last executing test programs: 6.423246156s ago: executing program 0 (id=40): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0011022, 0x0, 0x80000000}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 6.208721132s ago: executing program 0 (id=31): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 5.711808908s ago: executing program 0 (id=32): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x3, 0x84, 0x9ad, 'syz1\x00', 0x7}, 0x0, [0x1, 0xe8af, 0x5, 0x800cc0, 0xe, 0x5, 0x11, 0xa6da, 0x2, 0x1, 0x2, 0x5, 0x80000b, 0xfffffff7, 0x8, 0x6, 0x7, 0xfffffff1, 0x40f, 0x80, 0x962, 0x7, 0x3, 0x3, 0x7fffffff, 0x9c, 0x3ff, 0xb861, 0x1, 0x5, 0x8, 0x5, 0x7, 0x9, 0x7434, 0xf7ffdebe, 0x15, 0x8609, 0x81, 0x3, 0x5, 0x5, 0x8081, 0xb, 0x80009, 0x1, 0x1, 0x0, 0xffff1684, 0x105, 0x0, 0x84, 0x1000, 0xe96, 0x4, 0x7ff, 0x7, 0x6, 0x1, 0x4, 0x6, 0x7ff, 0x81, 0x8, 0x4, 0x808, 0x0, 0x2, 0xe, 0x2, 0x5, 0x7, 0xaf, 0x4007, 0x1, 0x9, 0x8001, 0x8441, 0x8b, 0x5, 0x6, 0x7fff, 0x4000000c, 0x1, 0x0, 0x7, 0x2, 0x800, 0x1, 0x3, 0x3b9, 0x6, 0x4, 0x6, 0x487d, 0x20000, 0x4001, 0x8, 0x3, 0x100, 0x1400005, 0xc, 0x10, 0xfffffffe, 0x1200007, 0x20000009, 0xc, 0x7, 0x43, 0x40009, 0x3ce, 0xffff8000, 0xa, 0xb, 0x1, 0x2, 0x7, 0xd, 0x0, 0x820, 0x2, 0x0, 0x10bc41, 0x3, 0x809, 0xc95f, 0x100, 0xff]}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1c0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x200000d0}, 0x810) r5 = syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x1a1281) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r7, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0xc0002000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x10) write$nbd(r10, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x4c) ioctl$USBDEVFS_FREE_STREAMS(r11, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r7, r8, 0x0, 0x0, 0x4}) close(r6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000540)={0x5, 0x1, "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"}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 5.512527075s ago: executing program 0 (id=33): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x4081ff) 3.267864036s ago: executing program 0 (id=56): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 3.175580889s ago: executing program 0 (id=47): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19, 0x44}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69, 0x32}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ppoll(&(0x7f0000000140)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) 2.2166928s ago: executing program 3 (id=59): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xb, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="d95839027eb32eb1c65b6d", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6dcf762ebe2720c2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8001) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.045154325s ago: executing program 3 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x88, 0xfffffffa, 0x0, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0x8000a3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0x101, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0xd831fc23, 0x81, 0x8, 0x6, 0xffff, 0x5b}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7ffb, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x5, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1836, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x80000008, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0xa, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x400001ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x5}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0x4, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x6}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x7, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x0, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x1, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x9}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.870671631s ago: executing program 3 (id=61): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x3, 0x84, 0x9ad, 'syz1\x00', 0x7}, 0x0, [0x1, 0xe8af, 0x5, 0x800cc0, 0xe, 0x5, 0x11, 0xa6da, 0x2, 0x1, 0x2, 0x5, 0x80000b, 0xfffffff7, 0x8, 0x6, 0x7, 0xfffffff1, 0x40f, 0x80, 0x962, 0x7, 0x3, 0x3, 0x7fffffff, 0x9c, 0x3ff, 0xb861, 0x1, 0x5, 0x8, 0x5, 0x7, 0x9, 0x7434, 0xf7ffdebe, 0x15, 0x8609, 0x81, 0x3, 0x5, 0x5, 0x8081, 0xb, 0x80009, 0x1, 0x1, 0x0, 0xffff1684, 0x105, 0x0, 0x84, 0x1000, 0xe96, 0x4, 0x7ff, 0x7, 0x6, 0x1, 0x4, 0x6, 0x7ff, 0x81, 0x8, 0x4, 0x808, 0x0, 0x2, 0xe, 0x2, 0x5, 0x7, 0xaf, 0x4007, 0x1, 0x9, 0x8001, 0x8441, 0x8b, 0x5, 0x6, 0x7fff, 0x4000000c, 0x1, 0x0, 0x7, 0x2, 0x800, 0x1, 0x3, 0x3b9, 0x6, 0x4, 0x6, 0x487d, 0x20000, 0x4001, 0x8, 0x3, 0x100, 0x1400005, 0xc, 0x10, 0xfffffffe, 0x1200007, 0x20000009, 0xc, 0x7, 0x43, 0x40009, 0x3ce, 0xffff8000, 0xa, 0xb, 0x1, 0x2, 0x7, 0xd, 0x0, 0x820, 0x2, 0x0, 0x10bc41, 0x3, 0x809, 0xc95f, 0x100, 0xff]}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1c0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x200000d0}, 0x810) syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x1a1281) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r6}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0xc0002000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x10) write$nbd(r8, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x4c) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1.793326443s ago: executing program 3 (id=62): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) 1.732020795s ago: executing program 2 (id=63): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"}) r1 = syz_open_pts(r0, 0x8182) dup3(r1, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.697872056s ago: executing program 3 (id=64): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.551983411s ago: executing program 3 (id=66): r0 = syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 991.778218ms ago: executing program 2 (id=72): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afa04000000000000000000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0xfffffffffffffffc, 0x31]}}) 764.057186ms ago: executing program 4 (id=75): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x10191, 0x0, 0x1, 0xdd9f83, 0x7, 0x2f, 0x10f1, 0x1, 0x9, 0x7, 0x5, 0x7, 0x81, 0x27, 0x36, {0x2000002, 0x67d8e84b}, 0x3, 0x4}}) 763.875886ms ago: executing program 1 (id=76): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x100, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1a, 0x13, r4, 0x0) 738.609297ms ago: executing program 2 (id=77): r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x10, 0x0, 0x2, 0xe98c}}], 0x10}}], 0x1, 0x4000810) 690.475018ms ago: executing program 4 (id=78): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 543.662053ms ago: executing program 2 (id=79): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {0xff}, 0x0, 0xfc}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1}, {0x4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2e4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 543.534593ms ago: executing program 4 (id=80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = dup2(r0, r1) close_range(r2, 0xffffffffffffffff, 0x0) 535.539763ms ago: executing program 1 (id=81): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x60000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) 439.991526ms ago: executing program 2 (id=82): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000480)={0x1, 0x8004, 0x0, 0x0, 0x1}) 402.551867ms ago: executing program 1 (id=83): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000640)="dbca", 0x2}], 0x1}}], 0x1, 0x8000) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f00000006c0)='1', 0x1}], 0x1}}], 0x1, 0x4) 401.661577ms ago: executing program 4 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x88, 0xfffffffa, 0x0, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0x8000a3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0x101, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0xd831fc23, 0x81, 0x8, 0x6, 0xffff, 0x5b}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7ffb, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x5, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1836, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x80000008, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0xa, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x400001ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x5}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0x4, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x6}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x7, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x0, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x1, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x9}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 260.043092ms ago: executing program 1 (id=85): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 259.782812ms ago: executing program 2 (id=86): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = semget(0x3, 0x4, 0x404) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f00000000c0)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4040) syz_open_dev$video(0x0, 0x1d24, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c0001000000000000009bdeffafde2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r8, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SYNC_IOC_FILE_INFO(r9, 0x40103e05, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) unshare(0xc040480) r11 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) timerfd_create(0x6, 0xdb45c74533b9965f) mq_timedreceive(r11, &(0x7f00000001c0)=""/105, 0x69, 0x1, &(0x7f0000000240)) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 217.816223ms ago: executing program 1 (id=87): r0 = openat$autofs(0xffffff9c, &(0x7f00000002c0), 0x200000, 0x0) unshare(0x0) openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000440)=0x80000000, 0x3) r1 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = socket(0x2b, 0x1, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x1}}) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000580)={0x11, 0x2, 0x2, 0x3, 0x0, [@mcast2]}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0xfffffffd}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x10) write$apparmor_current(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) 157.804475ms ago: executing program 1 (id=88): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r1, &(0x7f0000000000)='\"', 0xfdef) 134.313946ms ago: executing program 4 (id=89): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={0x28, r0, 0x1, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x40}}}}}, 0x28}}, 0x10) 0s ago: executing program 4 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7f, 0x5, 0x6, 0x2, 0x7, 0x400, 0x3, 0x10}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r4, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 28.814088][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.823697][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. syzkaller login: [ 46.395429][ T4176] cgroup: Unknown subsys name 'net' [ 46.536841][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.744145][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.052737][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 49.135483][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 49.177574][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 49.190535][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 49.208472][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.215898][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.224394][ T4203] device bridge_slave_0 entered promiscuous mode [ 49.258869][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.266764][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.274686][ T4203] device bridge_slave_1 entered promiscuous mode [ 49.313582][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 49.350696][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.367902][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.385053][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.392747][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.400467][ T4191] device bridge_slave_0 entered promiscuous mode [ 49.421258][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.428394][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.436638][ T4189] device bridge_slave_0 entered promiscuous mode [ 49.459638][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.466934][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.475312][ T4191] device bridge_slave_1 entered promiscuous mode [ 49.493477][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.500558][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.508467][ T4189] device bridge_slave_1 entered promiscuous mode [ 49.516291][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.523588][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.531563][ T4192] device bridge_slave_0 entered promiscuous mode [ 49.544019][ T4203] team0: Port device team_slave_0 added [ 49.561347][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.568571][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.576990][ T4192] device bridge_slave_1 entered promiscuous mode [ 49.587806][ T4203] team0: Port device team_slave_1 added [ 49.595696][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.606961][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.627277][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.658940][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.676037][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.696530][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.703596][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.729737][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.747388][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.755201][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.781325][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.800226][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.809667][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.816883][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.824651][ T4190] device bridge_slave_0 entered promiscuous mode [ 49.832650][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.839862][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.847898][ T4190] device bridge_slave_1 entered promiscuous mode [ 49.857653][ T4191] team0: Port device team_slave_0 added [ 49.874750][ T4189] team0: Port device team_slave_0 added [ 49.893369][ T4191] team0: Port device team_slave_1 added [ 49.907977][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.919102][ T4189] team0: Port device team_slave_1 added [ 49.956148][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.967730][ T4192] team0: Port device team_slave_0 added [ 49.980868][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.987969][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.014184][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.031264][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.038365][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.064656][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.082639][ T4192] team0: Port device team_slave_1 added [ 50.095651][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.102771][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.135630][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.156533][ T4203] device hsr_slave_0 entered promiscuous mode [ 50.164027][ T4203] device hsr_slave_1 entered promiscuous mode [ 50.175933][ T4190] team0: Port device team_slave_0 added [ 50.187512][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.194601][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.221317][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.245112][ T4190] team0: Port device team_slave_1 added [ 50.287245][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.294487][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.320647][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.332775][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.339733][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.365964][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.384614][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.391736][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.417905][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.445300][ T4189] device hsr_slave_0 entered promiscuous mode [ 50.452501][ T4189] device hsr_slave_1 entered promiscuous mode [ 50.458991][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.467165][ T4189] Cannot create hsr debugfs directory [ 50.479936][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.487668][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.513873][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.528598][ T4191] device hsr_slave_0 entered promiscuous mode [ 50.536294][ T4191] device hsr_slave_1 entered promiscuous mode [ 50.543117][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.550686][ T4191] Cannot create hsr debugfs directory [ 50.604637][ T4192] device hsr_slave_0 entered promiscuous mode [ 50.611364][ T4192] device hsr_slave_1 entered promiscuous mode [ 50.618295][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.626488][ T4192] Cannot create hsr debugfs directory [ 50.660047][ T4190] device hsr_slave_0 entered promiscuous mode [ 50.666842][ T4190] device hsr_slave_1 entered promiscuous mode [ 50.673756][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.681341][ T4190] Cannot create hsr debugfs directory [ 50.762735][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 50.842235][ T4178] Bluetooth: hci4: command 0x0409 tx timeout [ 50.842286][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 50.861914][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 50.868056][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 50.950879][ T4203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.962530][ T4203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.975389][ T4203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.988832][ T4203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.023502][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.033639][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.049472][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.064037][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.111106][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.120867][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.130059][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.153681][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.232932][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.245299][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.267144][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.283775][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.300059][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.309172][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.317653][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.328325][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.340567][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.347862][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.356724][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.366565][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.384279][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.399912][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.409026][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.420969][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.428103][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.455719][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.468851][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.480615][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.489764][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.499333][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.519747][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.534171][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.544247][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.555437][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.565461][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.574575][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.584274][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.593539][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.601867][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.609543][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.618022][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.627070][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.638182][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.658024][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.667971][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.676927][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.685807][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.694660][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.701783][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.710788][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.720177][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.728797][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.735889][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.744358][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.761001][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.799061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.810024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.821795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.830378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.840273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.851524][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.870530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.897551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.906161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.938236][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.946914][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.956960][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.966394][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.975127][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.989128][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.005889][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.015296][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.029031][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.036165][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.063677][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.098970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.109308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.124487][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.131641][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.140772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.152915][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.163692][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.183207][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.196432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.210592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.223681][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.233454][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.244460][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.253125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.260662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.275287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.284145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.295098][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.312836][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.324310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.334577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.343313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.351296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.359242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.368240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.376766][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.383836][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.393123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.404566][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.430874][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.440326][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.450682][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.457843][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.465893][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.475849][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.484638][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.491759][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.499361][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.508086][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.517967][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.526973][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.536096][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.545342][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.555498][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.562619][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.570333][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.579818][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.589897][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.605579][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.619142][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.643064][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.657538][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.667204][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.676317][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.685496][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.694141][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.703614][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.712633][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.721142][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.729622][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.738133][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.746725][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.756522][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.765785][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.774477][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.783280][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.794130][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.802579][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.810420][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.826225][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.834866][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.842350][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 52.849681][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.885556][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.906894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.922817][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 52.929037][ T4243] Bluetooth: hci2: command 0x041b tx timeout [ 52.936352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.949404][ T4243] Bluetooth: hci1: command 0x041b tx timeout [ 52.971768][ T4243] Bluetooth: hci4: command 0x041b tx timeout [ 52.978465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.993561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.026678][ T4189] device veth0_vlan entered promiscuous mode [ 53.047128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.067437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.090403][ T4189] device veth1_vlan entered promiscuous mode [ 53.114212][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.137862][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.157170][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.203678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.213940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.227595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.254279][ T4189] device veth0_macvtap entered promiscuous mode [ 53.266551][ T4189] device veth1_macvtap entered promiscuous mode [ 53.282353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.290370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.298338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.307300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.316079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.325101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.333035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.341010][ T4203] device veth0_vlan entered promiscuous mode [ 53.365832][ T4203] device veth1_vlan entered promiscuous mode [ 53.375841][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.383622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.392137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.399581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.408202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.416665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.428559][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.458360][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.475849][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.487862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.498351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.511566][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.532103][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.540998][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.550537][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.560272][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.570674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.579796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.618881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.627895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.637169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.648592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.683045][ T4203] device veth0_macvtap entered promiscuous mode [ 53.690202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.698882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.708640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.717482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.726536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.735504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.745524][ T4190] device veth0_vlan entered promiscuous mode [ 53.758070][ T4190] device veth1_vlan entered promiscuous mode [ 53.766272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.774370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.782169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.790140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.814622][ T4203] device veth1_macvtap entered promiscuous mode [ 53.828474][ T4192] device veth0_vlan entered promiscuous mode [ 53.837735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.847091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.855414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.864026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.872995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.881241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.890739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.898790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.908507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.935348][ T4191] device veth0_vlan entered promiscuous mode [ 53.949543][ T4192] device veth1_vlan entered promiscuous mode [ 53.961254][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.973167][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.985234][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.018042][ T4192] device veth0_macvtap entered promiscuous mode [ 54.028560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.037348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.045922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.054857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.064476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.073408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.082704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.091354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.105726][ T4191] device veth1_vlan entered promiscuous mode [ 54.119654][ T3113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.124191][ T4192] device veth1_macvtap entered promiscuous mode [ 54.137841][ T3113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.153659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.162754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.170445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.178716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.190361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.207050][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.218007][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.228917][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.239741][ T4203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.248842][ T4203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.257854][ T4203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.266856][ T4203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.281216][ T4190] device veth0_macvtap entered promiscuous mode [ 54.304274][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.314856][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.325588][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.336309][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.347456][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.360314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.368878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.379568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.388994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.397850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.414231][ T4190] device veth1_macvtap entered promiscuous mode [ 54.426337][ T3113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.432659][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.434627][ T3113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.446227][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.463755][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.475480][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.486681][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.499500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.507418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.516021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.556350][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.575010][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.589341][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.608471][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.618612][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.629730][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.641354][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.651183][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.660938][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.669773][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.678610][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.696951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.708227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.718921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.742271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.766123][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.778209][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.790474][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.801151][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.811363][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.824064][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.835557][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.855027][ T4191] device veth0_macvtap entered promiscuous mode [ 54.863942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.873871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.882747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.906878][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.926269][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.932024][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 54.936898][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.951039][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.978624][ T4191] device veth1_macvtap entered promiscuous mode [ 55.002877][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 55.009322][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 55.019864][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 55.029580][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 55.202855][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.244721][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.262314][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.277713][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.287996][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.298745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.306945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.332923][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.343901][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.354748][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.366443][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.377012][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.388170][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.399316][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.410699][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.422410][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.439937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.448583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.461030][ T3113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.470264][ T3113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.487650][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.499646][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.509678][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.521012][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.531131][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.541981][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.552089][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.564708][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.576332][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.587086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.595870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.605270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.638515][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.639996][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.661284][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.669612][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.678734][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.687978][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.705237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.726265][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.765212][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.789477][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.811228][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.820781][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.835983][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.899997][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.915221][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.926669][ T4276] device syzkaller0 entered promiscuous mode [ 55.935765][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.966727][ T4276] tc action pedit offset 136 out of bounds [ 55.974261][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.989666][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.017255][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.153737][ T26] audit: type=1804 audit(1780211637.060:2): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3" name="/newroot/0/file1" dev="fuse" ino=1 res=1 errno=0 [ 56.177533][ T26] audit: type=1800 audit(1780211637.060:3): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="/" dev="fuse" ino=1 res=0 errno=0 [ 56.203665][ T4286] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 56.214935][ T4285] loop5: detected capacity change from 0 to 7 [ 56.239493][ T4285] Dev loop5: unable to read RDB block 7 [ 56.247630][ T4285] loop5: AHDI p1 p2 p3 [ 56.254677][ T4285] loop5: partition table partially beyond EOD, truncated [ 56.269327][ T4285] loop5: p1 size 1986618213 extends beyond EOD, truncated [ 56.295865][ T4285] loop5: p2 start 1702059890 is beyond EOD, truncated [ 56.581890][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 56.831735][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 56.962486][ T13] usb 4-1: config index 0 descriptor too short (expected 11698, got 36) [ 56.971135][ T13] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 57.004356][ T13] usb 4-1: config 0 has no interfaces? [ 57.012954][ T4243] Bluetooth: hci3: command 0x0419 tx timeout [ 57.082557][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 57.092653][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 57.112632][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 57.118734][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 57.121497][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.165292][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 57.188637][ T13] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 57.217535][ T13] usb 4-1: Product: syz [ 57.229675][ T13] usb 4-1: Manufacturer: syz [ 57.236904][ T4302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12'. [ 57.246520][ T13] usb 4-1: SerialNumber: syz [ 57.272011][ T13] usb 4-1: config 0 descriptor?? [ 57.635828][ T13] usb 4-1: USB disconnect, device number 2 [ 58.015204][ C0] sd 0:0:1:0: tag#6916 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 58.025254][ C0] sd 0:0:1:0: tag#6916 CDB: opcode=0xd9 (vendor) [ 58.031662][ C0] sd 0:0:1:0: tag#6916 CDB[00]: d9 58 39 02 7e b3 2e b1 c6 5b ff 0f f7 02 bf fe [ 58.040720][ C0] sd 0:0:1:0: tag#6916 CDB[10]: ba 43 e3 8e 69 de 94 dc 73 9a 87 54 fc c2 b5 26 [ 58.049833][ C0] sd 0:0:1:0: tag#6916 CDB[20]: c1 2c 96 0b 8d 45 db fd 5d 4d c7 [ 58.091639][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 58.121620][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 58.165281][ T4331] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 58.300938][ T4331] team0: Port device netdevsim0 added [ 58.471961][ T4340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'. [ 59.772726][ T26] audit: type=1804 audit(1780211640.680:4): pid=4371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.34" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 59.830022][ T26] audit: type=1800 audit(1780211640.680:5): pid=4371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.34" name="/" dev="fuse" ino=1 res=0 errno=0 [ 59.906164][ T4377] loop5: detected capacity change from 0 to 7 [ 59.924858][ T4181] Dev loop5: unable to read RDB block 7 [ 59.930667][ T4181] loop5: AHDI p1 p2 p3 [ 59.936512][ T4181] loop5: partition table partially beyond EOD, truncated [ 59.944478][ T4181] loop5: p1 size 1986618213 extends beyond EOD, truncated [ 59.953296][ T4181] loop5: p2 start 1702059890 is beyond EOD, truncated [ 59.976747][ T4377] Dev loop5: unable to read RDB block 7 [ 60.001841][ T4377] loop5: AHDI p1 p2 p3 [ 60.006234][ T4377] loop5: partition table partially beyond EOD, truncated [ 60.014278][ T4377] loop5: p1 size 1986618213 extends beyond EOD, truncated [ 60.025191][ T4377] loop5: p2 start 1702059890 is beyond EOD, truncated [ 60.241813][ T4178] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.532089][ T4178] usb 2-1: Using ep0 maxpacket: 32 [ 60.612370][ T4195] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.681986][ T4178] usb 2-1: config index 0 descriptor too short (expected 11698, got 36) [ 60.690719][ T4178] usb 2-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 60.701183][ T4178] usb 2-1: config 0 has no interfaces? [ 60.931813][ T4178] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 60.941077][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 60.951969][ T4178] usb 2-1: Product: syz [ 60.956152][ T4178] usb 2-1: Manufacturer: syz [ 60.960756][ T4178] usb 2-1: SerialNumber: syz [ 60.967817][ T4178] usb 2-1: config 0 descriptor?? [ 61.022534][ T4195] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 61.033215][ T4195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.043114][ T4195] usb 5-1: config 0 descriptor?? [ 61.263798][ T4178] usb 2-1: USB disconnect, device number 2 [ 62.025979][ T4419] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.442066][ T4195] usb 5-1: Cannot set autoneg [ 62.448635][ T4195] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 62.517628][ T4425] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 62.542661][ T4425] device batadv_slave_1 entered promiscuous mode [ 62.831882][ T4428] device batadv_slave_1 left promiscuous mode [ 62.905881][ T26] audit: type=1804 audit(1780211643.810:6): pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.57" name="/newroot/10/file1" dev="fuse" ino=1 res=1 errno=0 [ 62.927045][ T26] audit: type=1800 audit(1780211643.810:7): pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.57" name="/" dev="fuse" ino=1 res=0 errno=0 [ 63.090761][ T4441] device syzkaller0 entered promiscuous mode [ 63.425359][ T4452] mmap: syz.3.64 (4452) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 63.812496][ T4234] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 63.980355][ T4466] device syzkaller0 entered promiscuous mode [ 64.066450][ T4468] loop5: detected capacity change from 0 to 6 [ 64.096467][ T4181] Dev loop5: unable to read RDB block 6 [ 64.104206][ T4181] loop5: AHDI p1 p2 [ 64.112505][ T4181] loop5: partition table partially beyond EOD, truncated [ 64.145899][ T4181] loop5: p1 start 1702059890 is beyond EOD, truncated [ 64.163474][ T4468] Dev loop5: unable to read RDB block 6 [ 64.179725][ T4468] loop5: AHDI p1 p2 [ 64.183892][ T4234] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 64.196824][ T4468] loop5: partition table partially beyond EOD, truncated [ 64.205046][ T4234] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 64.212247][ T4468] loop5: p1 start 1702059890 is beyond EOD, truncated [ 64.229268][ T4234] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 64.287537][ T13] usb 5-1: USB disconnect, device number 2 [ 64.421990][ T4234] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 64.449560][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.478917][ T4234] usb 4-1: Product: syz [ 64.484227][ T4234] usb 4-1: Manufacturer: syz [ 64.489192][ T4234] usb 4-1: SerialNumber: syz [ 64.519841][ T26] audit: type=1804 audit(1780211645.420:8): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.76" name="/newroot/19/file1" dev="fuse" ino=1 res=1 errno=0 [ 64.544928][ T4456] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 64.584303][ T4234] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 64.602427][ T26] audit: type=1800 audit(1780211645.420:9): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.76" name="/" dev="fuse" ino=1 res=0 errno=0 [ 64.607730][ T4234] imon 4-1:155.0: unable to initialize intf0, err -19 [ 64.656004][ T4234] imon:imon_probe: failed to initialize context! [ 64.697562][ T4234] imon 4-1:155.0: unable to register, err -19 [ 64.765376][ T4493] device syzkaller0 entered promiscuous mode [ 65.101225][ T4507] device syzkaller0 entered promiscuous mode [ 65.136329][ T4507] [ 65.138908][ T4507] ============================= [ 65.143822][ T4507] WARNING: suspicious RCU usage [ 65.148703][ T4507] syzkaller #0 Not tainted [ 65.153166][ T4507] ----------------------------- [ 65.158022][ T4507] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 65.166370][ T4507] [ 65.166370][ T4507] other info that might help us debug this: [ 65.166370][ T4507] [ 65.176659][ T4507] [ 65.176659][ T4507] rcu_scheduler_active = 2, debug_locks = 1 [ 65.184810][ T4507] 3 locks held by syz.4.90/4507: [ 65.189790][ T4507] #0: ffffffff8c31f380 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 65.199400][ T4507] #1: ffff88807d6c8108 (&sch->q.lock){+...}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 65.209000][ T4507] #2: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 65.218336][ T4507] [ 65.218336][ T4507] stack backtrace: [ 65.224248][ T4507] CPU: 1 PID: 4507 Comm: syz.4.90 Not tainted syzkaller #0 [ 65.231431][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 65.241478][ T4507] Call Trace: [ 65.244747][ T4507] [ 65.247663][ T4507] dump_stack_lvl+0x188/0x250 [ 65.252328][ T4507] ? show_regs_print_info+0x20/0x20 [ 65.257534][ T4507] ? lockdep_rcu_suspicious+0x110/0x180 [ 65.263075][ T4507] qdisc_lookup+0xa6/0x650 [ 65.267507][ T4507] qdisc_tree_reduce_backlog+0x190/0x430 [ 65.273131][ T4507] cake_enqueue+0x3fc5/0x7fc0 [ 65.277817][ T4507] ? INET_ECN_set_ce+0x950/0x950 [ 65.282740][ T4507] ? __skb_flow_dissect+0x59d3/0x60b0 [ 65.288121][ T4507] ? mark_lock+0x94/0x320 [ 65.292441][ T4507] ? __lock_acquire+0x13bc/0x7d10 [ 65.297479][ T4507] ? __siphash_unaligned+0x258/0x3a0 [ 65.302772][ T4507] ? skb_get_hash_perturb+0xb7/0x120 [ 65.308085][ T4507] sfb_enqueue+0xa05/0x1750 [ 65.312589][ T4507] ? clsact_bind_filter+0x30/0x30 [ 65.317605][ T4507] ? do_raw_spin_lock+0x128/0x2f0 [ 65.322629][ T4507] ? __rwlock_init+0x140/0x140 [ 65.327428][ T4507] ? __alloc_skb+0x473/0x750 [ 65.332015][ T4507] dev_qdisc_enqueue+0x48/0x210 [ 65.336880][ T4507] __dev_queue_xmit+0xc25/0x2f80 [ 65.341825][ T4507] ? dev_queue_xmit+0x20/0x20 [ 65.346491][ T4507] ? packet_parse_headers+0x833/0xa90 [ 65.351867][ T4507] ? __virt_addr_valid+0x3c6/0x470 [ 65.357009][ T4507] ? __phys_addr_symbol+0x2b/0x70 [ 65.362110][ T4507] ? __check_object_size+0x30c/0x410 [ 65.367387][ T4507] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 65.372926][ T4507] ? skb_copy_datagram_from_iter+0x5ab/0x6a0 [ 65.378897][ T4507] ? skb_put+0x117/0x210 [ 65.383127][ T4507] packet_sendmsg+0x3dba/0x5060 [ 65.387980][ T4507] ? __might_sleep+0xf0/0xf0 [ 65.392563][ T4507] ? aa_sk_perm+0x7dc/0x910 [ 65.397055][ T4507] ? packet_getsockopt+0x9a0/0x9a0 [ 65.402159][ T4507] ? aa_sock_msg_perm+0x94/0x150 [ 65.407079][ T4507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 65.412463][ T4507] ? security_socket_sendmsg+0x7c/0xa0 [ 65.417916][ T4507] ? packet_getsockopt+0x9a0/0x9a0 [ 65.423017][ T4507] ____sys_sendmsg+0x5b7/0x8f0 [ 65.427777][ T4507] ? __sys_sendmsg_sock+0x30/0x30 [ 65.432793][ T4507] ? import_iovec+0x6f/0xa0 [ 65.437287][ T4507] ___sys_sendmsg+0x236/0x2e0 [ 65.441954][ T4507] ? __sys_sendmsg+0x2a0/0x2a0 [ 65.446740][ T4507] __se_sys_sendmsg+0x1af/0x290 [ 65.451581][ T4507] ? __x64_sys_sendmsg+0x80/0x80 [ 65.456518][ T4507] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 65.462508][ T4507] ? lockdep_hardirqs_on+0x94/0x140 [ 65.467707][ T4507] do_syscall_64+0x4c/0xa0 [ 65.472106][ T4507] ? clear_bhb_loop+0x30/0x80 [ 65.476852][ T4507] ? clear_bhb_loop+0x30/0x80 [ 65.481511][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.487399][ T4507] RIP: 0033:0x7fbc7bfdae59 [ 65.491797][ T4507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.511389][ T4507] RSP: 002b:00007fbc7a234028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.519787][ T4507] RAX: ffffffffffffffda RBX: 00007fbc7c253fa0 RCX: 00007fbc7bfdae59 [ 65.527758][ T4507] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 65.535729][ T4507] RBP: 00007fbc7c070d6f R08: 0000000000000000 R09: 0000000000000000 [ 65.543702][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.551662][ T4507] R13: 00007fbc7c254038 R14: 00007fbc7c253fa0 R15: 00007ffc84d62d28 [ 65.559643][ T4507] [ 65.562700][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.331650][ T4243] usb 4-1: USB disconnect, device number 3 [ 71.416004][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.422570][ T1421] ieee802154 phy1 wpan1: encryption failed: -22