last executing test programs: 13.837241276s ago: executing program 3 (id=186): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r6, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x54}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r8, r7, 0x0, 0x40008) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 9.810057833s ago: executing program 3 (id=201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0xd, 0x7, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20008000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) 7.615741579s ago: executing program 3 (id=203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0xf, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x5}]}]}}, &(0x7f0000001f40)=""/4089, 0x32, 0xff9, 0xa}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) 6.460831873s ago: executing program 3 (id=206): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r4, 0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000200)=0xfffffffe) 6.28159215s ago: executing program 1 (id=207): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa"], 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000d0}, 0x5) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x19c1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.165622832s ago: executing program 2 (id=209): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.957662582s ago: executing program 1 (id=211): r0 = socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x92800, &(0x7f0000000200)={[{@uuid_null}], [{@dont_hash}, {@permit_directio}, {@flag='mand'}, {@euid_gt={'euid>', r1}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'bpf\x00'}}, {@smackfshat={'smackfshat', 0x3d, '}%'}}, {@dont_hash}, {@appraise_type}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4040080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/218) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xb) r5 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, "427f4d05618664ecb7f952ed7667675bc32afc7ebbfea1deee1e2e520cc38c6a"}}) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) read(r7, 0x0, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.193456868s ago: executing program 2 (id=212): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private=0xa010101}, 0x10002, 0x1}}, 0x2e) getsockopt(r6, 0x111, 0x3, 0x0, &(0x7f0000000080)) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 5.131019444s ago: executing program 1 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0xd, 0x7, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20008000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) 4.8693315s ago: executing program 0 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x310, 0x20a, 0x278, 0x310, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1, 0x1}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0]}}, 0x0, 0x3d, 0x0, 0x6}, 0x28) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) 3.217012413s ago: executing program 2 (id=217): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x1) fchdir(0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0x7, 0x0, 0x6f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x1]}) 2.781370296s ago: executing program 2 (id=219): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x7, 0x8}, 'port0\x00', 0x92, 0x80400, 0xc53, 0x8, 0x8, 0x5, 0x1, 0x0, 0x0, 0x9}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0xffffffffffffffd1, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 2.780869016s ago: executing program 3 (id=220): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(0x0, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000440)={'fscrypt:', @auto=[0x61, 0x33, 0x61, 0x63, 0x34, 0x37, 0x31, 0x63, 0x65, 0x39, 0x36, 0xcc499041b74aa537, 0x33, 0x30, 0x37, 0x33]}, 0x0, 0x0, 0xfffffffffffffffe) r6 = getegid() keyctl$chown(0x4, r5, 0xee01, r6) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/17) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r7 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x5, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20001]], '\x00', [{}, {}, {0x3, 0x4}, {0x0, 0x3}, {0x1000}, {0x0, 0x1000}, {0x200000}, {}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0xe}], '\x00', 0x401, 0x0, 0x0, 0x2}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="0407ff0cff"], 0x102) 2.73897273s ago: executing program 1 (id=221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) 2.661566558s ago: executing program 2 (id=223): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0xd6e3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fallocate(r0, 0x10, 0x3ffd, 0x8000) 1.932536659s ago: executing program 0 (id=224): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x800000000006}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r1, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r1, r1, 0x0) 1.838362779s ago: executing program 4 (id=225): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 1.793078913s ago: executing program 2 (id=226): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x1dddef000, 0x112000, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x2, 0xc9, @none, 0x0, 0xb, 0x1, 0x4, 0x6, 0x1}}}, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) pipe(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.792526173s ago: executing program 3 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000), &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 1.693385953s ago: executing program 0 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) close_range(r1, r0, 0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000340)='exthdr\x00', 0x0, 0xffffffffffffff9c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e00)=[{{&(0x7f00000001c0)=@ax25={{0x1d, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, 0x0}}], 0x1, 0x8084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5d5800200000000008003a80040007001400030074"], 0x3c}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1.693088673s ago: executing program 4 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) request_key(0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) clock_gettime(0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x10400, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, 0x0, 0x2) 1.273443734s ago: executing program 4 (id=230): mkdirat(0xffffffffffffff9c, 0x0, 0x1) r0 = socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf5b}) fcntl$lock(r3, 0x7, &(0x7f0000000240)={0x2, 0x0, 0x5, 0xffffffff}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x4004010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="110725bd7000fbdbc12504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x76}, 0x1, 0x0, 0x0, 0x105}, 0x4008) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xee, 0x2, 0x0, 0x8, 0x5, 0x9, 0x8, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x3}}, 0x18) shutdown(r7, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x188}, 0x1, 0x7}, 0x0) 1.172293384s ago: executing program 0 (id=231): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) 1.077369794s ago: executing program 4 (id=232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0xd, 0x7, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20008000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) 1.058749486s ago: executing program 1 (id=233): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x7, 0x8}, 'port0\x00', 0x92, 0x80400, 0xc53, 0x8, 0x8, 0x5, 0x1, 0x0, 0x0, 0x9}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0xffffffffffffffd1, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 958.611715ms ago: executing program 0 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) close_range(r1, r0, 0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000340)='exthdr\x00', 0x0, 0xffffffffffffff9c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e00)=[{{&(0x7f00000001c0)=@ax25={{0x1d, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, 0x0}}], 0x1, 0x8084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5d5800200000000008003a80040007001400030074"], 0x3c}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 844.856247ms ago: executing program 1 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 431.949477ms ago: executing program 4 (id=236): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 124.885568ms ago: executing program 4 (id=237): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0xd6e3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fallocate(r0, 0x10, 0x3ffd, 0x8000) 0s ago: executing program 0 (id=238): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 54.437786][ T4169] cgroup: Unknown subsys name 'net' [ 54.570323][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.965978][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.839825][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 57.891302][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 57.955510][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.962799][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.972379][ T4183] device bridge_slave_0 entered promiscuous mode [ 57.983809][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.990938][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.999072][ T4183] device bridge_slave_1 entered promiscuous mode [ 58.034303][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 58.081957][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.095517][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.134721][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 58.174534][ T4183] team0: Port device team_slave_0 added [ 58.190220][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.197652][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.208168][ T4182] device bridge_slave_0 entered promiscuous mode [ 58.220203][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.227646][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.235783][ T4182] device bridge_slave_1 entered promiscuous mode [ 58.244180][ T4183] team0: Port device team_slave_1 added [ 58.296611][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.303594][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.330091][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.344756][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 58.354258][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.362503][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.370425][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.388684][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.395766][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.421723][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.437075][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.444151][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.452509][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.465339][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.476851][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.552549][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.571017][ T4182] team0: Port device team_slave_0 added [ 58.581944][ T4182] team0: Port device team_slave_1 added [ 58.595518][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.604928][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.611992][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.619968][ T4187] device bridge_slave_0 entered promiscuous mode [ 58.631515][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.638867][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.647116][ T4187] device bridge_slave_1 entered promiscuous mode [ 58.664256][ T4183] device hsr_slave_0 entered promiscuous mode [ 58.671471][ T4183] device hsr_slave_1 entered promiscuous mode [ 58.716826][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.723814][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.750466][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.771997][ T4188] team0: Port device team_slave_0 added [ 58.793583][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.800885][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.827234][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.842760][ T4188] team0: Port device team_slave_1 added [ 58.848851][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.856622][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.864601][ T4194] device bridge_slave_0 entered promiscuous mode [ 58.873566][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.902377][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.913608][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.921754][ T4194] device bridge_slave_1 entered promiscuous mode [ 58.930185][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.991706][ T4182] device hsr_slave_0 entered promiscuous mode [ 58.998822][ T4182] device hsr_slave_1 entered promiscuous mode [ 59.005576][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.013310][ T4182] Cannot create hsr debugfs directory [ 59.019538][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.026731][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.052642][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.084538][ T4187] team0: Port device team_slave_0 added [ 59.091186][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.098994][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.125043][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.138064][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.153005][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.164649][ T4187] team0: Port device team_slave_1 added [ 59.232490][ T4194] team0: Port device team_slave_0 added [ 59.238849][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.246855][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.273222][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.307583][ T4194] team0: Port device team_slave_1 added [ 59.320707][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.328033][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.354231][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.374224][ T4188] device hsr_slave_0 entered promiscuous mode [ 59.381859][ T4188] device hsr_slave_1 entered promiscuous mode [ 59.388619][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.396613][ T4188] Cannot create hsr debugfs directory [ 59.470626][ T4187] device hsr_slave_0 entered promiscuous mode [ 59.477904][ T4187] device hsr_slave_1 entered promiscuous mode [ 59.484988][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.492552][ T4187] Cannot create hsr debugfs directory [ 59.498685][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.505769][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.531826][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.550989][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 59.554463][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 59.557646][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 59.569139][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 59.596538][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.603508][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.629581][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.640427][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 59.707730][ T4194] device hsr_slave_0 entered promiscuous mode [ 59.714702][ T4194] device hsr_slave_1 entered promiscuous mode [ 59.721300][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.729109][ T4194] Cannot create hsr debugfs directory [ 59.843606][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.862605][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.878646][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.907950][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.961453][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.971516][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.988267][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.997031][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.036930][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.047706][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.057079][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.071538][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.160138][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.174818][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.184278][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.198492][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.222824][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.263988][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.298470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.307979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.319614][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.332721][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.342598][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.351206][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.367637][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.378070][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.387331][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.397065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.405607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.414170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.423425][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.430643][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.455180][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.463025][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.472769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.481718][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.491059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.499761][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.506849][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.515441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.523942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.533188][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.540259][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.548735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.557430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.566573][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.573615][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.581580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.589841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.597603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.606256][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.616039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.645087][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.653571][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.663795][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.670933][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.679570][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.689619][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.698450][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.705546][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.713271][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.723153][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.731961][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.740716][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.781455][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.792452][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.806201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.816377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.826244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.835493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.844240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.852948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.863537][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.872634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.881274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.889913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.898565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.908605][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.917307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.925809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.934295][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.942761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.951703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.959661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.967670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.978072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.989775][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.043521][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.057483][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.083669][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.093791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.103341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.112892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.122202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.132184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.140920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.150046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.161688][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.173116][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.186336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.195258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.224154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.247026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.267558][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.288503][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.317147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.326751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.336211][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.343290][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.353097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.362128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.371619][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.378726][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.387152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.396833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.406056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.420432][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.428512][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.439146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.449245][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.459027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.481707][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.495941][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.503431][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.537185][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.545644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.554780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.576308][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.590660][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.606538][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.613965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.623882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.632262][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 61.638711][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 61.640849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.646261][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 61.659143][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 61.671215][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.680377][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.697722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.710364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.715573][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 61.721248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.738554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.747505][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.754633][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.762558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.775876][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.819825][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.836814][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.846228][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.853307][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.886236][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.906064][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.924968][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.934269][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.956940][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.970445][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.004660][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.021986][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.044948][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.053730][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.068507][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.077698][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.086248][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.094696][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.103026][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.111699][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.125775][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.133874][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.142141][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.150230][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.159006][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.167410][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.176029][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.184272][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.192684][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.206527][ T4182] device veth0_vlan entered promiscuous mode [ 62.213272][ T4183] device veth0_vlan entered promiscuous mode [ 62.226081][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.237503][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.251942][ T4182] device veth1_vlan entered promiscuous mode [ 62.276342][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.285145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.293868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.302943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.316694][ T4183] device veth1_vlan entered promiscuous mode [ 62.369877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.380164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.388395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.397208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.406219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.414434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.422755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.430881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.445928][ T4182] device veth0_macvtap entered promiscuous mode [ 62.460634][ T4188] device veth0_vlan entered promiscuous mode [ 62.475232][ T4183] device veth0_macvtap entered promiscuous mode [ 62.482460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.492371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.501678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.515986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.525189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.533983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.545112][ T4182] device veth1_macvtap entered promiscuous mode [ 62.557969][ T4183] device veth1_macvtap entered promiscuous mode [ 62.576602][ T4188] device veth1_vlan entered promiscuous mode [ 62.593752][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.610346][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.620211][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.630002][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.638593][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.646609][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.656275][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.665734][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.674203][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.712712][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.721824][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.731987][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.742625][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.757396][ T4187] device veth0_vlan entered promiscuous mode [ 62.765386][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.773947][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.782696][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.791697][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.800766][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.809751][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.817566][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.827989][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.841577][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.852843][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.875640][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.884298][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.893759][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.901575][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.911398][ T4188] device veth0_macvtap entered promiscuous mode [ 62.932808][ T4187] device veth1_vlan entered promiscuous mode [ 62.945457][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.966245][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.977133][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.990853][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.018639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.027671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.041822][ T4188] device veth1_macvtap entered promiscuous mode [ 63.062518][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.076992][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.092113][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.101044][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.110310][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.119260][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.159323][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.170136][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.180991][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.192440][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.205814][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.214944][ T4187] device veth0_macvtap entered promiscuous mode [ 63.222929][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.234889][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.244979][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.255892][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.267701][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.279085][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.288038][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.297411][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.307035][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.327286][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.336258][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.346737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.359162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.368637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.378104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.387050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.397961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.406959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.415968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.425332][ T4187] device veth1_macvtap entered promiscuous mode [ 63.477940][ T4194] device veth0_vlan entered promiscuous mode [ 63.491504][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.508605][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.519169][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.529680][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.539837][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.551166][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.563367][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.571485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.580481][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.589521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.598167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.607225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.619070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.628082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.648044][ T4194] device veth1_vlan entered promiscuous mode [ 63.673553][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.686172][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.696335][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.707832][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 63.713131][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.714044][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 63.724218][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.730213][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 63.746218][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.746790][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 63.761233][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.772261][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.789557][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.796336][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.806089][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 63.811425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.812195][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.821359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.840590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.849571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.858470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.869977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.880864][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.889712][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.899381][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.908402][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.932023][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.945814][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.964954][ T4194] device veth0_macvtap entered promiscuous mode [ 63.997766][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.999247][ T4194] device veth1_macvtap entered promiscuous mode [ 64.020239][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.063443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.079417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.090549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.108697][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.131154][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.141441][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.157331][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.167311][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.178163][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.188433][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.199139][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.212024][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.233198][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.233205][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.233251][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.257696][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.276076][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.303203][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.318607][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.324828][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.342417][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.361163][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.397979][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.413752][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.428890][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.439428][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.451405][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.475023][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.483540][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.498417][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.511588][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.539106][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.550024][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.586845][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.627479][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.654100][ T4294] 9pnet_virtio: no channels available for device syz [ 64.671255][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.681204][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.728843][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.756759][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.787374][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.814249][ T26] audit: type=1400 audit(1761150402.428:2): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A202020202030206B420A53686D656D506D644D61707065643A202020202020202030206B420A46696C65506D644D61707065643A20202020202020202030206B420A5368617265645F48756765746C623A202020202020202030206B420A507269766174655F48756765746C623A2020202020202030206B420A537761703A20202020202020202020202020202020202030206B420A53 pid=4293 comm="syz.4.5" [ 64.870030][ T4294] Zero length message leads to an empty skb [ 64.889459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.032816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.044976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.053990][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.062991][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.091601][ T4297] syz.0.1 (4297): /proc/4295/oom_adj is deprecated, please use /proc/4295/oom_score_adj instead. [ 65.135059][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.144465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.153481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.162624][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.237405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.624714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.919539][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 65.934548][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 65.940623][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 65.946894][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 65.952988][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 65.982866][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.063518][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.087003][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.110707][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.146560][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.376326][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.492975][ T4313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 67.796845][ T4322] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.894712][ T4325] input: syz1 as /devices/virtual/input/input5 [ 69.346138][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.805828][ T4346] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 70.100575][ T4327] syz.2.3 (4327) used greatest stack depth: 20392 bytes left [ 70.844518][ T2302] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.114551][ T2302] usb 3-1: Using ep0 maxpacket: 8 [ 71.202370][ T4358] netlink: 'syz.3.17': attribute type 13 has an invalid length. [ 71.235055][ T2302] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 71.256259][ T2302] usb 3-1: config 0 has no interface number 0 [ 71.272158][ T4358] netlink: 'syz.3.17': attribute type 17 has an invalid length. [ 71.312550][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.313680][ T2302] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 71.319224][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.411530][ T2302] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 71.448879][ T2302] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.468924][ T2302] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 71.480037][ T2302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.550754][ T2302] usb 3-1: config 0 descriptor?? [ 71.577632][ T4353] loop1: detected capacity change from 0 to 32768 [ 71.597508][ T2302] ldusb 3-1:0.55: Interrupt in endpoint not found [ 71.648842][ T4353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.15 (4353) [ 71.689753][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.712757][ T4358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.788372][ T4353] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 71.824449][ T4353] BTRFS info (device loop1): force clearing of disk cache [ 71.873002][ T4254] usb 3-1: USB disconnect, device number 2 [ 72.767174][ T4353] BTRFS info (device loop1): disabling tree log [ 72.773506][ T4353] BTRFS info (device loop1): enabling disk space caching [ 72.794399][ T4353] BTRFS info (device loop1): turning on async discard [ 72.804267][ T4353] BTRFS info (device loop1): enabling auto defrag [ 72.831196][ T4353] BTRFS info (device loop1): max_inline at 0 [ 72.840262][ T4353] BTRFS info (device loop1): disk space caching is enabled [ 72.847783][ T4353] BTRFS info (device loop1): has skinny extents [ 73.981146][ T4353] BTRFS error (device loop1): open_ctree failed: -12 [ 75.015763][ T4373] loop3: detected capacity change from 0 to 32768 [ 76.245166][ T4412] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 76.282272][ T4414] loop0: detected capacity change from 0 to 1024 [ 76.351363][ T4414] EXT4-fs (loop0): Ignoring removed orlov option [ 76.448910][ T4414] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 76.851251][ T4245] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.883220][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 77.624464][ T4245] usb 5-1: Using ep0 maxpacket: 8 [ 77.889056][ T4245] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 77.897793][ T4245] usb 5-1: config 0 has no interface number 0 [ 77.903945][ T4245] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 77.916303][ T4245] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 77.927265][ T4245] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.941099][ T4245] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 77.960720][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.283188][ T4458] loop2: detected capacity change from 0 to 128 [ 78.842400][ T4245] usb 5-1: config 0 descriptor?? [ 79.055661][ T4245] ldusb 5-1:0.55: Interrupt in endpoint not found [ 79.267362][ T4245] usb 5-1: USB disconnect, device number 2 [ 79.582609][ T4445] loop1: detected capacity change from 0 to 32768 [ 79.594336][ T4472] xt_TCPMSS: Only works on TCP SYN packets [ 79.788270][ T4445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.37 (4445) [ 80.355914][ T4445] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 80.383471][ T4445] BTRFS info (device loop1): force clearing of disk cache [ 80.391876][ T4445] BTRFS info (device loop1): disabling tree log [ 80.406078][ T4445] BTRFS info (device loop1): enabling disk space caching [ 80.413172][ T4445] BTRFS info (device loop1): turning on async discard [ 80.421609][ T4474] loop0: detected capacity change from 0 to 1024 [ 80.438245][ T4445] BTRFS info (device loop1): enabling auto defrag [ 80.480977][ T4445] BTRFS info (device loop1): max_inline at 0 [ 80.488116][ T4474] EXT4-fs (loop0): Ignoring removed orlov option [ 80.581367][ T4445] BTRFS info (device loop1): disk space caching is enabled [ 80.589564][ T4445] BTRFS info (device loop1): has skinny extents [ 80.714053][ T4474] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 80.961476][ T4463] loop3: detected capacity change from 0 to 32768 [ 80.984677][ T4463] ======================================================= [ 80.984677][ T4463] WARNING: The mand mount option has been deprecated and [ 80.984677][ T4463] and is ignored by this kernel. Remove the mand [ 80.984677][ T4463] option from the mount to silence this warning. [ 80.984677][ T4463] ======================================================= [ 81.072110][ T4463] XFS (loop3): Mounting V5 Filesystem [ 81.095849][ T4445] BTRFS error (device loop1): open_ctree failed: -12 [ 81.482921][ T4463] XFS (loop3): Ending clean mount [ 81.543740][ T4463] XFS (loop3): Quotacheck needed: Please wait. [ 81.552537][ T7] cfg80211: failed to load regulatory.db [ 81.714219][ T4463] XFS (loop3): Quotacheck: Done. [ 81.793986][ T26] audit: type=1800 audit(1761150419.408:3): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="bus" dev="loop3" ino=9290 res=0 errno=0 [ 83.770536][ T4187] XFS (loop3): Unmounting Filesystem [ 83.807664][ T4539] loop4: detected capacity change from 0 to 128 [ 84.630342][ T4546] xt_TCPMSS: Only works on TCP SYN packets [ 85.070396][ T4559] loop0: detected capacity change from 0 to 1024 [ 85.106676][ T4559] EXT4-fs (loop0): Ignoring removed orlov option [ 85.155301][ T4559] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 85.575207][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 85.631078][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 85.683783][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 85.759827][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 85.810903][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 85.858941][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.014778][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.132443][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.243774][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.264044][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.275047][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.283425][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.291494][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.299480][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.307241][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.319766][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.334401][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.342252][ T4231] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 86.364032][ T4231] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 86.392814][ T4195] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 87.437370][ T4581] fido_id[4581]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.028588][ T4596] xt_TCPMSS: Only works on TCP SYN packets [ 89.702234][ T4632] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.005220][ T4679] fuse: Bad value for 'fd' [ 93.082882][ T4681] loop1: detected capacity change from 0 to 16 [ 93.788702][ T4681] erofs: (device loop1): mounted with root inode @ nid 36. [ 95.306666][ T4705] xt_TCPMSS: Only works on TCP SYN packets [ 96.825064][ T4727] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 98.202933][ T4739] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 99.284580][ T4744] 9pnet_virtio: no channels available for device syz [ 99.964958][ T4742] sched: RT throttling activated [ 100.201646][ T4744] autofs4:pid:4744:autofs_fill_super: called with bogus options [ 101.550559][ T4762] xt_TCPMSS: Only works on TCP SYN packets [ 104.465617][ T4789] loop1: detected capacity change from 0 to 128 [ 105.756847][ T4803] 9pnet_virtio: no channels available for device syz [ 106.205910][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 106.288752][ T4820] 9pnet_virtio: no channels available for device syz [ 114.618861][ T4900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.161'. [ 115.885725][ T4926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.172'. [ 118.140939][ T4961] fuse: Unknown parameter 'fd0x0000000000000003' [ 119.423515][ T4976] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 120.944699][ T4982] 9pnet_virtio: no channels available for device syz [ 121.845147][ T4990] capability: warning: `syz.0.194' uses 32-bit capabilities (legacy support in use) [ 122.763308][ T5007] syz.2.199 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.205324][ T5014] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 128.658248][ T5048] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 129.479526][ T5061] xt_TCPMSS: Only works on TCP SYN packets [ 131.830393][ T5099] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 237.624262][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 237.630912][ C1] rcu: 1-...!: (10500 ticks this GP) idle=4ff/1/0x4000000000000000 softirq=9086/9086 fqs=0 [ 237.641907][ C1] (t=10502 jiffies g=10661 q=53) [ 237.646983][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g10661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 237.659302][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=5033 [ 237.667097][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g10661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 237.678454][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 237.688547][ C1] rcu: RCU grace-period kthread stack dump: [ 237.694449][ C1] task:rcu_preempt state:I stack:27848 pid: 15 ppid: 2 flags:0x00004000 [ 237.703680][ C1] Call Trace: [ 237.706968][ C1] [ 237.709907][ C1] __schedule+0x11bb/0x4390 [ 237.714533][ C1] ? release_firmware_map_entry+0x190/0x190 [ 237.720435][ C1] schedule+0x11b/0x1e0 [ 237.724592][ C1] schedule_timeout+0x15c/0x280 [ 237.729440][ C1] ? console_conditional_schedule+0x40/0x40 [ 237.735331][ C1] ? update_process_times+0x200/0x200 [ 237.740705][ C1] ? prepare_to_swait_event+0x331/0x350 [ 237.746252][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 237.751106][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 237.756302][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 237.760972][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 237.765732][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 237.770927][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 237.776121][ C1] rcu_gp_kthread+0x98/0x350 [ 237.780705][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 237.785817][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 237.791717][ C1] ? __kthread_parkme+0x157/0x1b0 [ 237.796760][ C1] kthread+0x436/0x520 [ 237.800851][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 237.806080][ C1] ? kthread_blkcg+0xd0/0xd0 [ 237.810671][ C1] ret_from_fork+0x1f/0x30 [ 237.815101][ C1] [ 237.818116][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 237.824441][ C1] Sending NMI from CPU 1 to CPUs 0: [ 237.829659][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 237.830681][ C1] NMI backtrace for cpu 1 [ 237.842880][ C1] CPU: 1 PID: 5086 Comm: syz.2.226 Not tainted syzkaller #0 [ 237.850157][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.860204][ C1] Call Trace: [ 237.863479][ C1] [ 237.866331][ C1] dump_stack_lvl+0x168/0x230 [ 237.871011][ C1] ? show_regs_print_info+0x20/0x20 [ 237.876209][ C1] ? load_image+0x3b0/0x3b0 [ 237.880711][ C1] ? try_to_wake_up+0x69d/0x1050 [ 237.885650][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 237.890587][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 237.896739][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 237.902189][ C1] ? _raw_spin_lock+0x40/0x40 [ 237.906857][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 237.912921][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 237.918899][ C1] rcu_dump_cpu_stacks+0x22f/0x380 [ 237.924025][ C1] print_cpu_stall+0x31d/0x5f0 [ 237.928797][ C1] rcu_sched_clock_irq+0x6d8/0x1110 [ 237.933997][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 237.938846][ C1] ? account_process_tick+0x227/0x3a0 [ 237.944219][ C1] update_process_times+0x193/0x200 [ 237.949431][ C1] tick_sched_timer+0x37d/0x560 [ 237.954292][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 237.959493][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 237.965040][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 237.970148][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 237.976215][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 237.981164][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 237.987139][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 237.992767][ C1] [ 237.995689][ C1] [ 237.998613][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 238.004599][ C1] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 238.010489][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 ef b7 c7 02 66 2e 0f 1f 84 00 00 00 00 00 [ 238.030099][ C1] RSP: 0018:ffffc900026afcd0 EFLAGS: 00000246 [ 238.036173][ C1] RAX: 00000000000000f6 RBX: ffffffff8bbc3a20 RCX: 000000000000083f [ 238.044142][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 238.052103][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172267af [ 238.060066][ C1] R10: ffffed10172267af R11: 1ffff110172267ae R12: ffff8880b9133b01 [ 238.068032][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 238.076011][ C1] arch_irq_work_raise+0x82/0xd0 [ 238.080949][ C1] irq_work_queue+0x95/0x140 [ 238.085538][ C1] bpf_send_signal_common+0x2b2/0x420 [ 238.090903][ C1] ? read_lock_is_recursive+0x10/0x10 [ 238.096275][ C1] ? rcu_lock_release+0x20/0x20 [ 238.101122][ C1] ? __context_tracking_exit+0x4c/0x80 [ 238.106577][ C1] bpf_send_signal+0x15/0x20 [ 238.111162][ C1] bpf_prog_8cc4ff36b5985b6a+0x15/0x38 [ 238.116612][ C1] bpf_trace_run2+0x15b/0x2d0 [ 238.121283][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 238.126125][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 238.132104][ C1] ? lock_chain_count+0x20/0x20 [ 238.136950][ C1] __bpf_trace_sys_enter+0x60/0x70 [ 238.142059][ C1] trace_sys_enter+0x65/0x80 [ 238.146651][ C1] syscall_trace_enter+0x115/0x180 [ 238.151758][ C1] do_syscall_64+0x24/0xa0 [ 238.156171][ C1] ? clear_bhb_loop+0x30/0x80 [ 238.160935][ C1] ? clear_bhb_loop+0x30/0x80 [ 238.165693][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 238.171579][ C1] RIP: 0033:0x7fd99e985099 [ 238.175991][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 238.195593][ C1] RSP: 002b:00007fd99cc4fb40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 238.204017][ C1] RAX: ffffffffffffffda RBX: 00007fd99ec3ffa8 RCX: 00007fd99e985099 [ 238.211981][ C1] RDX: 00007fd99cc4fb40 RSI: 00007fd99cc4fc70 RDI: 0000000000000021 [ 238.219949][ C1] RBP: 00007fd99ec3ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 238.227913][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 238.235903][ C1] R13: 00007fd99ec40038 R14: 00007ffd31f90d20 R15: 00007ffd31f90e08 [ 238.243895][ C1]