last executing test programs: 7.839875182s ago: executing program 1 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 7.764381018s ago: executing program 1 (id=383): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000004c0)='./bus\x00', 0xa04255, &(0x7f0000000ec0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRES32], 0xfd, 0x345, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) dup2(r3, r4) 6.720009391s ago: executing program 0 (id=387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.74068102s ago: executing program 0 (id=391): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 4.148094457s ago: executing program 4 (id=398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x11, &(0x7f0000000c40)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='f2fs_background_gc\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) r1 = getpid() sched_setparam(r1, &(0x7f00000003c0)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 4.103689961s ago: executing program 0 (id=399): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) getuid() mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) 2.990305131s ago: executing program 0 (id=402): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff00000000001851000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 2.879854129s ago: executing program 1 (id=403): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x20006}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r6}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x44) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='system.\'dev/sg#\x00'], &(0x7f0000000840)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0xc0b0) fcntl$dupfd(r8, 0x0, r8) 2.759134669s ago: executing program 0 (id=405): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, &(0x7f0000000a00)) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000080) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000a40)={0x2, 0x8000, 0x8, 0x4800}) timerfd_create(0x8, 0x0) 2.656033267s ago: executing program 4 (id=406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000000000000000000000ff02000000dd000000000000000000014f194e20001090"], 0x4a) 2.605704761s ago: executing program 2 (id=407): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) close(0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) close(0x3) 2.436658345s ago: executing program 2 (id=408): socket$netlink(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) 2.287883256s ago: executing program 2 (id=410): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2.106533951s ago: executing program 1 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 1.972770582s ago: executing program 3 (id=412): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) getuid() mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) 1.911981987s ago: executing program 4 (id=413): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 1.50102262s ago: executing program 2 (id=414): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.421001316s ago: executing program 4 (id=415): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff00000000001851000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 1.070678124s ago: executing program 0 (id=416): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0xb, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x0, 0xc, 0x5, &(0x7f0000000240)={0x80, "0f5dbf9b3c00000000c4f5f9c6974700510000000000000000000200"}}) 1.069756514s ago: executing program 1 (id=417): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x84}, 0x38) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='devlink_hwmsg\x00', r3}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000cb00", @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0xffffffffffffffda, 0x0, {{0x7ff, 0x3}}}, 0x28) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYBLOB="000000000000000000ff000000000000000020", @ANYRES32, @ANYBLOB="024000000500"/28], 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) syz_open_procfs(0x0, 0x0) 1.00218127s ago: executing program 2 (id=418): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 970.103842ms ago: executing program 4 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000000)) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x48c5) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000080)) sendmsg$nl_route(r3, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xfffffffc, 0x80000000, 0x1800000, 0x11cc, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000680)='syzkaller\x00', 0x1e86b4fb, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xf, 0x94d, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, r7], &(0x7f0000000900)=[{0x5, 0x3, 0xa, 0xd}], 0x10, 0x4}, 0x94) 961.370103ms ago: executing program 3 (id=420): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/206, 0xce}], 0x1, 0x9200, 0x1) 260.295959ms ago: executing program 2 (id=421): unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 259.593069ms ago: executing program 3 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x2) 179.909296ms ago: executing program 3 (id=423): creat(&(0x7f0000000100)='./file0\x00', 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000dc0)={0x1f, 0x1}, 0x7) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x5) 158.551167ms ago: executing program 1 (id=424): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 151.783328ms ago: executing program 3 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 119.598201ms ago: executing program 4 (id=426): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_clone3(&(0x7f0000000980)={0x10002000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f00000007c0), {0x26}, &(0x7f0000000800)=""/55, 0x37, &(0x7f0000000840)=""/249, &(0x7f0000000940)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x9}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x3, &(0x7f0000000a00)) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000080) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000a40)={0x2, 0x8000, 0x8, 0x4800}) timerfd_create(0x8, 0x0) 0s ago: executing program 3 (id=427): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x805, 0x10000, 0x0, 0x2, 0x3, 0x8, 0x7, 0x8, 0x100, 0x2, 0x1, 0x1db, 0x2, 0x6, 0x101, 0xfffffffd, 0x6, 0x3, 0x40000006, 0x2, 0x100002, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0x6]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 50.348079][ T4170] cgroup: Unknown subsys name 'net' [ 50.479478][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.687337][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.367847][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 53.422355][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 53.469906][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 53.562415][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.571394][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.578630][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.587468][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.596017][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.603120][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.611756][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.621533][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.628833][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.636674][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.650894][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.658206][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.666360][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.741940][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.752859][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.765384][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.785128][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.805411][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.812494][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.821136][ T4181] device bridge_slave_0 entered promiscuous mode [ 53.846045][ T4191] team0: Port device team_slave_0 added [ 53.858104][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 53.867372][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.874671][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.882580][ T4181] device bridge_slave_1 entered promiscuous mode [ 53.898612][ T4191] team0: Port device team_slave_1 added [ 53.927646][ T4182] team0: Port device team_slave_0 added [ 53.961140][ T4182] team0: Port device team_slave_1 added [ 53.973663][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.981395][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.989432][ T4187] device bridge_slave_0 entered promiscuous mode [ 54.002835][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.020884][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.028164][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.054220][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.066250][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.073413][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.082154][ T4187] device bridge_slave_1 entered promiscuous mode [ 54.100995][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.117265][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.124267][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.150208][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.177068][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.184608][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.211147][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.228062][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.239272][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.260085][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.267372][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.293827][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.324018][ T4181] team0: Port device team_slave_0 added [ 54.330006][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.338107][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.346884][ T4192] device bridge_slave_0 entered promiscuous mode [ 54.378864][ T4181] team0: Port device team_slave_1 added [ 54.392095][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.399640][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.407858][ T4192] device bridge_slave_1 entered promiscuous mode [ 54.423782][ T4187] team0: Port device team_slave_0 added [ 54.453674][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.460671][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.468926][ T4187] team0: Port device team_slave_1 added [ 54.483095][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.490049][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.496812][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.504703][ T4182] Cannot create hsr debugfs directory [ 54.520008][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.538221][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.545302][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.571419][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.598234][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.612853][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.620035][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.646558][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.664243][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.671289][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.697585][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.733175][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.741080][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.767159][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.788321][ T4192] team0: Port device team_slave_0 added [ 54.812370][ T4192] team0: Port device team_slave_1 added [ 54.829201][ T4181] device hsr_slave_0 entered promiscuous mode [ 54.835976][ T4181] device hsr_slave_1 entered promiscuous mode [ 54.842426][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.850207][ T4181] Cannot create hsr debugfs directory [ 54.902514][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.909693][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.935920][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.950956][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.958005][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.983922][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.013470][ T4187] device hsr_slave_0 entered promiscuous mode [ 55.020230][ T4187] device hsr_slave_1 entered promiscuous mode [ 55.026972][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.034842][ T4187] Cannot create hsr debugfs directory [ 55.122858][ T4192] device hsr_slave_0 entered promiscuous mode [ 55.130245][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 55.134246][ T2238] Bluetooth: hci3: command 0x0409 tx timeout [ 55.142935][ T2238] Bluetooth: hci2: command 0x0409 tx timeout [ 55.143359][ T4192] device hsr_slave_1 entered promiscuous mode [ 55.154434][ T2238] Bluetooth: hci1: command 0x0409 tx timeout [ 55.161156][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.168980][ T4192] Cannot create hsr debugfs directory [ 55.204037][ T4172] Bluetooth: hci4: command 0x0409 tx timeout [ 55.318261][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.342524][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.353572][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.364571][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.400276][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.418192][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.427681][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.438932][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.508758][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.533381][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.542873][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.576486][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.597781][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.612291][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.629354][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.640414][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.665515][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.697690][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.706995][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.736166][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.749076][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.760398][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.772068][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.783156][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.798333][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.814324][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.822897][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.832863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.841177][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.849649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.859109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.868544][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.875811][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.889339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.907651][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.927006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.935373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.943232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.952754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.961359][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.968547][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.979795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.989913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.998896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.008565][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.015675][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.045613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.053693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.062844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.072621][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.079718][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.087726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.099237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.108490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.119931][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.127045][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.136295][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.146375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.156258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.165086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.173490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.182283][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.190778][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.197861][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.206761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.215887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.240668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.249533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.259211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.269255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.278278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.287289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.296693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.305422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.326418][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.340711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.351198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.367307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.381194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.421052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.430848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.442481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.457242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.466389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.475632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.484092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.493124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.510102][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.533169][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.548865][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.560097][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.572817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.585181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.595514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.604969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.613281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.621997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.630757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.653734][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.668186][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.685714][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.693408][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.720520][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.741177][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.750700][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.765715][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.774787][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.781851][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.811934][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.829629][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.842774][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.857936][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.865081][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.879116][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.888454][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.901477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.909521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.920581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.931903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.945042][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.960289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.968902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.983785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.993535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.003255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.020847][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.032924][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.047397][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.074178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.094690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.123537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.138656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.156657][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.180917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.189010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.202607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.204090][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 57.215084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.232507][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 57.234752][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.245511][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 57.256086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.264848][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 57.266445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.279837][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.284466][ T4172] Bluetooth: hci4: command 0x041b tx timeout [ 57.286962][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.302536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.312142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.349644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.357724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.367005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.376066][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.388113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.397104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.406121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.414875][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.421918][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.429712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.439203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.455162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.463618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.472568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.481819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.493175][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.511449][ T4181] device veth0_vlan entered promiscuous mode [ 57.518784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.528308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.536665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.544586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.552222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.560753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.569508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.577430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.600675][ T4182] device veth0_vlan entered promiscuous mode [ 57.613686][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.623131][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.632395][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.641414][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.650747][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.659591][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.670409][ T4191] device veth0_vlan entered promiscuous mode [ 57.682548][ T4182] device veth1_vlan entered promiscuous mode [ 57.696669][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.707304][ T4181] device veth1_vlan entered promiscuous mode [ 57.722056][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.731040][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.746074][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.758086][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.768091][ T4191] device veth1_vlan entered promiscuous mode [ 57.803131][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.821773][ T4187] device veth0_vlan entered promiscuous mode [ 57.841622][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.851869][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.865932][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.879501][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.888313][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.897257][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.906237][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.915044][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.925749][ T4181] device veth0_macvtap entered promiscuous mode [ 57.947544][ T4181] device veth1_macvtap entered promiscuous mode [ 57.958638][ T4182] device veth0_macvtap entered promiscuous mode [ 57.974283][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.982388][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.991737][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.001718][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.011945][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.022560][ T4187] device veth1_vlan entered promiscuous mode [ 58.032298][ T4182] device veth1_macvtap entered promiscuous mode [ 58.042577][ T4191] device veth0_macvtap entered promiscuous mode [ 58.071390][ T4191] device veth1_macvtap entered promiscuous mode [ 58.081780][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.095361][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.107037][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.118492][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.130620][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.138652][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.147978][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.157816][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.166316][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.175359][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.183249][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.192418][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.201345][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.210658][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.219654][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.228668][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.240461][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.252472][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.265464][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.288272][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.297290][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.317177][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.326781][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.336060][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.345314][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.361429][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.372876][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.383204][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.395071][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.407940][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.421075][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.429017][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.436758][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.445672][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.455190][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.464105][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.472809][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.481899][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.505549][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.517750][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.528578][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.538754][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.549235][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.560708][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.571096][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.580040][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.589092][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.603553][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.622811][ T4187] device veth0_macvtap entered promiscuous mode [ 58.661723][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.672508][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.682659][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.692377][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.714456][ T4187] device veth1_macvtap entered promiscuous mode [ 58.754777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.755147][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.766639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.779194][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.781056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.841729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.862690][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.874496][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.885183][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.896227][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.906124][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.916671][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.928034][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.946957][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.960517][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.969027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.979254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.988528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.997132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.008441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.016571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.025068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.036088][ T4192] device veth0_vlan entered promiscuous mode [ 59.056423][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.071528][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.073442][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.082313][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.096169][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.102542][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.119129][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.130566][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.141871][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.163356][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.177776][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.188863][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.215727][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.230751][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.240053][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.249088][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.272788][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.285649][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 59.296155][ T4192] device veth1_vlan entered promiscuous mode [ 59.308595][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.313240][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 59.323249][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 59.349084][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 59.372700][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.373061][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.391514][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.397772][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 59.410316][ T4291] loop1: detected capacity change from 0 to 128 [ 59.418341][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.418962][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.433420][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.449689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.460442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.586862][ T4192] device veth0_macvtap entered promiscuous mode [ 59.635125][ T4192] device veth1_macvtap entered promiscuous mode [ 59.659601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.668142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.829988][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.954385][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.364431][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 61.370533][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 61.384169][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 61.444656][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 61.451023][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 61.702420][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.768369][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.791881][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.804681][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.815774][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.822623][ T4311] Zero length message leads to an empty skb [ 61.827649][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.842729][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.853731][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.864336][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.877549][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.907992][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.949140][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.962555][ T4314] futex_wake_op: syz.0.1 tries to shift op by -1; fix this program [ 61.976909][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.992206][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.001408][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.088721][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.099744][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.109899][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.120611][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.131107][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.142352][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.155000][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.170910][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.189634][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.230804][ T4317] loop0: detected capacity change from 0 to 128 [ 62.542066][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.638208][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.777460][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.894840][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.996339][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.030360][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.049498][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.066495][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.453863][ C0] sched: RT throttling activated [ 63.482985][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.500259][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.521237][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.579280][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.603484][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.639326][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.695246][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.982161][ T4326] kernel profiling enabled (shift: 6) [ 64.050378][ T4324] loop3: detected capacity change from 0 to 40427 [ 64.055846][ T4329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9'. [ 64.110370][ T4324] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 64.115405][ T4331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.132449][ T4324] F2FS-fs (loop3): invalid crc value [ 64.155382][ T4324] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.205620][ T4324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.977694][ T4352] loop2: detected capacity change from 0 to 128 [ 66.075596][ T4364] futex_wake_op: syz.0.19 tries to shift op by -1; fix this program [ 66.675241][ T4371] loop0: detected capacity change from 0 to 128 [ 68.447048][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 69.100047][ T4192] attempt to access beyond end of device [ 69.100047][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 71.287884][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.298921][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.345185][ T4418] binder: 4417:4418 ioctl c0306201 200000000240 returned -11 [ 71.353741][ T4416] loop4: detected capacity change from 0 to 128 [ 71.762525][ T4424] loop3: detected capacity change from 0 to 40427 [ 71.809315][ T4424] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 71.822922][ T4424] F2FS-fs (loop3): invalid crc value [ 72.041566][ T4424] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.214360][ T4424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.678239][ T4435] IPVS: length: 233 != 8 [ 74.811622][ T4192] attempt to access beyond end of device [ 74.811622][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 74.985972][ T4455] binder: 4454:4455 ioctl c0306201 200000000240 returned -11 [ 75.040139][ T4459] loop1: detected capacity change from 0 to 128 [ 76.486175][ T7] cfg80211: failed to load regulatory.db [ 77.284081][ T4478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.56'. [ 77.610271][ T4480] loop2: detected capacity change from 0 to 40427 [ 77.745555][ T4482] IPVS: length: 233 != 8 [ 77.826109][ T4480] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 77.837572][ T4480] F2FS-fs (loop2): invalid crc value [ 77.871816][ T4480] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.911262][ T4480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.517762][ T4496] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 78.589079][ T4496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.669811][ T4496] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 78.707968][ T4500] binder: 4498:4500 ioctl c0306201 200000000240 returned -11 [ 79.402666][ T4187] attempt to access beyond end of device [ 79.402666][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 79.805489][ T4515] loop1: detected capacity change from 0 to 128 [ 81.502522][ T4535] futex_wake_op: syz.3.73 tries to shift op by -1; fix this program [ 82.254292][ T4537] loop3: detected capacity change from 0 to 128 [ 83.352230][ T4545] loop0: detected capacity change from 0 to 40427 [ 83.414019][ T4545] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 83.424955][ T4545] F2FS-fs (loop0): invalid crc value [ 83.459756][ T4545] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.510356][ T4545] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.916714][ T4569] tipc: Enabling of bearer rejected, failed to enable media [ 85.926154][ T4191] attempt to access beyond end of device [ 85.926154][ T4191] loop0: rw=2049, want=45104, limit=40427 [ 86.532713][ T4579] loop2: detected capacity change from 0 to 128 [ 86.626276][ T4581] netlink: 'syz.0.83': attribute type 10 has an invalid length. [ 86.712584][ T4581] team0: Port device dummy0 added [ 86.927223][ T4586] loop0: detected capacity change from 0 to 4096 [ 86.958859][ T4588] futex_wake_op: syz.3.89 tries to shift op by -1; fix this program [ 87.304362][ T4596] loop3: detected capacity change from 0 to 128 [ 88.785616][ T4586] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.804108][ T4613] loop1: detected capacity change from 0 to 40427 [ 89.994043][ T4613] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 90.016168][ T4613] F2FS-fs (loop1): invalid crc value [ 90.056887][ T4613] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.106545][ T4613] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.385174][ T4628] block device autoloading is deprecated and will be removed. [ 91.731584][ T4647] loop2: detected capacity change from 0 to 128 [ 92.934045][ T4658] futex_wake_op: syz.3.109 tries to shift op by -1; fix this program [ 93.627306][ T4667] loop3: detected capacity change from 0 to 128 [ 93.802165][ T4672] process 'syz.1.110' launched './file0' with NULL argv: empty string added [ 94.409990][ T4690] loop4: detected capacity change from 0 to 4096 [ 94.512530][ T4690] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.819720][ T4700] futex_wake_op: syz.1.120 tries to shift op by -1; fix this program [ 96.120561][ T4704] loop1: detected capacity change from 0 to 128 [ 98.668579][ T4735] loop2: detected capacity change from 0 to 4096 [ 99.111085][ T4735] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.769065][ T4755] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.080964][ T4774] binder: 4773:4774 ioctl 4018620d 0 returned -22 [ 101.123149][ T4774] binder: 4773:4774 ioctl c0306201 200000000240 returned -11 [ 101.316509][ T4781] loop1: detected capacity change from 0 to 128 [ 101.395238][ T4781] ======================================================= [ 101.395238][ T4781] WARNING: The mand mount option has been deprecated and [ 101.395238][ T4781] and is ignored by this kernel. Remove the mand [ 101.395238][ T4781] option from the mount to silence this warning. [ 101.395238][ T4781] ======================================================= [ 101.489439][ T4781] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 101.512153][ T4781] FAT-fs (loop1): FAT read failed (blocknr 255) [ 102.725749][ T4804] binder: 4802:4804 ioctl 4018620d 0 returned -22 [ 102.755444][ T4804] binder: 4802:4804 ioctl c0306201 200000000240 returned -11 [ 102.940288][ T4811] loop3: detected capacity change from 0 to 128 [ 103.905099][ T4823] futex_wake_op: syz.3.162 tries to shift op by -1; fix this program [ 104.613768][ T4827] loop3: detected capacity change from 0 to 128 [ 107.033035][ T4833] 9pnet_virtio: no channels available for device syz [ 107.245081][ T4842] binder: 4841:4842 ioctl 4018620d 0 returned -22 [ 107.271810][ T4842] binder: 4841:4842 ioctl c0306201 200000000240 returned -11 [ 108.310295][ T4865] loop4: detected capacity change from 0 to 128 [ 108.322944][ T4863] futex_wake_op: syz.1.176 tries to shift op by -1; fix this program [ 108.512839][ T4865] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 108.608364][ T4875] loop1: detected capacity change from 0 to 128 [ 108.649978][ T4865] FAT-fs (loop4): FAT read failed (blocknr 255) [ 109.385947][ T4879] syz.2.181 uses obsolete (PF_INET,SOCK_PACKET) [ 109.908462][ T4883] binder: 4882:4883 ioctl c0306201 0 returned -14 [ 109.940002][ T4883] binder: 4882:4883 ioctl c0306201 200000000240 returned -11 [ 111.421830][ T4907] futex_wake_op: syz.2.191 tries to shift op by -1; fix this program [ 111.707604][ T4909] loop2: detected capacity change from 0 to 128 [ 112.724135][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.145047][ T4229] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.183890][ T4229] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.237300][ T4229] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.304173][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.411098][ T4911] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.512478][ T4917] binder: BINDER_SET_CONTEXT_MGR already set [ 113.678480][ T4917] binder: 4916:4917 ioctl 4018620d 2000000002c0 returned -16 [ 113.687387][ T4922] binder: 4916:4922 ioctl c0306201 0 returned -14 [ 114.226859][ T2238] usb 4-1: USB disconnect, device number 2 [ 114.365702][ T4917] binder: 4916:4917 ioctl c0306201 200000000240 returned -11 [ 114.639013][ T4936] loop2: detected capacity change from 0 to 128 [ 114.656648][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.104913][ T4936] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.299256][ T4936] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.542563][ T4943] loop1: detected capacity change from 0 to 128 [ 115.657079][ T4947] loop4: detected capacity change from 0 to 4096 [ 115.779112][ T4943] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 115.940952][ T4943] FAT-fs (loop1): FAT read failed (blocknr 255) [ 115.952489][ T4947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.295271][ T4959] binder: 4957:4959 ioctl c0306201 0 returned -14 [ 116.312484][ T4959] binder: 4957:4959 ioctl c0306201 200000000240 returned -11 [ 117.753070][ T4980] futex_wake_op: syz.4.214 tries to shift op by -1; fix this program [ 118.037740][ T4982] loop4: detected capacity change from 0 to 128 [ 118.853339][ T4984] overlayfs: failed to set xattr on upper [ 118.905090][ T4984] overlayfs: ...falling back to index=off,metacopy=off. [ 118.950478][ T4984] overlayfs: failed to resolve './file0': -2 [ 120.228989][ T4996] loop2: detected capacity change from 0 to 128 [ 120.286091][ T4999] binder: 4998:4999 ioctl c0306201 200000000240 returned -11 [ 120.364772][ T4996] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.504490][ T4996] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.796594][ T5012] loop4: detected capacity change from 0 to 4096 [ 121.903415][ T5019] futex_wake_op: syz.1.227 tries to shift op by -1; fix this program [ 122.108711][ T5021] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 122.164515][ T5021] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 122.215352][ T5012] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.229575][ T5019] loop1: detected capacity change from 0 to 128 [ 123.541279][ T5044] loop3: detected capacity change from 0 to 128 [ 123.641188][ T5053] loop2: detected capacity change from 0 to 128 [ 123.737592][ T5044] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.760445][ T5044] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.788851][ T5053] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 124.146703][ T5053] FAT-fs (loop2): FAT read failed (blocknr 255) [ 125.524920][ T5078] futex_wake_op: syz.0.244 tries to shift op by -1; fix this program [ 126.010363][ T5086] loop0: detected capacity change from 0 to 128 [ 130.665093][ T4222] Bluetooth: hci5: command 0x1003 tx timeout [ 130.671309][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 130.881199][ T5096] futex_wake_op: syz.2.250 tries to shift op by -1; fix this program [ 131.917149][ T5101] loop2: detected capacity change from 0 to 128 [ 132.223290][ T5103] loop0: detected capacity change from 0 to 128 [ 132.442844][ T5103] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.481768][ T5103] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.573938][ T4229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.772232][ T4222] Bluetooth: hci5: command 0x1001 tx timeout [ 132.778923][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.785662][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.933998][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 133.059211][ T4229] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.093203][ T4229] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.121482][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.158133][ T4229] usb 2-1: config 0 descriptor?? [ 133.439808][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 133.619568][ T5120] futex_wake_op: syz.2.257 tries to shift op by -1; fix this program [ 133.628832][ T5121] 9pnet_virtio: no channels available for device syz [ 133.997123][ T5125] loop2: detected capacity change from 0 to 128 [ 134.083112][ T4229] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 134.733745][ T4229] usb 2-1: USB disconnect, device number 2 [ 135.573674][ T5149] loop4: detected capacity change from 0 to 128 [ 135.711762][ T5149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.778845][ T5149] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.803631][ T5153] futex_wake_op: syz.1.268 tries to shift op by -1; fix this program [ 136.449795][ T5163] futex_wake_op: syz.0.271 tries to shift op by -1; fix this program [ 136.677218][ T5168] loop0: detected capacity change from 0 to 128 [ 136.864700][ T5157] loop1: detected capacity change from 0 to 128 [ 138.498332][ T5186] binder: 5184:5186 unknown command 1074553619 [ 138.530686][ T5186] binder: 5184:5186 ioctl c0306201 200000000040 returned -22 [ 138.558517][ T5189] binder: 5184:5189 unknown command 1074553620 [ 138.588272][ T5189] binder: 5184:5189 ioctl c0306201 200000000640 returned -22 [ 139.072448][ T5204] futex_wake_op: syz.0.284 tries to shift op by -1; fix this program [ 139.784355][ T5208] loop0: detected capacity change from 0 to 128 [ 140.183718][ T5213] futex_wake_op: syz.3.288 tries to shift op by -1; fix this program [ 140.468476][ T5214] loop3: detected capacity change from 0 to 128 [ 140.576553][ T5218] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 142.276981][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 142.452384][ T5234] team0: Port device dummy0 removed [ 142.906009][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.039356][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 144.042473][ T5258] loop2: detected capacity change from 0 to 128 [ 144.155641][ T5258] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 144.169071][ T5262] loop3: detected capacity change from 0 to 128 [ 144.179684][ T5258] FAT-fs (loop2): FAT read failed (blocknr 255) [ 144.214045][ T1108] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 144.222423][ T1108] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.242706][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.274154][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.288386][ T1108] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.302418][ T1108] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.311830][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.402514][ T5262] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.424113][ T5262] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.098280][ T1108] usb 5-1: usb_control_msg returned -32 [ 145.109687][ T1108] usbtmc 5-1:16.0: can't read capabilities [ 146.020452][ T5286] futex_wake_op: syz.1.314 tries to shift op by -1; fix this program [ 146.412961][ T5290] loop1: detected capacity change from 0 to 128 [ 147.250260][ T23] usb 5-1: USB disconnect, device number 2 [ 147.510755][ T5302] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.319'. [ 147.559720][ T5297] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 147.569831][ T5297] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 147.816526][ T5307] loop0: detected capacity change from 0 to 4096 [ 147.843613][ T5311] loop3: detected capacity change from 0 to 128 [ 147.904471][ T5311] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 147.936949][ T5311] FAT-fs (loop3): FAT read failed (blocknr 255) [ 147.960526][ T5307] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.502653][ T5334] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 149.537084][ T5334] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 149.966270][ T5343] loop1: detected capacity change from 0 to 128 [ 150.004756][ T5345] futex_wake_op: syz.0.331 tries to shift op by -1; fix this program [ 150.183448][ T5343] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.208902][ T5343] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.474790][ T5351] loop0: detected capacity change from 0 to 128 [ 151.457811][ T5350] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.333'. [ 152.664822][ T5373] loop1: detected capacity change from 0 to 4096 [ 152.817445][ T5373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.855954][ T5382] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.345'. [ 152.942958][ T5387] loop0: detected capacity change from 0 to 128 [ 153.094516][ T5387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.154050][ T5387] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.662665][ T5405] binder: 5404:5405 ioctl c0306201 200000000240 returned -11 [ 153.748737][ T5407] binder: 5406:5407 unknown command 0 [ 153.789837][ T5407] binder: 5406:5407 ioctl c0306201 200000000080 returned -22 [ 153.858121][ T5407] binder: BINDER_SET_CONTEXT_MGR already set [ 153.865492][ T5407] binder: 5406:5407 ioctl 4018620d 200000000040 returned -16 [ 153.961388][ T5416] loop0: detected capacity change from 0 to 128 [ 154.028354][ T5416] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 154.028691][ T5417] futex_wake_op: syz.4.354 tries to shift op by -1; fix this program [ 154.055658][ T5416] FAT-fs (loop0): FAT read failed (blocknr 255) [ 154.331105][ T5424] loop4: detected capacity change from 0 to 128 [ 155.932622][ T5433] netlink: 'syz.1.357': attribute type 72 has an invalid length. [ 156.734401][ T4236] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.777887][ T5445] loop4: detected capacity change from 0 to 128 [ 156.896598][ T5449] binder: 5448:5449 ioctl c0306201 0 returned -14 [ 156.964339][ T5445] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.004424][ T5445] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.104081][ T4236] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.156272][ T4236] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.235248][ T4236] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.574963][ T5457] loop3: detected capacity change from 0 to 4096 [ 157.727892][ T5457] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.853991][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.914269][ T5439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.295907][ T5475] netlink: 'syz.2.371': attribute type 72 has an invalid length. [ 158.310979][ T23] usb 2-1: USB disconnect, device number 3 [ 158.752623][ T5490] binder: 5489:5490 ioctl c0306201 0 returned -14 [ 159.218004][ T5503] loop0: detected capacity change from 0 to 128 [ 159.270243][ T5505] loop1: detected capacity change from 0 to 128 [ 159.310915][ T5507] netlink: 'syz.3.384': attribute type 72 has an invalid length. [ 159.318727][ T5505] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 159.319016][ T5505] FAT-fs (loop1): FAT read failed (blocknr 255) [ 159.339237][ T5503] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.353009][ T5503] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.945239][ T5511] loop3: detected capacity change from 0 to 4096 [ 160.231481][ T5511] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.453530][ T5523] binder: 5522:5523 ioctl c0306201 0 returned -14 [ 161.222996][ T5530] binder: BINDER_SET_CONTEXT_MGR already set [ 161.281714][ T5534] futex_wake_op: syz.0.391 tries to shift op by -1; fix this program [ 161.290099][ T5530] binder: 5529:5530 ioctl 4018620d 2000000002c0 returned -16 [ 161.558891][ T5541] loop0: detected capacity change from 0 to 128 [ 161.890764][ T5544] 9pnet_virtio: no channels available for device syz [ 162.024234][ T4190] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 162.024303][ T4190] Bluetooth: hci0: Dropping invalid advertising data [ 162.040320][ T4190] Bluetooth: hci0: Dropping invalid advertising data [ 162.048570][ T4190] Bluetooth: hci0: Malicious advertising data. [ 162.142104][ T5548] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.395'. [ 162.955231][ T5556] loop4: detected capacity change from 0 to 128 [ 163.030272][ T5556] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.054026][ T5556] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.372812][ T5575] loop1: detected capacity change from 0 to 4096 [ 164.515013][ T5575] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.596212][ T5592] binder: 5590:5592 ioctl c00c620f 200000000040 returned -22 [ 164.662867][ T5591] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.733701][ T5598] futex_wake_op: syz.2.410 tries to shift op by -1; fix this program [ 164.894045][ T5598] loop2: detected capacity change from 0 to 128 [ 166.254342][ T5129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 166.553882][ T5129] usb 1-1: Using ep0 maxpacket: 8 [ 166.695404][ T5129] usb 1-1: config 0 interface 0 has no altsetting 0 [ 166.706382][ T5129] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 166.746272][ T5129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.798193][ T5129] usb 1-1: config 0 descriptor?? [ 166.897628][ T5636] futex_wake_op: syz.1.424 tries to shift op by -1; fix this program [ 167.056344][ T5636] loop1: detected capacity change from 0 to 128 [ 167.068533][ T5641] ================================================================================ [ 167.081560][ T5641] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1154:10 [ 167.113945][ T5641] shift exponent 2053 is too large for 32-bit type 'int' [ 167.144431][ T5641] CPU: 0 PID: 5641 Comm: syz.3.427 Not tainted 5.15.189-syzkaller #0 [ 167.152541][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.162766][ T5641] Call Trace: [ 167.166089][ T5641] [ 167.169030][ T5641] dump_stack_lvl+0x168/0x230 [ 167.173922][ T5641] ? show_regs_print_info+0x20/0x20 [ 167.179322][ T5641] ? load_image+0x3b0/0x3b0 [ 167.183961][ T5641] ubsan_epilogue+0xa/0x30 [ 167.188395][ T5641] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 167.194930][ T5641] pcl812_attach+0x1bc5/0x2330 [ 167.199739][ T5641] comedi_device_attach+0x515/0x650 [ 167.204964][ T5641] comedi_unlocked_ioctl+0x5ec/0xe90 [ 167.210282][ T5641] ? comedi_poll+0x8b0/0x8b0 [ 167.214947][ T5641] ? bpf_lsm_file_ioctl+0x5/0x10 [ 167.219869][ T5641] ? security_file_ioctl+0x7c/0xa0 [ 167.225121][ T5641] ? comedi_poll+0x8b0/0x8b0 [ 167.229699][ T5641] __se_sys_ioctl+0xfa/0x170 [ 167.234469][ T5641] do_syscall_64+0x4c/0xa0 [ 167.238874][ T5641] ? clear_bhb_loop+0x30/0x80 [ 167.243537][ T5641] ? clear_bhb_loop+0x30/0x80 [ 167.248206][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.254143][ T5641] RIP: 0033:0x7f4f37d74be9 [ 167.258661][ T5641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.278256][ T5641] RSP: 002b:00007f4f35fdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.286684][ T5641] RAX: ffffffffffffffda RBX: 00007f4f37f9bfa0 RCX: 00007f4f37d74be9 [ 167.294652][ T5641] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 167.296975][ T5129] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 167.302631][ T5641] RBP: 00007f4f37df7e19 R08: 0000000000000000 R09: 0000000000000000 [ 167.321097][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.329121][ T5641] R13: 00007f4f37f9c038 R14: 00007f4f37f9bfa0 R15: 00007ffcdd99e348 [ 167.337097][ T5641] [ 167.345173][ T5641] ================================================================================ [ 167.354595][ T5641] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 167.361829][ T5641] CPU: 0 PID: 5641 Comm: syz.3.427 Not tainted 5.15.189-syzkaller #0 [ 167.369884][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.379954][ T5641] Call Trace: [ 167.383246][ T5641] [ 167.386210][ T5641] dump_stack_lvl+0x168/0x230 [ 167.390899][ T5641] ? show_regs_print_info+0x20/0x20 [ 167.396104][ T5641] ? load_image+0x3b0/0x3b0 [ 167.400600][ T5641] panic+0x2c9/0x7f0 [ 167.404569][ T5641] ? bpf_jit_dump+0xd0/0xd0 [ 167.409064][ T5641] check_panic_on_warn+0x80/0xa0 [ 167.413992][ T5641] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 167.420429][ T5641] pcl812_attach+0x1bc5/0x2330 [ 167.425219][ T5641] comedi_device_attach+0x515/0x650 [ 167.430440][ T5641] comedi_unlocked_ioctl+0x5ec/0xe90 [ 167.435756][ T5641] ? comedi_poll+0x8b0/0x8b0 [ 167.440407][ T5641] ? bpf_lsm_file_ioctl+0x5/0x10 [ 167.445361][ T5641] ? security_file_ioctl+0x7c/0xa0 [ 167.450503][ T5641] ? comedi_poll+0x8b0/0x8b0 [ 167.455119][ T5641] __se_sys_ioctl+0xfa/0x170 [ 167.459728][ T5641] do_syscall_64+0x4c/0xa0 [ 167.464161][ T5641] ? clear_bhb_loop+0x30/0x80 [ 167.468955][ T5641] ? clear_bhb_loop+0x30/0x80 [ 167.473749][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.479752][ T5641] RIP: 0033:0x7f4f37d74be9 [ 167.484182][ T5641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.503966][ T5641] RSP: 002b:00007f4f35fdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.512555][ T5641] RAX: ffffffffffffffda RBX: 00007f4f37f9bfa0 RCX: 00007f4f37d74be9 [ 167.520615][ T5641] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 167.525529][ T5129] usb 1-1: USB disconnect, device number 2 [ 167.528596][ T5641] RBP: 00007f4f37df7e19 R08: 0000000000000000 R09: 0000000000000000 [ 167.528614][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.528624][ T5641] R13: 00007f4f37f9c038 R14: 00007f4f37f9bfa0 R15: 00007ffcdd99e348 [ 167.528649][ T5641] [ 167.561623][ T5641] Kernel Offset: disabled [ 167.566102][ T5641] Rebooting in 86400 seconds..