, r0, &(0x7f0000000240), 0x4, &(0x7f0000000300)) r4 = syz_io_uring_setup(0x2b06, &(0x7f0000000040), &(0x7f0000ffd000), 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x14, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x10) readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) 3m31.252832255s ago: executing program 0 (id=79): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000002c0)=""/190, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = inotify_init1(0x80000) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xebf) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) lseek(r3, 0x9, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000440)={r8, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000002030104000000000000000005000009080003400000e7f30900020000008001010000000800010001000008"], 0x30}, 0x1, 0x0, 0x0, 0x20000141}, 0x4000) 3m30.330306621s ago: executing program 0 (id=81): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 3m23.734900449s ago: executing program 0 (id=102): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x41, &(0x7f0000000200)={0x0, 0x8}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3m16.957934981s ago: executing program 0 (id=109): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$kcm(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) fanotify_init(0x8, 0x2) mkdir(0x0, 0x1ac) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) 3m15.417984528s ago: executing program 0 (id=112): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000000)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 3m9.764167757s ago: executing program 5 (id=123): r0 = memfd_secret(0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) 3m8.728231223s ago: executing program 5 (id=124): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000001c0)=0x4, 0x0, 0x4) memfd_secret(0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r3, r4, 0x0) 3m7.55751225s ago: executing program 5 (id=127): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000003740)={0xb8, 0x0, r1, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r2, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) 3m7.354884647s ago: executing program 5 (id=128): socket$inet6(0xa, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)={0x14, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m5.180566917s ago: executing program 5 (id=131): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='vegas\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(r1, &(0x7f0000000240)=""/8, 0x8, 0xc9102120, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 3m0.56079671s ago: executing program 5 (id=142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40000086}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000007100)={0x2020}, 0x941f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8014) 2m58.87817337s ago: executing program 33 (id=112): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000000)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 2m44.714149474s ago: executing program 34 (id=142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40000086}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000007100)={0x2020}, 0x941f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8014) 2m27.865183321s ago: executing program 3 (id=214): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x20000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5718, 0x80, 0x0, 0x1}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 2m22.279843214s ago: executing program 3 (id=226): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000001c0)=0x4, 0x0, 0x4) r3 = memfd_secret(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r4, r5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2m20.073151378s ago: executing program 3 (id=229): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x8100) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r7, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) syz_open_dev$vim2m(0x0, 0x47b, 0x2) 2m19.241176046s ago: executing program 3 (id=233): ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80340, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r2, r2, r2) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) 2m18.574338672s ago: executing program 3 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m17.221129244s ago: executing program 3 (id=236): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 2m10.914668597s ago: executing program 6 (id=144): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x24060400) bind$802154_raw(0xffffffffffffffff, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) syz_open_dev$dri(0x0, 0x1, 0x82840) 2m10.598136224s ago: executing program 6 (id=253): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000001c0)=0x4, 0x0, 0x4) r3 = memfd_secret(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r4, r5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @mcast2, 0x101}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x18}}], 0x1, 0x4000880) 2m8.941663821s ago: executing program 6 (id=256): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 2m3.507510601s ago: executing program 6 (id=267): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0x1000000d}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r6, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000003740)={0xb8, 0x0, r7, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r8, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 2m1.536483265s ago: executing program 35 (id=236): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 2m0.775899458s ago: executing program 6 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x6d285c1d]}, 0x0, 0x8) 2m0.239935882s ago: executing program 6 (id=274): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvfrom$llc(r0, &(0x7f0000000600)=""/204, 0xcc, 0x40000043, &(0x7f0000000700)={0x1a, 0x104, 0x3, 0x2, 0x3, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x3) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000005c0), 0x200005d8) r3 = io_uring_setup(0x104c, &(0x7f0000001440)) write$input_event(r1, &(0x7f0000000540)={{}, 0x1, 0x0, 0x4}, 0x18) close(r3) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000580)) write$input_event(r4, &(0x7f0000000500)={{0x77359400}, 0x15, 0xfffd, 0x9}, 0x18) 1m45.007640126s ago: executing program 36 (id=274): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvfrom$llc(r0, &(0x7f0000000600)=""/204, 0xcc, 0x40000043, &(0x7f0000000700)={0x1a, 0x104, 0x3, 0x2, 0x3, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x3) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000005c0), 0x200005d8) r3 = io_uring_setup(0x104c, &(0x7f0000001440)) write$input_event(r1, &(0x7f0000000540)={{}, 0x1, 0x0, 0x4}, 0x18) close(r3) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000580)) write$input_event(r4, &(0x7f0000000500)={{0x77359400}, 0x15, 0xfffd, 0x9}, 0x18) 16.741203904s ago: executing program 9 (id=512): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mq_unlink(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) 16.725212796s ago: executing program 4 (id=513): ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x8000000000000001, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$session_to_parent(0x12) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) keyctl$session_to_parent(0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000050) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 16.487113015s ago: executing program 9 (id=515): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000001c0)=0x4, 0x0, 0x4) r3 = memfd_secret(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r4, r5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @mcast2, 0x101}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x18}}], 0x1, 0x4000880) 15.367824637s ago: executing program 4 (id=518): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000001c0)=0x4, 0x0, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r3, r4, 0x0) socket(0x10, 0x3, 0x0) 13.536064888s ago: executing program 9 (id=519): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x98) memfd_secret(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x56001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0xfe68) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) 11.541202301s ago: executing program 7 (id=524): openat$mice(0xffffffffffffff9c, &(0x7f00000018c0), 0x80082) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 11.07857028s ago: executing program 8 (id=525): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)={0x1000000d}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r7, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000003740)={0xb8, 0x0, r8, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r9, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 10.792831663s ago: executing program 9 (id=526): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mq_unlink(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r2, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) 10.792491303s ago: executing program 4 (id=527): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='vegas\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(r1, &(0x7f0000000240)=""/8, 0x8, 0xc9102120, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 9.898853167s ago: executing program 8 (id=529): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000001c0)=0x4, 0x0, 0x4) r3 = memfd_secret(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r4, r5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @mcast2, 0x101}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x18}}], 0x1, 0x4000880) 9.384575819s ago: executing program 9 (id=530): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x8100) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r6, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r7 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) 7.699842618s ago: executing program 1 (id=531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f00000005c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) close(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x1, 0x24) socket$qrtr(0x2a, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) 7.699473158s ago: executing program 7 (id=532): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$kcm(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r4) fanotify_init(0x8, 0x2) mkdir(0x0, 0x1ac) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) 7.461293277s ago: executing program 8 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000004800)={0x2020}, 0x2020) 6.94193778s ago: executing program 9 (id=534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xffe) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), 0xfffffffffffffffc, 0x0, 0x0}) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x2069) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a0500"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) io_uring_enter(0xffffffffffffffff, 0x26c8, 0x2cb3, 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) 6.849366877s ago: executing program 1 (id=535): connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r1, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) 6.733584957s ago: executing program 1 (id=536): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.685416831s ago: executing program 7 (id=537): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x98) memfd_secret(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x56001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0xfe68) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) 3.928974668s ago: executing program 8 (id=538): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)={0x14, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.867537813s ago: executing program 7 (id=539): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)={0x1000000d}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r7, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000003740)={0xb8, 0x0, r8, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r9, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 3.589850776s ago: executing program 1 (id=540): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mq_unlink(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r2, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) 2.819735809s ago: executing program 4 (id=541): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 2.819324239s ago: executing program 7 (id=542): ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x8000000000000001, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$session_to_parent(0x12) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) keyctl$session_to_parent(0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000050) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163e0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.243894928s ago: executing program 1 (id=543): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000001c0)=0x4, 0x0, 0x4) memfd_secret(0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r3, r4, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @mcast2, 0x101}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x18}}], 0x1, 0x4000880) 1.182889343s ago: executing program 8 (id=544): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x8100) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r6, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r7 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) 1.161617495s ago: executing program 7 (id=545): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2817\x00', [0x4f27, 0xd, 0x3, 0x81, 0x3d, 0x40ccc, 0x8, 0x7, 0xa, 0xe8aa, 0x58, 0x1, 0xfffffffe, 0x1, 0x6, 0x101, 0x2d07, 0x1a449, 0x47, 0x40000003, 0x99, 0x0, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x2, 0x2, 0x0, 0xffffffe8]}) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r1 = socket(0x2, 0x3, 0xff) socket(0x2, 0x80805, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x8, 0x800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x20000, 0x80) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0x100}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @empty, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000500)="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") r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) mmap(&(0x7f0000083000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r1, 0x92eed000) dup(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="54c5c5", @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xfeb11bdd49a3dcc5) syz_io_uring_setup(0x24fd, &(0x7f0000000300)={0x0, 0xce13, 0x10100, 0x0, 0x15a}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x4000081) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 1.144659677s ago: executing program 4 (id=546): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 9.16096ms ago: executing program 4 (id=547): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$kcm(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r4) fanotify_init(0x8, 0x2) mkdir(0x0, 0x1ac) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) 8.06985ms ago: executing program 8 (id=548): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x4000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) dup(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080), 0x0) ptrace$peekuser(0x3, r2, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 0s ago: executing program 1 (id=557): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): _adv: batadv0: Adding interface: batadv_slave_1 [ 63.995381][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.021635][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.033314][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.040900][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.049008][ T4195] device bridge_slave_1 entered promiscuous mode [ 64.102044][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.109099][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.116230][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.123339][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.149725][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.164431][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.171388][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.178314][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.186230][ T4184] Cannot create hsr debugfs directory [ 64.210419][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.220029][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.227027][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.253207][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.271885][ T4182] device hsr_slave_0 entered promiscuous mode [ 64.278984][ T4182] device hsr_slave_1 entered promiscuous mode [ 64.285532][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.293274][ T4182] Cannot create hsr debugfs directory [ 64.309173][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.386373][ T4195] team0: Port device team_slave_0 added [ 64.395845][ T4195] team0: Port device team_slave_1 added [ 64.413389][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.420383][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.427002][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.434781][ T4183] Cannot create hsr debugfs directory [ 64.498395][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.505376][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.532648][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.532713][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 64.547228][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 64.550439][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 64.555561][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 64.577482][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 64.595576][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.602642][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.629126][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.745679][ T4195] device hsr_slave_0 entered promiscuous mode [ 64.752674][ T4195] device hsr_slave_1 entered promiscuous mode [ 64.759511][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.767092][ T4195] Cannot create hsr debugfs directory [ 64.909274][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.931284][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.941405][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.954057][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.041506][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.056863][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.070855][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.100907][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.119032][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.154348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.164533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.184070][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.195407][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.207079][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.222990][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.240163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.250335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.260154][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.267487][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.275909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.286141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.295971][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.303289][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.312978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.321185][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.340664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.378615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.393649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.403284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.412316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.421780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.433829][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.453230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.467608][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.479127][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.491630][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.505024][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.513386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.522504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.546644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.555522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.566410][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.593792][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.605664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.620395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.670586][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.681411][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.691271][ T1488] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.698428][ T1488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.707821][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.716467][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.726380][ T1488] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.733584][ T1488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.754502][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.767048][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.780975][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.810368][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.822070][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.840233][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.857516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.869580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.880152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.890439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.905660][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.915943][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.925264][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.934076][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.954397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.962529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.994417][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.005160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.016484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.026455][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.050272][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.074815][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.095048][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.130522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.139591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.149781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.159647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.196786][ T4184] device veth0_vlan entered promiscuous mode [ 66.204984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.214266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.222588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.232820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.243634][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.250842][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.258980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.268029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.276730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.289202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.298488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.321825][ T4184] device veth1_vlan entered promiscuous mode [ 66.335603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.346226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.356705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.365785][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.373060][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.381901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.392505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.419036][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.440743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.450892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.461417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.470763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.480104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.489722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.499147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.523720][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.535435][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.545034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.555195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.564745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.573340][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.580450][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.588856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.597589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.597832][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 66.605102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.617790][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 66.620824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.625427][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 66.633989][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.646360][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 66.646469][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.653141][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 66.662624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.675178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.684189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.694347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.708724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.722450][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.765891][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.790852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.806539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.817414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.826501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.836590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.861162][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.871439][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.880952][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.892523][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.902013][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.911015][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.932911][ T4184] device veth0_macvtap entered promiscuous mode [ 66.946258][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.959162][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.976623][ T4190] device veth0_vlan entered promiscuous mode [ 66.984497][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.993769][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.003271][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.015861][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.025369][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.033887][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.042322][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.054913][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.065380][ T4184] device veth1_macvtap entered promiscuous mode [ 67.094331][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.102621][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.113580][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.122652][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.130560][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.153975][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.173422][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.188139][ T4190] device veth1_vlan entered promiscuous mode [ 67.207338][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.215842][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.233727][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.247009][ T848] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.254161][ T848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.263890][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.273322][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.283000][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.297985][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.306680][ T848] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.313935][ T848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.323296][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.332614][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.346397][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.358951][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.370290][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.380711][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.390844][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.400884][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.436488][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.445093][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.461531][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.473841][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.491593][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.501659][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.516553][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.526818][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.551166][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.569835][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.579270][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.591114][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.600224][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.611034][ T4190] device veth0_macvtap entered promiscuous mode [ 67.622980][ T4190] device veth1_macvtap entered promiscuous mode [ 67.673537][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.682703][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.691052][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.700659][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.709668][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.719396][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.732443][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.741672][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.751538][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.762799][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.774691][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.792638][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.811327][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.820325][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.831989][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.841154][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.865862][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.877219][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.889920][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.924235][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.940393][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.956851][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.977208][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.985961][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.995676][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.015547][ T4183] device veth0_vlan entered promiscuous mode [ 68.037847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.046117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.060383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.068804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.083697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.091781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.100204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.108691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.121767][ T4183] device veth1_vlan entered promiscuous mode [ 68.134986][ T4182] device veth0_vlan entered promiscuous mode [ 68.195448][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.224721][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.228938][ T4182] device veth1_vlan entered promiscuous mode [ 68.254486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.263446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.271689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.281172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.325163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.338843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.349538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.360532][ T4183] device veth0_macvtap entered promiscuous mode [ 68.385583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.394194][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.399283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.409782][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.415524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.425674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.448601][ T4183] device veth1_macvtap entered promiscuous mode [ 68.462489][ T848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.470315][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.473115][ T848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.484995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.495553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.504130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.513279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.538457][ T4182] device veth0_macvtap entered promiscuous mode [ 68.553780][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.565207][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.575823][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.586593][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.602449][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.620043][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.631070][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.642840][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.654095][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.666751][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.677720][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 68.681640][ T4182] device veth1_macvtap entered promiscuous mode [ 68.697686][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 68.699351][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.703863][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 68.713736][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.726100][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.727978][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 68.736195][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.740480][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 68.756706][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.766654][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.776437][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.785405][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.806318][ T848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.810017][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.817476][ T848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.831250][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.842038][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.851102][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.883084][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.900344][ T4195] device veth0_vlan entered promiscuous mode [ 68.929657][ T4289] Zero length message leads to an empty skb [ 69.168558][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.068613][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.587846][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.758290][ T4186] Bluetooth: hci0: command 0x0419 tx timeout [ 70.766898][ T4186] Bluetooth: hci1: command 0x0419 tx timeout [ 70.794487][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.860639][ T4186] Bluetooth: hci2: command 0x0419 tx timeout [ 71.019209][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.035759][ T4186] Bluetooth: hci3: command 0x0419 tx timeout [ 71.052365][ T4186] Bluetooth: hci4: command 0x0419 tx timeout [ 71.107246][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.118577][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.129736][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.145138][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.153451][ T4195] device veth1_vlan entered promiscuous mode [ 71.175928][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.196471][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.252281][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.265857][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.275395][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.044411][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.065105][ T848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.088097][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.133109][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.133457][ T848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.152240][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.178546][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.192466][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.214359][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.235372][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.249690][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.296877][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.309988][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.319968][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.353852][ T4195] device veth0_macvtap entered promiscuous mode [ 72.382226][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.395610][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.407716][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.416712][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.444954][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.454351][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.465564][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.466739][ T4195] device veth1_macvtap entered promiscuous mode [ 72.489428][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.504624][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.516767][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.531215][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.590723][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.616833][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.628045][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.640611][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.651541][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.663021][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.673085][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.684709][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.705961][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.723752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.739920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.764460][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.806207][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.816466][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.832172][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.842399][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.853135][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.863901][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.874649][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.886361][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.018176][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.035224][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.056856][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.072247][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.109742][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.215941][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.237548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 73.255189][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.264119][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.719414][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.779696][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.791948][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.835508][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.866206][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.922517][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.960823][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.989263][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.049311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.100301][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.156210][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.219428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.409192][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.697689][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 75.724995][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.831029][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.847172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.848259][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 75.878362][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.887422][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 75.897033][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 75.918778][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 76.010427][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.089270][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 76.096591][ T23] pvrusb2: ********** [ 76.101420][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 76.111969][ T23] pvrusb2: Important functionality might not be entirely working. [ 76.199376][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 76.211083][ T23] pvrusb2: ********** [ 76.294238][ T4340] udc-core: couldn't find an available UDC or it's busy [ 76.343661][ T4340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 76.761672][ T2426] pvrusb2: Invalid write control endpoint [ 77.526440][ T2426] pvrusb2: Invalid write control endpoint [ 77.542727][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 77.583416][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 77.634874][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 77.696122][ T2426] pvrusb2: Device being rendered inoperable [ 77.734522][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 77.824625][ T4368] UBIFS error (pid: 4368): cannot open "/dev/sg0", error -22 [ 77.948855][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 78.200988][ T2426] pvrusb2: Attached sub-driver cx25840 [ 78.480563][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 78.498718][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 78.555560][ T13] usb 1-1: USB disconnect, device number 2 [ 84.996239][ T4416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 85.003094][ T4416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.135065][ T4416] vhci_hcd vhci_hcd.0: Device attached [ 85.277322][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.457351][ T4224] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.745358][ T4224] usb 1-1: Using ep0 maxpacket: 16 [ 86.137221][ T2287] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 86.468219][ T4224] usb 1-1: config 0 has no interfaces? [ 86.477292][ T4224] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 86.499475][ T4224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.662178][ T4224] usb 1-1: config 0 descriptor?? [ 87.302050][ T1324] cfg80211: failed to load regulatory.db [ 87.628093][ T26] audit: type=1326 audit(1753972928.206:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 88.960309][ T26] audit: type=1326 audit(1753972928.276:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 88.997347][ T2287] usb 33-1: device descriptor read/64, error -65536 [ 89.123410][ T26] audit: type=1326 audit(1753972928.276:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 89.218465][ T26] audit: type=1326 audit(1753972928.276:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 89.241631][ T26] audit: type=1326 audit(1753972928.276:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 89.265741][ T26] audit: type=1326 audit(1753972928.276:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 89.270560][ T21] usb 2-1: device descriptor read/64, error -71 [ 89.288402][ T26] audit: type=1326 audit(1753972928.276:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 89.316496][ T2287] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 89.377369][ T26] audit: type=1326 audit(1753972928.276:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 89.394962][ T4238] usb 1-1: USB disconnect, device number 3 [ 89.399750][ T4418] vhci_hcd: connection closed [ 89.407485][ T4410] vhci_hcd: stop threads [ 89.426259][ T26] audit: type=1326 audit(1753972928.276:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 89.447496][ T4410] vhci_hcd: release socket [ 89.449086][ T26] audit: type=1326 audit(1753972928.276:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c13ba49a9 code=0x7ffc0000 [ 89.472632][ T4410] vhci_hcd: disconnect device [ 89.548120][ T4303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.657314][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.696087][ T4303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.821504][ T4303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.937359][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 90.026663][ T4303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.067926][ T4448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40'. [ 90.077410][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 90.127330][ T4448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.40'. [ 90.267422][ T21] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 90.329287][ T4444] chnl_net:caif_netlink_parms(): no params data found [ 90.341832][ T21] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.242751][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 91.290955][ T21] usb 2-1: Product: syz [ 91.317305][ T21] usb 2-1: Manufacturer: syz [ 91.340856][ T21] usb 2-1: SerialNumber: syz [ 91.400672][ T21] usb 2-1: config 0 descriptor?? [ 91.427553][ T4443] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.578611][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.587356][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.598138][ T4444] device bridge_slave_0 entered promiscuous mode [ 91.815644][ T4470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.42'. [ 91.856622][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.873745][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.906548][ T4444] device bridge_slave_1 entered promiscuous mode [ 92.094498][ T4444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.130604][ T4444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.266262][ T4238] usb 2-1: USB disconnect, device number 3 [ 92.391827][ T4444] team0: Port device team_slave_0 added [ 92.495119][ T4444] team0: Port device team_slave_1 added [ 92.656224][ T4483] process 'syz.3.44' launched '/dev/fd/6' with NULL argv: empty string added [ 92.796775][ T4444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.856163][ T4444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.945289][ T4444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.014985][ T4444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.032366][ T4444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.106847][ T4444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.317268][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 93.700953][ T4444] device hsr_slave_0 entered promiscuous mode [ 93.872055][ T4444] device hsr_slave_1 entered promiscuous mode [ 94.004109][ T4444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.167477][ T4444] Cannot create hsr debugfs directory [ 94.214904][ T4500] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.379612][ T4303] device hsr_slave_0 left promiscuous mode [ 94.428633][ T4303] device hsr_slave_1 left promiscuous mode [ 94.447471][ T2287] vhci_hcd: vhci_device speed not set [ 94.509380][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.549805][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.571120][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.596859][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.657782][ T4303] device bridge_slave_1 left promiscuous mode [ 94.665408][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.763432][ T4303] device bridge_slave_0 left promiscuous mode [ 94.797072][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.902287][ T4303] device veth1_macvtap left promiscuous mode [ 94.913691][ T4303] device veth0_macvtap left promiscuous mode [ 94.926485][ T4303] device veth1_vlan left promiscuous mode [ 94.933377][ T4303] device veth0_vlan left promiscuous mode [ 95.397415][ T4302] Bluetooth: hci5: command 0x040f tx timeout [ 96.201203][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 96.227344][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 96.253332][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.287998][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.418007][ T4303] bond0 (unregistering): Released all slaves [ 97.071624][ T4444] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.516834][ T4444] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.524502][ T2287] Bluetooth: hci5: command 0x0419 tx timeout [ 97.600999][ T4444] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.671808][ T4444] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.112484][ T4444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.325847][ T4444] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.143831][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.178126][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.191392][ T4591] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.208040][ T4591] ubi31: attaching mtd0 [ 102.221687][ T4591] ubi31: scanning is finished [ 102.226459][ T4591] ubi31: empty MTD device detected [ 102.458258][ T4591] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 102.590852][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.673734][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.747482][ T848] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.754637][ T848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.843541][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.881680][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.899689][ T848] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.906811][ T848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.925105][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.938331][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.111119][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.144535][ T4619] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.164817][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.342598][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.355823][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.377741][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.386541][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.480493][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.522369][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.641375][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.227790][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.309993][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.821638][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 106.963770][ T4648] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 106.989966][ T4648] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 107.089462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.111411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.174252][ T4444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.687387][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.077544][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.109768][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.150871][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.207977][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.247248][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.247928][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.280284][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.311730][ T13] usb 4-1: config 0 descriptor?? [ 108.328711][ T4444] device veth0_vlan entered promiscuous mode [ 108.364542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.382167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.414289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.458142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.542188][ T4444] device veth1_vlan entered promiscuous mode [ 108.645099][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.882115][ T13] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 108.921049][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.939682][ T4685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.76'. [ 108.991844][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.016875][ T13] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 109.033941][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.050538][ T13] usb 4-1: USB disconnect, device number 2 [ 109.061691][ T4444] device veth0_macvtap entered promiscuous mode [ 109.108612][ T4444] device veth1_macvtap entered promiscuous mode [ 109.219857][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.271095][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.314057][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.352809][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.402080][ T4689] fido_id[4689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 109.459953][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.511698][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.748471][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.313525][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.381242][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.408650][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.500224][ T4444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.573781][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.744897][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.315873][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.388766][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.433199][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.437235][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.553073][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.590309][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.643516][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.686326][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.717775][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 111.767268][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.809030][ T4444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.840644][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.851303][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.870962][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.915556][ T4444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.961756][ T4444] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.034080][ T4444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.067601][ T4444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.097483][ T13] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.131251][ T13] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.161723][ T13] usb 4-1: Product: syz [ 112.166414][ T13] usb 4-1: Manufacturer: syz [ 112.171638][ T13] usb 4-1: SerialNumber: syz [ 112.189295][ T13] usb 4-1: config 0 descriptor?? [ 112.209075][ T4710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.368091][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.392260][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.465025][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.521401][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.567242][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.627561][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.901968][ T21] usb 4-1: USB disconnect, device number 3 [ 113.384307][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 113.384318][ T26] audit: type=1326 audit(1753972953.966:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 115.188601][ T26] audit: type=1326 audit(1753972954.026:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 116.295208][ T26] audit: type=1326 audit(1753972954.026:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 116.387410][ T26] audit: type=1326 audit(1753972954.026:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 116.507437][ T4300] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 116.665036][ T26] audit: type=1326 audit(1753972954.026:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 116.840487][ T26] audit: type=1326 audit(1753972954.026:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 116.927454][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.975675][ T4772] netlink: 132 bytes leftover after parsing attributes in process `syz.4.89'. [ 116.995084][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.047285][ T26] audit: type=1326 audit(1753972954.026:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 117.051805][ T4300] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.106240][ T4772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.89'. [ 117.175447][ T4300] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.195131][ T26] audit: type=1326 audit(1753972954.026:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 117.203521][ T4300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.293505][ T4300] usb 6-1: config 0 descriptor?? [ 117.344560][ T26] audit: type=1326 audit(1753972954.026:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 117.437853][ T4775] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 117.444427][ T4775] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.499340][ T4775] vhci_hcd vhci_hcd.0: Device attached [ 117.504153][ T26] audit: type=1326 audit(1753972954.026:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.5.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bca539a9 code=0x7ffc0000 [ 117.767340][ T4224] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.775119][ T4238] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 117.790033][ T4300] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 117.812009][ T4300] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 118.007278][ T4224] usb 5-1: Using ep0 maxpacket: 16 [ 118.021889][ T4300] usb 6-1: USB disconnect, device number 2 [ 118.088840][ T4783] fido_id[4783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 118.137449][ T4224] usb 5-1: config 0 has no interfaces? [ 118.143011][ T4224] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 118.172727][ T4224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.233561][ T4224] usb 5-1: config 0 descriptor?? [ 119.624790][ T4238] usb 41-1: device descriptor read/64, error -65536 [ 120.363277][ T4802] netlink: 36 bytes leftover after parsing attributes in process `syz.3.91'. [ 120.473114][ T13] usb 5-1: USB disconnect, device number 2 [ 120.484650][ T4776] vhci_hcd: connection closed [ 120.489961][ T154] vhci_hcd: stop threads [ 120.581173][ T154] vhci_hcd: release socket [ 120.616472][ T154] vhci_hcd: disconnect device [ 120.631504][ T4238] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 120.639061][ T4224] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 120.659482][ T4238] usb 41-1: enqueue for inactive port 0 [ 120.787394][ T4238] vhci_hcd: vhci_device speed not set [ 120.901671][ T4224] usb 6-1: Using ep0 maxpacket: 8 [ 121.757385][ T4224] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 121.774812][ T4224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.823886][ T4224] usb 6-1: Product: syz [ 121.855100][ T4224] usb 6-1: Manufacturer: syz [ 121.884608][ T4224] usb 6-1: SerialNumber: syz [ 121.929308][ T4224] usb 6-1: config 0 descriptor?? [ 123.167415][ T4224] usb 6-1: can't set config #0, error -71 [ 123.219122][ T4224] usb 6-1: USB disconnect, device number 3 [ 132.356941][ T4936] UBIFS error (pid: 4936): cannot open "/dev/sg0", error -22 [ 132.840241][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854460][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.970842][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 147.978242][ T4302] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.217213][ T4302] usb 5-1: Using ep0 maxpacket: 8 [ 148.337620][ T4302] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 148.348042][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.035919][ T4302] pvrusb2: Hardware description: Terratec Grabster AV400 [ 149.043212][ T4302] pvrusb2: ********** [ 149.048546][ T4302] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 149.059035][ T4302] pvrusb2: Important functionality might not be entirely working. [ 149.067548][ T4302] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 149.087181][ T4302] pvrusb2: ********** [ 149.229031][ T5084] udc-core: couldn't find an available UDC or it's busy [ 149.247344][ T5084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.332977][ T5065] chnl_net:caif_netlink_parms(): no params data found [ 150.141945][ T2426] pvrusb2: Invalid write control endpoint [ 150.149792][ T4302] Bluetooth: hci2: command 0x041b tx timeout [ 150.240914][ T2426] pvrusb2: Invalid write control endpoint [ 150.260300][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 150.321429][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 150.379279][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 150.657661][ T2426] pvrusb2: Device being rendered inoperable [ 150.673741][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 150.676747][ T4246] usb 5-1: USB disconnect, device number 3 [ 150.757752][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 151.148586][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.155781][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.777224][ T2426] pvrusb2: Attached sub-driver cx25840 [ 151.782750][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 151.818934][ T5065] device bridge_slave_0 entered promiscuous mode [ 151.932499][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 151.946523][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.983519][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.027587][ T5065] device bridge_slave_1 entered promiscuous mode [ 152.207766][ T4302] Bluetooth: hci2: command 0x040f tx timeout [ 152.907967][ T5065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.012044][ T5065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.558553][ T4186] Bluetooth: hci2: command 0x0419 tx timeout [ 154.803828][ T5065] team0: Port device team_slave_0 added [ 154.864906][ T5065] team0: Port device team_slave_1 added [ 155.873339][ T4303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.978497][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.985712][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.514033][ T5065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.585183][ T5197] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 156.597237][ T5197] ubi31: attaching mtd0 [ 156.607424][ T5197] ubi31: scanning is finished [ 157.029587][ T5197] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 157.299518][ T4303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.429993][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.436989][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.584709][ T5065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.672139][ T4303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.832663][ T5065] device hsr_slave_0 entered promiscuous mode [ 158.863441][ T5065] device hsr_slave_1 entered promiscuous mode [ 158.894087][ T5065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.936563][ T5065] Cannot create hsr debugfs directory [ 159.606925][ T4303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.975525][ T5234] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 160.005033][ T5234] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 160.597940][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 161.211289][ T5257] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 161.224447][ T5257] ubi31: attaching mtd0 [ 161.232378][ T5257] ubi31: scanning is finished [ 161.411974][ T5257] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 161.419969][ T5257] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 161.427431][ T5257] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 161.434600][ T5257] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 161.442240][ T5257] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 161.449297][ T5257] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 161.457518][ T5257] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 112177041 [ 161.467640][ T5257] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 161.506173][ T5258] ubi31: background thread "ubi_bgt31d" started, PID 5258 [ 162.923733][ T4302] Bluetooth: hci0: command 0x041b tx timeout [ 162.967223][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 164.620825][ T5065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.997728][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 165.527195][ T5065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.564550][ T5065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.756682][ T5065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.983252][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.009727][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.077184][ T4302] Bluetooth: hci0: command 0x0419 tx timeout [ 167.096909][ T5215] device bridge_slave_0 entered promiscuous mode [ 167.161765][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.178001][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.186383][ T5215] device bridge_slave_1 entered promiscuous mode [ 168.182425][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.555041][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.813286][ T5215] team0: Port device team_slave_0 added [ 169.840147][ T5215] team0: Port device team_slave_1 added [ 170.911141][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.926388][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.952640][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.020371][ T5377] binder: 5369:5377 ioctl 4018620d 0 returned -22 [ 171.044141][ T5377] binder: 5369:5377 ioctl 4018620d 0 returned -22 [ 171.053223][ T5377] binder: 5369:5377 ioctl c0306201 0 returned -14 [ 171.129063][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.163954][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.218805][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.454310][ T5065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.632962][ T5065] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.905015][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.092045][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.818397][ T5215] device hsr_slave_0 entered promiscuous mode [ 173.855740][ T5215] device hsr_slave_1 entered promiscuous mode [ 173.868333][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.883836][ T5215] Cannot create hsr debugfs directory [ 173.898769][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.923959][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.980963][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.988102][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.046159][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.086015][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.123494][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.130680][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.289434][ T4303] device hsr_slave_0 left promiscuous mode [ 174.357977][ T4303] device hsr_slave_1 left promiscuous mode [ 174.366314][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.502568][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.513523][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.523899][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.532600][ T4303] device bridge_slave_1 left promiscuous mode [ 175.157304][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.586465][ T4303] device bridge_slave_0 left promiscuous mode [ 176.418231][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.562012][ T4303] device veth1_macvtap left promiscuous mode [ 176.577285][ T4303] device veth0_macvtap left promiscuous mode [ 176.617371][ T4303] device veth1_vlan left promiscuous mode [ 176.623339][ T4303] device veth0_vlan left promiscuous mode [ 176.798739][ T5419] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 176.807296][ T5419] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 177.864857][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 177.864873][ T26] audit: type=1326 audit(1753973018.452:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36212449a9 code=0x7ffc0000 [ 177.946287][ T26] audit: type=1326 audit(1753973018.482:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f36212449a9 code=0x7ffc0000 [ 177.999706][ T26] audit: type=1326 audit(1753973018.492:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36212449a9 code=0x7ffc0000 [ 178.022457][ T26] audit: type=1326 audit(1753973018.492:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f36212449a9 code=0x7ffc0000 [ 178.107817][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 178.135873][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 178.153535][ T26] audit: type=1326 audit(1753973018.492:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36212449a9 code=0x7ffc0000 [ 178.192969][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.214992][ T26] audit: type=1326 audit(1753973018.492:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f36212449a9 code=0x7ffc0000 [ 178.251088][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.272529][ T26] audit: type=1326 audit(1753973018.492:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36212449a9 code=0x7ffc0000 [ 179.220609][ T4303] bond0 (unregistering): Released all slaves [ 179.386021][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.403817][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.421113][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.434112][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.451390][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.595632][ T5065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.682312][ T5065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.746438][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.755800][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.880191][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.897057][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.906841][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.916606][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.991159][ T5452] tmpfs: Unknown parameter 'grpquota' [ 181.825562][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.859531][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.229298][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.236689][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.270258][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.457245][ T5215] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.775316][ T5215] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.806270][ T5215] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.817614][ T5215] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.927977][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.958386][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.976813][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.033400][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.096103][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.126245][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.182675][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.191655][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.200812][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.208034][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.216431][ T5516] block nbd4: shutting down sockets [ 185.223545][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.978866][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.991896][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.999046][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.127338][ T2287] Bluetooth: hci3: command 0x0406 tx timeout [ 186.136331][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.137901][ T2287] Bluetooth: hci4: command 0x0406 tx timeout [ 186.168105][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.181148][ T2287] Bluetooth: hci1: command 0x0406 tx timeout [ 186.198315][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.228304][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.259820][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.279924][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.299122][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.337721][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.401175][ T5065] device veth0_vlan entered promiscuous mode [ 186.438172][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.448928][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.473637][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.499737][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.531959][ T5215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.564843][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.636783][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.665879][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.802188][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.998907][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.421156][ T5065] device veth1_vlan entered promiscuous mode [ 187.459100][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.497950][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.546543][ T5065] device veth0_macvtap entered promiscuous mode [ 187.593259][ T5065] device veth1_macvtap entered promiscuous mode [ 187.704883][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.741385][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.784666][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.823657][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.854407][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.878601][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.907529][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.944184][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.976416][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.007735][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.023920][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.067554][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.078186][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.135158][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.155725][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.194285][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.206912][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.225337][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.266333][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.297139][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.326673][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.347127][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.356993][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.387143][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.408571][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.422879][ T5065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.460803][ T5567] netlink: 208 bytes leftover after parsing attributes in process `syz.4.246'. [ 188.487287][ T5065] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.496035][ T5065] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.529581][ T5065] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.558869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.580591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.755822][ T5567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.246'. [ 189.533803][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.579163][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.591497][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.598308][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.631104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.660469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.688933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.734349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.854383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.343284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.590246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.781207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.956542][ T5215] device veth0_vlan entered promiscuous mode [ 191.086040][ T5215] device veth1_vlan entered promiscuous mode [ 191.128700][ T5215] device veth0_macvtap entered promiscuous mode [ 191.140560][ T5215] device veth1_macvtap entered promiscuous mode [ 191.171859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.193799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.273806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.323538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.347459][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.474633][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.743840][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.947759][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.138816][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.169545][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.322902][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.514317][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.633380][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.871948][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.905815][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.955983][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.978770][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.989297][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.000695][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.010828][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.021495][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.031432][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.042181][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.052099][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.072522][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.108581][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.132659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.175974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.199812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.215497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.269288][ T5215] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.300188][ T5215] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.344304][ T5215] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.353254][ T5215] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.137181][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 194.223061][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.243504][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.338729][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.349702][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.521687][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.551276][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.768046][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.776209][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.017838][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.115074][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.257694][ T21] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 195.337444][ T5641] tipc: Enabling of bearer rejected, failed to enable media [ 195.366062][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.476595][ T21] usb 7-1: config 0 descriptor?? [ 195.802519][ T4303] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.229117][ T21] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 198.249230][ T21] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 198.364895][ T21] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 198.396527][ T4303] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.415762][ T21] usb 7-1: USB disconnect, device number 2 [ 200.549041][ T5686] fido_id[5686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 200.570991][ T21] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 200.632278][ T5677] ubi: mtd0 is already attached to ubi31 [ 201.550835][ T4303] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.687509][ T5691] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 202.239309][ T4303] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.063864][ T5723] input: syz0 as /devices/virtual/input/input9 [ 203.828527][ T5721] tap0: tun_chr_ioctl cmd 1074025675 [ 203.843630][ T5726] rtc_cmos 00:00: Alarms can be up to one day in the future [ 203.879245][ T5721] tap0: persist enabled [ 203.884751][ T5715] tap0: tun_chr_ioctl cmd 1074025675 [ 203.916900][ T5715] tap0: persist enabled [ 204.032805][ T5730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.280'. [ 204.050756][ T5723] tap0: tun_chr_ioctl cmd 2147774992 [ 204.887492][ T4268] Bluetooth: hci5: command 0x0409 tx timeout [ 205.265595][ T5742] ubi: mtd0 is already attached to ubi31 [ 206.918098][ T4186] Bluetooth: hci5: command 0x041b tx timeout [ 207.715385][ T5717] chnl_net:caif_netlink_parms(): no params data found [ 208.997549][ T4186] Bluetooth: hci5: command 0x040f tx timeout [ 209.021470][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.049438][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.105558][ T5717] device bridge_slave_0 entered promiscuous mode [ 209.139754][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.159544][ T4186] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 209.176349][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.226155][ T5717] device bridge_slave_1 entered promiscuous mode [ 209.370438][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.407329][ T4186] usb 8-1: Using ep0 maxpacket: 32 [ 209.426111][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.511747][ T5717] team0: Port device team_slave_0 added [ 209.544035][ T5717] team0: Port device team_slave_1 added [ 209.587463][ T4186] usb 8-1: unable to get BOS descriptor or descriptor too short [ 209.607490][ T4300] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 209.645222][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.666012][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.695275][ T4186] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 209.756478][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.838074][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.845064][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.877532][ T4300] usb 2-1: Using ep0 maxpacket: 32 [ 209.907381][ T4186] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 209.932300][ T4186] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.945471][ T4186] usb 8-1: Product: syz [ 209.952157][ T4186] usb 8-1: Manufacturer: syz [ 209.961210][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.977165][ T4186] usb 8-1: SerialNumber: syz [ 210.027464][ T4300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.048197][ T4300] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.064953][ T4300] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 210.074188][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.135982][ T4300] usb 2-1: config 0 descriptor?? [ 210.154406][ T4303] device hsr_slave_0 left promiscuous mode [ 210.171481][ T4303] device hsr_slave_1 left promiscuous mode [ 210.198006][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.222312][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.237443][ T4186] usb 8-1: Limiting number of CPorts to U8_MAX [ 210.246736][ T4186] usb 8-1: Not enough endpoints found in device, aborting! [ 210.254830][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.320967][ T5804] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 210.333945][ T5804] ubi: mtd0 is already attached to ubi31 [ 210.538016][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.977824][ T4186] usb 8-1: USB disconnect, device number 2 [ 211.070250][ T4303] device bridge_slave_1 left promiscuous mode [ 211.229227][ T4186] Bluetooth: hci5: command 0x0419 tx timeout [ 211.251273][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.434106][ T4303] device bridge_slave_0 left promiscuous mode [ 212.401664][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.434406][ T4303] device veth1_macvtap left promiscuous mode [ 212.525386][ T4303] device veth0_macvtap left promiscuous mode [ 212.602903][ T4303] device veth1_vlan left promiscuous mode [ 212.623245][ T4303] device veth0_vlan left promiscuous mode [ 213.582512][ T23] usb 2-1: USB disconnect, device number 4 [ 215.118802][ T5846] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 215.131057][ T5846] ubi: mtd0 is already attached to ubi31 [ 216.054091][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 216.651212][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 216.832538][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.908105][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.246895][ T4303] bond0 (unregistering): Released all slaves [ 217.591358][ T5866] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 218.513172][ T5866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.728679][ T5869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.766368][ T5869] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 218.791620][ T5869] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 218.827435][ T5717] device hsr_slave_0 entered promiscuous mode [ 218.900128][ T5717] device hsr_slave_1 entered promiscuous mode [ 218.967669][ T5717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.975504][ T5717] Cannot create hsr debugfs directory [ 218.983487][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.998607][ T5871] device batadv_slave_1 entered promiscuous mode [ 219.180843][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.986642][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 220.267375][ T5892] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 220.277818][ T5892] ubi: mtd0 is already attached to ubi31 [ 222.047404][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 223.786587][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 224.090992][ T5717] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 224.143728][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 224.202914][ T5717] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 224.389624][ T5717] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 224.425633][ T5717] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 224.610725][ T5936] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 224.746880][ T5936] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 225.374261][ T5954] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 225.380923][ T5954] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 225.398772][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.406056][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.428670][ T5960] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.457994][ T5863] device bridge_slave_0 entered promiscuous mode [ 225.474202][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.503878][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.524153][ T5957] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 225.530803][ T5957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.569412][ T5863] device bridge_slave_1 entered promiscuous mode [ 225.645743][ T5957] vhci_hcd vhci_hcd.0: Device attached [ 225.651605][ T5954] vhci_hcd vhci_hcd.0: Device attached [ 225.661728][ T5960] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(19) [ 225.668374][ T5960] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.764432][ T5960] vhci_hcd vhci_hcd.0: Device attached [ 225.927372][ T4300] usb 47-2: new low-speed USB device number 2 using vhci_hcd [ 225.971003][ T5954] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(12) [ 225.977680][ T5954] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.180322][ T26] audit: type=1326 audit(1753973066.763:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.1.326" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c13ba49a9 code=0x0 [ 226.378356][ T5960] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.439912][ T5965] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.472744][ T4186] Bluetooth: hci3: command 0x0419 tx timeout [ 226.486997][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.519173][ T5954] vhci_hcd vhci_hcd.0: Device attached [ 226.525049][ T5957] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(23) [ 226.531777][ T5957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 226.547046][ T5954] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.569411][ T5957] vhci_hcd vhci_hcd.0: Device attached [ 226.578124][ T5717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.587177][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.627530][ T5957] vhci_hcd vhci_hcd.0: port 0 already used [ 226.661197][ T5966] vhci_hcd: connection closed [ 226.661572][ T5972] vhci_hcd: connection closed [ 226.661634][ T5958] vhci_hcd: connection reset by peer [ 226.679662][ T4270] vhci_hcd: stop threads [ 226.683961][ T4270] vhci_hcd: release socket [ 226.703887][ T5955] vhci_hcd: connection closed [ 226.709165][ T5717] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.713442][ T5973] vhci_hcd: connection closed [ 226.714355][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.721902][ T4270] vhci_hcd: disconnect device [ 226.735131][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.893510][ T4270] vhci_hcd: stop threads [ 226.902212][ T4270] vhci_hcd: release socket [ 226.911316][ T4270] vhci_hcd: disconnect device [ 226.955817][ T4270] vhci_hcd: stop threads [ 226.983723][ T4270] vhci_hcd: release socket [ 227.011876][ T4270] vhci_hcd: disconnect device [ 227.020063][ T5863] team0: Port device team_slave_0 added [ 227.048992][ T4270] vhci_hcd: stop threads [ 227.067544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.096401][ T4270] vhci_hcd: release socket [ 227.114559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.123344][ T4270] vhci_hcd: disconnect device [ 227.156377][ T4270] vhci_hcd: stop threads [ 227.173650][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.180830][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.191476][ T4270] vhci_hcd: release socket [ 227.210337][ T4270] vhci_hcd: disconnect device [ 227.250679][ T5863] team0: Port device team_slave_1 added [ 227.298615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.356804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.418379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.487725][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.494886][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.808210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.820983][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.837798][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.927133][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.987321][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.014685][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.032251][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.066540][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.187804][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.237115][ C0] sched: RT throttling activated [ 230.265831][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.368088][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.380667][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.396225][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.692378][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.706613][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.944847][ T5863] device hsr_slave_0 entered promiscuous mode [ 231.012241][ T5863] device hsr_slave_1 entered promiscuous mode [ 231.062623][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.087130][ T5863] Cannot create hsr debugfs directory [ 231.220024][ T4300] vhci_hcd: vhci_device speed not set [ 231.232954][ T5717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.298372][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.398523][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.456959][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.004157][ T4302] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 233.390262][ T4302] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 233.423609][ T4302] usb usb48-port1: attempt power cycle [ 234.112245][ T4302] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 234.143425][ T5863] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 234.179888][ T5863] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 234.418166][ T4302] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 234.443354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.506736][ T4302] usb usb48-port1: unable to enumerate USB device [ 234.535753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.882534][ T5863] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 234.971495][ T5717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.028690][ T5863] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 235.325059][ T6097] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 235.337177][ T6097] ubi: mtd0 is already attached to ubi31 [ 236.099408][ T4303] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.187468][ T6082] IPv6: Can't replace route, no match found [ 236.344481][ T4303] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.490731][ T6108] syz.7.353 uses obsolete (PF_INET,SOCK_PACKET) [ 236.691326][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.246422][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.307867][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.318447][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.336676][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.549945][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.964978][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.972167][ T5668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.755329][ T4303] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.998179][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.015829][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.079299][ T6152] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 239.091132][ T6152] ubi: mtd0 is already attached to ubi31 [ 239.753862][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.786383][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.793784][ T5668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.118901][ T4303] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.201713][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.220133][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.259621][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.309556][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.408629][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.556516][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.570538][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.589458][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.617902][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.638997][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.822599][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.259722][ T5717] device veth0_vlan entered promiscuous mode [ 241.320187][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.372529][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.406874][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.452248][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.629375][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.654300][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.678200][ T6184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.899151][ T5717] device veth1_vlan entered promiscuous mode [ 242.356058][ T5717] device veth0_macvtap entered promiscuous mode [ 242.414941][ T5717] device veth1_macvtap entered promiscuous mode [ 242.429854][ T6184] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 242.469302][ T6184] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 242.494929][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.544263][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.554711][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.569208][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.579393][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.589987][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.600376][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.611189][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.637296][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.677180][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.701774][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.732591][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.773320][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.956575][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.984241][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.000233][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.011321][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.021734][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.115412][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.268015][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.334898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.501885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.513964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.523307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.533497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.541925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.552206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.582108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.596501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.606878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.955267][ T6206] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 243.964881][ T6206] ubi: mtd0 is already attached to ubi31 [ 244.710453][ T5717] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.733845][ T5717] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.742812][ T5717] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.751658][ T5717] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.921361][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.971236][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.041193][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.243318][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.289458][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.451733][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.513965][ T5636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.533892][ T5636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.750919][ T6249] mkiss: ax0: crc mode is auto. [ 246.048603][ T26] audit: type=1326 audit(1753973086.360:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c13ba49a9 code=0x0 [ 248.734916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.465555][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.480354][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.830472][ T6277] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 249.870466][ T6277] ubi: mtd0 is already attached to ubi31 [ 250.420954][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.505205][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.661219][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.962324][ T4300] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 251.579727][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.633576][ T5863] device veth0_vlan entered promiscuous mode [ 254.393690][ T5863] device veth1_vlan entered promiscuous mode [ 254.473076][ T5863] device veth0_macvtap entered promiscuous mode [ 254.484711][ T5863] device veth1_macvtap entered promiscuous mode [ 254.500513][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.511567][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.537038][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.566807][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.618356][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.648958][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.675636][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.727273][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.780742][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.860770][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.036843][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.053096][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.078889][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.559172][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.598953][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.622359][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.657712][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.702574][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.721663][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730041][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.776112][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.799679][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.827412][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.865361][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.929188][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.958924][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.117140][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.127006][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.937232][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.993053][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.248072][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.306110][ T6334] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 257.318459][ T6334] ubi: mtd0 is already attached to ubi31 [ 258.027763][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.084598][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.116526][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.171952][ T5863] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.217215][ T5863] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.267190][ T5863] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.315217][ T5863] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.357879][ T6339] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 258.470183][ T6339] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 258.483049][ T4303] device hsr_slave_0 left promiscuous mode [ 258.516435][ T4303] device hsr_slave_1 left promiscuous mode [ 258.573243][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.595979][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.643685][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.681942][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.713175][ T4303] device bridge_slave_1 left promiscuous mode [ 258.796927][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.024160][ T4303] device bridge_slave_0 left promiscuous mode [ 260.030503][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.057397][ T4303] device veth1_macvtap left promiscuous mode [ 260.068516][ T4303] device veth0_macvtap left promiscuous mode [ 260.077607][ T4303] device veth1_vlan left promiscuous mode [ 260.083584][ T4303] device veth0_vlan left promiscuous mode [ 264.537870][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 265.773742][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 265.882574][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.083215][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.236594][ T4303] bond0 (unregistering): Released all slaves [ 267.329715][ T6411] netlink: 24 bytes leftover after parsing attributes in process `syz.8.416'. [ 267.669138][ T5668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.957328][ T5668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.907524][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.732280][ T5753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.185300][ T5753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.680584][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.782024][ T6440] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.078752][ T6449] ubi: mtd0 is already attached to ubi31 [ 274.037429][ T4268] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 274.417271][ T4268] usb 10-1: config 0 has no interfaces? [ 274.424707][ T4268] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.480514][ T4268] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.539127][ T4268] usb 10-1: config 0 descriptor?? [ 277.065610][ T6519] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 277.332215][ T6522] ubi: mtd0 is already attached to ubi31 [ 283.643067][ T6573] ubi: mtd0 is already attached to ubi31 [ 287.019963][ T1324] usb 10-1: USB disconnect, device number 2 [ 289.591747][ T6649] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 289.619118][ T6649] ubi: mtd0 is already attached to ubi31 [ 291.458434][ T6663] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 293.339628][ T6681] netlink: 'syz.8.476': attribute type 1 has an invalid length. [ 295.549291][ T6708] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 295.561626][ T6708] ubi: mtd0 is already attached to ubi31 [ 300.394848][ T6771] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 300.407121][ T6771] ubi: mtd0 is already attached to ubi31 [ 304.225245][ T6817] 9p: Unknown Cache mode readahead [ 304.517197][ T6826] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 304.527111][ T6826] ubi: mtd0 is already attached to ubi31 [ 310.011040][ T6867] mkiss: ax0: crc mode is auto. [ 310.926098][ T6874] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 311.107681][ T6874] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 311.331651][ T6895] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 311.341582][ T6895] ubi: mtd0 is already attached to ubi31 [ 315.461859][ T6940] mkiss: ax0: crc mode is auto. [ 315.479888][ T26] audit: type=1326 audit(1753973156.068:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.7.537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3b08da9a9 code=0x0 [ 315.537167][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 317.162836][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.169300][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.057458][ T23] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 318.065593][ T23] usb 2-1: config 0 has no interface number 0 [ 318.117584][ T23] usb 2-1: config 0 interface 41 has no altsetting 0 [ 318.386024][ T6957] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 318.395918][ T6957] ubi: mtd0 is already attached to ubi31 [ 319.073784][ T23] usb 2-1: string descriptor 0 read error: -71 [ 319.080517][ T23] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 319.089651][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.156891][ T23] usb 2-1: config 0 descriptor?? [ 319.362854][ T23] usb 2-1: can't set config #0, error -71 [ 319.450520][ T23] usb 2-1: USB disconnect, device number 6 [ 322.134121][ T6989] ================================================================== [ 322.142614][ T6989] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 322.151833][ T6989] Read of size 1 at addr ffff888074049600 by task syz.1.557/6989 [ 322.159584][ T6989] [ 322.161935][ T6989] CPU: 1 PID: 6989 Comm: syz.1.557 Not tainted 5.15.189-syzkaller #0 [ 322.170227][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.180412][ T6989] Call Trace: [ 322.183717][ T6989] [ 322.186668][ T6989] dump_stack_lvl+0x168/0x230 [ 322.191386][ T6989] ? show_regs_print_info+0x20/0x20 [ 322.196666][ T6989] ? load_image+0x3b0/0x3b0 [ 322.201206][ T6989] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 322.206629][ T6989] ? xfrm_pol_bin_obj+0x140/0x140 [ 322.211695][ T6989] print_address_description+0x60/0x2d0 [ 322.217277][ T6989] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 322.224006][ T6989] kasan_report+0xdf/0x130 [ 322.228472][ T6989] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 322.235046][ T6989] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 322.241398][ T6989] ? xfrm_policy_addr_delta+0x212/0x340 [ 322.246966][ T6989] xfrm_policy_inexact_insert_node+0x599/0xb60 [ 322.253236][ T6989] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 322.259402][ T6989] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 322.265501][ T6989] xfrm_policy_inexact_insert+0xe0/0x1460 [ 322.271469][ T6989] ? __get_hash_thresh+0x105/0x410 [ 322.276598][ T6989] ? policy_hash_bysel+0x10a/0x570 [ 322.281739][ T6989] xfrm_policy_insert+0x112/0x930 [ 322.286811][ T6989] xfrm_add_policy+0x4d6/0x860 [ 322.291707][ T6989] ? xfrm_dump_sa_done+0xc0/0xc0 [ 322.296653][ T6989] ? apparmor_capable+0x12c/0x190 [ 322.301716][ T6989] ? __nla_parse+0x3c/0x50 [ 322.306240][ T6989] xfrm_user_rcv_msg+0x58d/0x860 [ 322.311213][ T6989] ? xfrm_netlink_rcv+0x90/0x90 [ 322.316225][ T6989] ? xfrm_netlink_rcv+0x66/0x90 [ 322.321081][ T6989] ? xfrm_netlink_rcv+0x66/0x90 [ 322.325976][ T6989] ? xfrm_netlink_rcv+0x66/0x90 [ 322.330964][ T6989] ? __mutex_lock_common+0x431/0x2390 [ 322.336357][ T6989] ? __copy_skb_header+0x417/0x5a0 [ 322.341582][ T6989] ? __skb_clone+0x480/0x790 [ 322.346311][ T6989] netlink_rcv_skb+0x1e0/0x430 [ 322.351148][ T6989] ? xfrm_netlink_rcv+0x90/0x90 [ 322.356188][ T6989] ? netlink_ack+0xb60/0xb60 [ 322.360789][ T6989] ? __lock_acquire+0x7c60/0x7c60 [ 322.365849][ T6989] xfrm_netlink_rcv+0x75/0x90 [ 322.370535][ T6989] netlink_unicast+0x774/0x920 [ 322.375332][ T6989] netlink_sendmsg+0x8ab/0xbc0 [ 322.380133][ T6989] ? netlink_getsockopt+0x560/0x560 [ 322.385369][ T6989] ? aa_sock_msg_perm+0x94/0x150 [ 322.390331][ T6989] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.395648][ T6989] ? security_socket_sendmsg+0x7c/0xa0 [ 322.401221][ T6989] ? netlink_getsockopt+0x560/0x560 [ 322.406439][ T6989] ____sys_sendmsg+0x5a2/0x8c0 [ 322.411495][ T6989] ? memset+0x1e/0x40 [ 322.415676][ T6989] ? __sys_sendmsg_sock+0x30/0x30 [ 322.420918][ T6989] ? import_iovec+0x6f/0xa0 [ 322.425466][ T6989] ___sys_sendmsg+0x1f0/0x260 [ 322.430165][ T6989] ? __sys_sendmsg+0x250/0x250 [ 322.435052][ T6989] ? percpu_counter_add_batch+0x13b/0x160 [ 322.440811][ T6989] ? __fdget+0x18b/0x210 [ 322.445065][ T6989] __se_sys_sendmsg+0x190/0x250 [ 322.449928][ T6989] ? __x64_sys_sendmsg+0x80/0x80 [ 322.454959][ T6989] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 322.461041][ T6989] ? lockdep_hardirqs_on+0x94/0x140 [ 322.466319][ T6989] do_syscall_64+0x4c/0xa0 [ 322.470835][ T6989] ? clear_bhb_loop+0x30/0x80 [ 322.475692][ T6989] ? clear_bhb_loop+0x30/0x80 [ 322.480378][ T6989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.486290][ T6989] RIP: 0033:0x7f1c13ba49a9 [ 322.490798][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.510613][ T6989] RSP: 002b:00007f1c11a0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.519242][ T6989] RAX: ffffffffffffffda RBX: 00007f1c13dcbfa0 RCX: 00007f1c13ba49a9 [ 322.527225][ T6989] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 322.535203][ T6989] RBP: 00007f1c13c26d69 R08: 0000000000000000 R09: 0000000000000000 [ 322.543182][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.551157][ T6989] R13: 0000000000000000 R14: 00007f1c13dcbfa0 R15: 00007ffcc76d50b8 [ 322.559150][ T6989] [ 322.562172][ T6989] [ 322.564579][ T6989] Allocated by task 6989: [ 322.569018][ T6989] __kasan_kmalloc+0xb5/0xf0 [ 322.573615][ T6989] sk_prot_alloc+0xe7/0x210 [ 322.578125][ T6989] sk_alloc+0x2f/0x310 [ 322.582197][ T6989] pfkey_create+0xd8/0x560 [ 322.586614][ T6989] __sock_create+0x47b/0x900 [ 322.591207][ T6989] __sys_socket+0xe2/0x170 [ 322.595624][ T6989] __x64_sys_socket+0x76/0x80 [ 322.600303][ T6989] do_syscall_64+0x4c/0xa0 [ 322.604742][ T6989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.610867][ T6989] [ 322.613201][ T6989] Last potentially related work creation: [ 322.618948][ T6989] kasan_save_stack+0x35/0x60 [ 322.623635][ T6989] kasan_record_aux_stack+0xb8/0x100 [ 322.628930][ T6989] call_rcu+0x182/0x930 [ 322.633084][ T6989] netlink_release+0x134f/0x1790 [ 322.638020][ T6989] sock_close+0xd5/0x240 [ 322.642278][ T6989] __fput+0x234/0x930 [ 322.646256][ T6989] task_work_run+0x125/0x1a0 [ 322.650865][ T6989] exit_to_user_mode_loop+0x10f/0x130 [ 322.656258][ T6989] exit_to_user_mode_prepare+0xb1/0x140 [ 322.661809][ T6989] syscall_exit_to_user_mode+0x16/0x40 [ 322.667280][ T6989] do_syscall_64+0x58/0xa0 [ 322.671721][ T6989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.677790][ T6989] [ 322.680129][ T6989] Second to last potentially related work creation: [ 322.686736][ T6989] kasan_save_stack+0x35/0x60 [ 322.691432][ T6989] kasan_record_aux_stack+0xb8/0x100 [ 322.696732][ T6989] call_rcu+0x182/0x930 [ 322.700894][ T6989] netlink_release+0x134f/0x1790 [ 322.705961][ T6989] sock_close+0xd5/0x240 [ 322.710221][ T6989] __fput+0x234/0x930 [ 322.714207][ T6989] task_work_run+0x125/0x1a0 [ 322.718856][ T6989] exit_to_user_mode_loop+0x10f/0x130 [ 322.724261][ T6989] exit_to_user_mode_prepare+0xb1/0x140 [ 322.729844][ T6989] syscall_exit_to_user_mode+0x16/0x40 [ 322.735323][ T6989] do_syscall_64+0x58/0xa0 [ 322.739837][ T6989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.745737][ T6989] [ 322.748094][ T6989] The buggy address belongs to the object at ffff888074049000 [ 322.748094][ T6989] which belongs to the cache kmalloc-2k of size 2048 [ 322.762155][ T6989] The buggy address is located 1536 bytes inside of [ 322.762155][ T6989] 2048-byte region [ffff888074049000, ffff888074049800) [ 322.775716][ T6989] The buggy address belongs to the page: [ 322.781355][ T6989] page:ffffea0001d01200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74048 [ 322.791812][ T6989] head:ffffea0001d01200 order:3 compound_mapcount:0 compound_pincount:0 [ 322.800140][ T6989] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 322.808237][ T6989] raw: 00fff00000010200 ffffea000189de00 0000000200000002 ffff888016842000 [ 322.816849][ T6989] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 322.825431][ T6989] page dumped because: kasan: bad access detected [ 322.832083][ T6989] page_owner tracks the page as allocated [ 322.837803][ T6989] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5065, ts 161647377587, free_ts 161625081714 [ 322.858474][ T6989] get_page_from_freelist+0x1b77/0x1c60 [ 322.864133][ T6989] __alloc_pages+0x1e1/0x470 [ 322.868882][ T6989] new_slab+0xc0/0x4b0 [ 322.873013][ T6989] ___slab_alloc+0x81e/0xdf0 [ 322.877607][ T6989] __kmalloc_track_caller+0x1cb/0x330 [ 322.882979][ T6989] kmemdup+0x22/0x50 [ 322.886881][ T6989] neigh_sysctl_register+0x9b/0xa80 [ 322.892190][ T6989] addrconf_sysctl_register+0xac/0x1b0 [ 322.897649][ T6989] ipv6_add_dev+0xbf3/0x1190 [ 322.902261][ T6989] addrconf_notify+0x66f/0xf00 [ 322.907031][ T6989] raw_notifier_call_chain+0xcb/0x160 [ 322.912624][ T6989] register_netdevice+0x1275/0x16b0 [ 322.917836][ T6989] macsec_newlink+0x686/0x10b0 [ 322.922747][ T6989] rtnl_newlink+0x114c/0x17d0 [ 322.927639][ T6989] rtnetlink_rcv_msg+0x9b9/0xe60 [ 322.932589][ T6989] netlink_rcv_skb+0x1e0/0x430 [ 322.937398][ T6989] page last free stack trace: [ 322.942072][ T6989] free_unref_page_prepare+0x637/0x6c0 [ 322.947738][ T6989] free_unref_page+0x94/0x280 [ 322.952414][ T6989] __unfreeze_partials+0x1a5/0x200 [ 322.957524][ T6989] put_cpu_partial+0x12d/0x190 [ 322.962369][ T6989] qlist_free_all+0x35/0x90 [ 322.966869][ T6989] kasan_quarantine_reduce+0x150/0x160 [ 322.972326][ T6989] __kasan_slab_alloc+0x2f/0xd0 [ 322.977175][ T6989] slab_post_alloc_hook+0x4c/0x380 [ 322.982279][ T6989] kmem_cache_alloc+0x100/0x290 [ 322.987136][ T6989] getname_flags+0xb5/0x500 [ 322.991687][ T6989] do_sys_openat2+0xcf/0x4a0 [ 322.996278][ T6989] __x64_sys_openat+0x135/0x160 [ 323.001221][ T6989] do_syscall_64+0x4c/0xa0 [ 323.005635][ T6989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.011711][ T6989] [ 323.014031][ T6989] Memory state around the buggy address: [ 323.019659][ T6989] ffff888074049500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.027720][ T6989] ffff888074049580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 323.035775][ T6989] >ffff888074049600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.043845][ T6989] ^ [ 323.048021][ T6989] ffff888074049680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.056195][ T6989] ffff888074049700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.064247][ T6989] ================================================================== [ 323.072299][ T6989] Disabling lock debugging due to kernel taint [ 323.078532][ T6989] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.085806][ T6989] CPU: 1 PID: 6989 Comm: syz.1.557 Tainted: G B 5.15.189-syzkaller #0 [ 323.095253][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.105400][ T6989] Call Trace: [ 323.108674][ T6989] [ 323.111601][ T6989] dump_stack_lvl+0x168/0x230 [ 323.116276][ T6989] ? show_regs_print_info+0x20/0x20 [ 323.121477][ T6989] ? load_image+0x3b0/0x3b0 [ 323.125981][ T6989] panic+0x2c9/0x7f0 [ 323.129902][ T6989] ? bpf_jit_dump+0xd0/0xd0 [ 323.134409][ T6989] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 323.140305][ T6989] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 323.146198][ T6989] ? _raw_spin_unlock+0x40/0x40 [ 323.151046][ T6989] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 323.157552][ T6989] check_panic_on_warn+0x80/0xa0 [ 323.162489][ T6989] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 323.169102][ T6989] end_report+0x6d/0xf0 [ 323.173260][ T6989] kasan_report+0x102/0x130 [ 323.177848][ T6989] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 323.184352][ T6989] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 323.190786][ T6989] ? xfrm_policy_addr_delta+0x212/0x340 [ 323.196348][ T6989] xfrm_policy_inexact_insert_node+0x599/0xb60 [ 323.202699][ T6989] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 323.208887][ T6989] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 323.214881][ T6989] xfrm_policy_inexact_insert+0xe0/0x1460 [ 323.220620][ T6989] ? __get_hash_thresh+0x105/0x410 [ 323.226001][ T6989] ? policy_hash_bysel+0x10a/0x570 [ 323.231114][ T6989] xfrm_policy_insert+0x112/0x930 [ 323.236162][ T6989] xfrm_add_policy+0x4d6/0x860 [ 323.240946][ T6989] ? xfrm_dump_sa_done+0xc0/0xc0 [ 323.245907][ T6989] ? apparmor_capable+0x12c/0x190 [ 323.250967][ T6989] ? __nla_parse+0x3c/0x50 [ 323.255386][ T6989] xfrm_user_rcv_msg+0x58d/0x860 [ 323.260322][ T6989] ? xfrm_netlink_rcv+0x90/0x90 [ 323.265206][ T6989] ? xfrm_netlink_rcv+0x66/0x90 [ 323.270054][ T6989] ? xfrm_netlink_rcv+0x66/0x90 [ 323.274906][ T6989] ? xfrm_netlink_rcv+0x66/0x90 [ 323.279755][ T6989] ? __mutex_lock_common+0x431/0x2390 [ 323.285141][ T6989] ? __copy_skb_header+0x417/0x5a0 [ 323.290530][ T6989] ? __skb_clone+0x480/0x790 [ 323.295184][ T6989] netlink_rcv_skb+0x1e0/0x430 [ 323.300098][ T6989] ? xfrm_netlink_rcv+0x90/0x90 [ 323.305010][ T6989] ? netlink_ack+0xb60/0xb60 [ 323.309608][ T6989] ? __lock_acquire+0x7c60/0x7c60 [ 323.314755][ T6989] xfrm_netlink_rcv+0x75/0x90 [ 323.319450][ T6989] netlink_unicast+0x774/0x920 [ 323.324327][ T6989] netlink_sendmsg+0x8ab/0xbc0 [ 323.329095][ T6989] ? netlink_getsockopt+0x560/0x560 [ 323.334300][ T6989] ? aa_sock_msg_perm+0x94/0x150 [ 323.339328][ T6989] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 323.344734][ T6989] ? security_socket_sendmsg+0x7c/0xa0 [ 323.350224][ T6989] ? netlink_getsockopt+0x560/0x560 [ 323.355443][ T6989] ____sys_sendmsg+0x5a2/0x8c0 [ 323.360298][ T6989] ? memset+0x1e/0x40 [ 323.364283][ T6989] ? __sys_sendmsg_sock+0x30/0x30 [ 323.369307][ T6989] ? import_iovec+0x6f/0xa0 [ 323.373835][ T6989] ___sys_sendmsg+0x1f0/0x260 [ 323.378599][ T6989] ? __sys_sendmsg+0x250/0x250 [ 323.383360][ T6989] ? percpu_counter_add_batch+0x13b/0x160 [ 323.389095][ T6989] ? __fdget+0x18b/0x210 [ 323.393510][ T6989] __se_sys_sendmsg+0x190/0x250 [ 323.398365][ T6989] ? __x64_sys_sendmsg+0x80/0x80 [ 323.403297][ T6989] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 323.409278][ T6989] ? lockdep_hardirqs_on+0x94/0x140 [ 323.414479][ T6989] do_syscall_64+0x4c/0xa0 [ 323.418896][ T6989] ? clear_bhb_loop+0x30/0x80 [ 323.423580][ T6989] ? clear_bhb_loop+0x30/0x80 [ 323.428249][ T6989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.434149][ T6989] RIP: 0033:0x7f1c13ba49a9 [ 323.438573][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.458174][ T6989] RSP: 002b:00007f1c11a0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.466674][ T6989] RAX: ffffffffffffffda RBX: 00007f1c13dcbfa0 RCX: 00007f1c13ba49a9 [ 323.474653][ T6989] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 323.482620][ T6989] RBP: 00007f1c13c26d69 R08: 0000000000000000 R09: 0000000000000000 [ 323.490585][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.498562][ T6989] R13: 0000000000000000 R14: 00007f1c13dcbfa0 R15: 00007ffcc76d50b8 [ 323.506608][ T6989] [ 323.509936][ T6989] Kernel Offset: disabled [ 323.514406][ T6989] Rebooting in 86400 seconds..