last executing test programs: 19.319564819s ago: executing program 0 (id=56): r0 = gettid() openat$panthor(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x10, 0x80002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x7f00) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) 17.891998349s ago: executing program 0 (id=65): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0322006b2025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 16.495943248s ago: executing program 0 (id=59): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) sendmmsg$inet(r5, &(0x7f0000000c40), 0x0, 0x20000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r3) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) splice(r8, 0x0, r7, 0x0, 0x7ffff000, 0x1) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) mlockall(0x7) 9.403729157s ago: executing program 0 (id=60): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) 8.288674518s ago: executing program 0 (id=63): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 7.599430678s ago: executing program 0 (id=66): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) 7.085006922s ago: executing program 1 (id=68): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x35) 6.933175276s ago: executing program 2 (id=69): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040854) 6.164740437s ago: executing program 1 (id=71): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xcc21, 0xd, @loopback, 0x2}, 0x1c) 5.620474433s ago: executing program 1 (id=72): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x8054f790467ece96}], 0x1, 0x0, 0x0, 0x10) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x57, 0xfffffff9, 0x0, @local, @remote, 0x40, 0x80, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="172000006163766c616e0020000280080003000000000008000100100000000a000400aaaaaac5c6ab48817c2a", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 5.549245025s ago: executing program 2 (id=73): syz_usb_connect(0x2, 0x4a, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0xa) 4.802535966s ago: executing program 3 (id=75): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[]) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) truncate(&(0x7f0000000140)='./file0\x00', 0x55) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000240)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x5, 0x3a, '!', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f]}, 0x29) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x210082, 0x40) r6 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') execveat$binfmt(r5, r6, &(0x7f0000000540)={[&(0x7f0000000240)='-][*)-\x00', &(0x7f0000000280)='mqprio\x00', &(0x7f00000002c0)='veth0_macvtap\x00', &(0x7f00000003c0)='ethtool\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='mqprio\x00', &(0x7f00000004c0)='ethtool\x00', &(0x7f0000000600)='veth0_macvtap\x00']}, &(0x7f0000000640)={[&(0x7f00000005c0)='/dev/kvm\x00', &(0x7f0000000680)='\xea\xc5=\xd7\xfeC\x84\xdb\x98I\x1e\xee~\xe3%\x98\xfa\x89[\"\xb7\xc0w\x90\x057[\xb7\x85\x86\xd4\xf6!;\xe6\xae\x90#\xb1\xf3n]\xb3\xb29u;\x8ak)\xc9\xaa\"\xde\x92\x8b}\xeeYj\x8a\x88']}, 0x80) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000102, 0x0, 0xbf}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x11e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x18, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c"}]}}}}}}, 0x0) 4.527682573s ago: executing program 2 (id=76): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x1d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0x83, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x7, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x4000000c, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c77, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x4, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x9, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0xffff, 0x12f, 0x6, 0x7, 0xfffffff3, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x22, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x32, 0x12, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x48b7, 0x4, 0x9, 0x5, 0x9, 0x6, 0x80b, 0xa, 0x1, 0x6, 0x9, 0x6, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x9, 0x9, 0x48c93690, 0x42, 0x400006], [0x8, 0x6, 0x80000001, 0x2, 0x8001, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x8, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x1, 0x8001, 0x7, 0x1ff, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10003, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x1, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe622, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0x4ee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x1, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x8, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x33) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 4.30359422s ago: executing program 3 (id=77): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000440)=0x0, &(0x7f0000001080)=0x0, &(0x7f0000001040)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10021) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000100)={0x2e, 0x2, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x4, 0x226, 0x0, 0x0, 0x1000, 0xdca1, 0x0, 0x0, 0x44}}}, &(0x7f00000001c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x40000) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 4.239848272s ago: executing program 1 (id=78): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup3(r1, r0, 0x80000) read$FUSE(r2, 0x0, 0x0) 4.102758535s ago: executing program 2 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007"], 0xe4}}, 0x0) 3.096800744s ago: executing program 3 (id=80): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101402, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f0000000100)={0x0, 0x0}) 3.019270006s ago: executing program 3 (id=81): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40585414, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) 2.50996321s ago: executing program 2 (id=82): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) 1.848677818s ago: executing program 2 (id=83): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000003c0)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000480)={0x0, 0xc, 0x7, 0x3, 0x5, 0x9}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4000000, 0x0, 0x81}) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) unshare(0x20000400) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) fstat(r3, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) 840.452777ms ago: executing program 1 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97O\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) 617.738803ms ago: executing program 3 (id=85): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[]) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) truncate(&(0x7f0000000140)='./file0\x00', 0x55) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000240)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x5, 0x3a, '!', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f]}, 0x29) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x210082, 0x40) r6 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') execveat$binfmt(r5, r6, &(0x7f0000000540)={[&(0x7f0000000240)='-][*)-\x00', &(0x7f0000000280)='mqprio\x00', &(0x7f00000002c0)='veth0_macvtap\x00', &(0x7f00000003c0)='ethtool\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='mqprio\x00', &(0x7f00000004c0)='ethtool\x00', &(0x7f0000000600)='veth0_macvtap\x00']}, &(0x7f0000000640)={[&(0x7f00000005c0)='/dev/kvm\x00', &(0x7f0000000680)='\xea\xc5=\xd7\xfeC\x84\xdb\x98I\x1e\xee~\xe3%\x98\xfa\x89[\"\xb7\xc0w\x90\x057[\xb7\x85\x86\xd4\xf6!;\xe6\xae\x90#\xb1\xf3n]\xb3\xb29u;\x8ak)\xc9\xaa\"\xde\x92\x8b}\xeeYj\x8a\x88']}, 0x80) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000102, 0x0, 0xbf}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x11e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x18, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c"}]}}}}}}, 0x0) 16.70143ms ago: executing program 1 (id=86): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 0s ago: executing program 3 (id=87): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000240)}) r3 = socket(0x18, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x2, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x101, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffe0) close(r5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) recvmmsg$unix(r3, &(0x7f00000007c0), 0x0, 0x40000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 60.133011][ T5754] cgroup: Unknown subsys name 'net' [ 60.299935][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.689551][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.130593][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.140065][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.163749][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.170080][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.171905][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.186370][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.187550][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.194764][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.201630][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.208869][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.215528][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.222191][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.229287][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.237346][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.244723][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.251764][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.264597][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.275765][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.282793][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.291031][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.293108][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.298400][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.305123][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.322059][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.686923][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 63.759265][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 63.813648][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 63.903777][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.912172][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.919923][ T5768] bridge_slave_0: entered allmulticast mode [ 63.928981][ T5768] bridge_slave_0: entered promiscuous mode [ 63.937428][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 63.972500][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.980558][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.988398][ T5770] bridge_slave_0: entered allmulticast mode [ 63.995982][ T5770] bridge_slave_0: entered promiscuous mode [ 64.003096][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.011725][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.019135][ T5768] bridge_slave_1: entered allmulticast mode [ 64.026889][ T5768] bridge_slave_1: entered promiscuous mode [ 64.054160][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.061708][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.069310][ T5770] bridge_slave_1: entered allmulticast mode [ 64.076231][ T5770] bridge_slave_1: entered promiscuous mode [ 64.109979][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.148409][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.159629][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.171692][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.218343][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.225540][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.233224][ T5769] bridge_slave_0: entered allmulticast mode [ 64.240623][ T5769] bridge_slave_0: entered promiscuous mode [ 64.276060][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.283197][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.292078][ T5769] bridge_slave_1: entered allmulticast mode [ 64.298988][ T5769] bridge_slave_1: entered promiscuous mode [ 64.315853][ T5770] team0: Port device team_slave_0 added [ 64.321890][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.329527][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.336894][ T5771] bridge_slave_0: entered allmulticast mode [ 64.344074][ T5771] bridge_slave_0: entered promiscuous mode [ 64.351440][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.358704][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.366088][ T5771] bridge_slave_1: entered allmulticast mode [ 64.372691][ T5771] bridge_slave_1: entered promiscuous mode [ 64.381893][ T5768] team0: Port device team_slave_0 added [ 64.391084][ T5768] team0: Port device team_slave_1 added [ 64.407976][ T5770] team0: Port device team_slave_1 added [ 64.467977][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.477998][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.485303][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.512658][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.526180][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.533158][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.559838][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.582830][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.598863][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.609646][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.627808][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.635142][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.661398][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.710189][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.717265][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.743960][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.769451][ T5769] team0: Port device team_slave_0 added [ 64.777787][ T5769] team0: Port device team_slave_1 added [ 64.799842][ T5771] team0: Port device team_slave_0 added [ 64.830078][ T5768] hsr_slave_0: entered promiscuous mode [ 64.837040][ T5768] hsr_slave_1: entered promiscuous mode [ 64.847069][ T5771] team0: Port device team_slave_1 added [ 64.862689][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.869744][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.896127][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.909110][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.916349][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.942349][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.015321][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.022288][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.048559][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.065143][ T5770] hsr_slave_0: entered promiscuous mode [ 65.071479][ T5770] hsr_slave_1: entered promiscuous mode [ 65.077710][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.085865][ T5770] Cannot create hsr debugfs directory [ 65.115808][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.122768][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.148968][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.188709][ T5769] hsr_slave_0: entered promiscuous mode [ 65.194997][ T5769] hsr_slave_1: entered promiscuous mode [ 65.200946][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.208583][ T5769] Cannot create hsr debugfs directory [ 65.290785][ T5771] hsr_slave_0: entered promiscuous mode [ 65.297155][ T5771] hsr_slave_1: entered promiscuous mode [ 65.303902][ T5783] Bluetooth: hci1: command tx timeout [ 65.309573][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.317217][ T5771] Cannot create hsr debugfs directory [ 65.383879][ T5783] Bluetooth: hci2: command tx timeout [ 65.389489][ T5783] Bluetooth: hci0: command tx timeout [ 65.395453][ T51] Bluetooth: hci3: command tx timeout [ 65.541664][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.574806][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.586005][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.601444][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.683891][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.698358][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.709700][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.721133][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.816422][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.827417][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.838495][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.850101][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.918677][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.934368][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.951755][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.974538][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.987681][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.036407][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.074791][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.082025][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.096701][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.121944][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.129088][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.183217][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.218797][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.225933][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.245746][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.266628][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.273805][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.305189][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.358309][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.365505][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.397438][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.404637][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.490470][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.549405][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.578581][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.589873][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.608836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.615981][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.634577][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.641714][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.708759][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.818655][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.916372][ T5768] veth0_vlan: entered promiscuous mode [ 66.964793][ T5768] veth1_vlan: entered promiscuous mode [ 67.029532][ T5769] veth0_vlan: entered promiscuous mode [ 67.038097][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.064948][ T5769] veth1_vlan: entered promiscuous mode [ 67.099792][ T5768] veth0_macvtap: entered promiscuous mode [ 67.128037][ T5768] veth1_macvtap: entered promiscuous mode [ 67.170840][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.187360][ T5770] veth0_vlan: entered promiscuous mode [ 67.206244][ T5769] veth0_macvtap: entered promiscuous mode [ 67.218969][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.231418][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.240634][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.249858][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.258901][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.272976][ T5769] veth1_macvtap: entered promiscuous mode [ 67.287160][ T5770] veth1_vlan: entered promiscuous mode [ 67.312487][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.333232][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.345239][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.357585][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.380832][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.383857][ T5783] Bluetooth: hci1: command tx timeout [ 67.401061][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.415017][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.429237][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.438143][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.447727][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.456851][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.463814][ T5084] Bluetooth: hci2: command tx timeout [ 67.471425][ T51] Bluetooth: hci3: command tx timeout [ 67.477040][ T5783] Bluetooth: hci0: command tx timeout [ 67.547516][ T5770] veth0_macvtap: entered promiscuous mode [ 67.575970][ T5770] veth1_macvtap: entered promiscuous mode [ 67.582624][ T5771] veth0_vlan: entered promiscuous mode [ 67.626842][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.636681][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.646264][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.658963][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.669869][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.680587][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.692001][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.710564][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.723080][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.739565][ T5771] veth1_vlan: entered promiscuous mode [ 67.748784][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.762512][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.773940][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.786381][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.797826][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.829772][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.838866][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.848503][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.857878][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.880978][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.889410][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.921611][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.929599][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.987376][ T5771] veth0_macvtap: entered promiscuous mode [ 68.034989][ T5771] veth1_macvtap: entered promiscuous mode [ 68.089135][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.101985][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.113262][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.124533][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.134752][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.145353][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.157335][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.189309][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.233571][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.255679][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.272388][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.286476][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.298248][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.309217][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.321281][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.335215][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.378168][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.390410][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.401825][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.421731][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.438098][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.450021][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.564463][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.580600][ T5839] warning: `syz.0.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.665304][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.150927][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.478623][ T5783] Bluetooth: hci1: command tx timeout [ 69.491491][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.533841][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.545177][ T5783] Bluetooth: hci0: command tx timeout [ 69.550613][ T5783] Bluetooth: hci3: command tx timeout [ 69.553073][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.556366][ T51] Bluetooth: hci2: command tx timeout [ 69.604555][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.644147][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.661479][ T5811] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.824767][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.191719][ T5811] usb 2-1: config 0 descriptor?? [ 71.333285][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.334591][ T5811] usbhid 2-1:0.0: can't add hid device: -71 [ 71.394368][ T5861] syz_tun: entered allmulticast mode [ 71.414831][ T5811] usbhid: probe of 2-1:0.0 failed with error -71 [ 71.465878][ T5861] bond0: entered promiscuous mode [ 71.465910][ T5811] usb 2-1: USB disconnect, device number 2 [ 71.490381][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.491265][ T5861] bond_slave_0: entered promiscuous mode [ 71.497332][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.543509][ T51] Bluetooth: hci1: command tx timeout [ 71.561833][ T5861] bond_slave_1: entered promiscuous mode [ 71.625868][ T5783] Bluetooth: hci3: command tx timeout [ 71.631408][ T5783] Bluetooth: hci0: command tx timeout [ 71.637316][ T51] Bluetooth: hci2: command tx timeout [ 71.643058][ T5864] fuse: Invalid rootmode [ 71.646944][ T5862] loop4: detected capacity change from 0 to 7 [ 71.710873][ T5874] syz.0.8[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.733024][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.742350][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.751151][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.760375][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.776497][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.785695][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.795585][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.805031][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.823422][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.832607][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.015209][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.024456][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.302698][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.312008][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.376464][ T5862] ldm_validate_partition_table(): Disk read failed. [ 72.387775][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.397996][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.413440][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.422631][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.475743][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.486027][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.565533][ T5862] Dev loop4: unable to read RDB block 0 [ 72.885101][ T5862] loop4: unable to read partition table [ 72.934428][ T5862] loop4: partition table beyond EOD, truncated [ 73.032923][ T5862] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 73.823870][ T5774] Process accounting resumed [ 73.853949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.953298][ T5885] Process accounting resumed [ 76.558039][ T5906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14'. [ 76.965382][ T5918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15'. [ 77.489599][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 77.733964][ T5913] input: syz1 as /devices/virtual/input/input5 [ 77.836756][ T5923] tipc: Failed to remove unknown binding: 66,0,0/0:3483163341/3483163343 [ 77.864167][ T5920] tipc: Failed to remove unknown binding: 66,0,0/0:4101073923/4101073924 [ 77.901498][ T5927] syz_tun: entered allmulticast mode [ 77.915591][ T5920] tipc: Failed to remove unknown binding: 66,0,0/0:4101073923/4101073924 [ 77.968421][ T5927] bond0: entered promiscuous mode [ 77.978909][ T5927] bond_slave_0: entered promiscuous mode [ 77.989885][ T5927] bond_slave_1: entered promiscuous mode [ 78.132143][ T5934] loop4: detected capacity change from 0 to 7 [ 78.154277][ C1] blk_print_req_error: 10 callbacks suppressed [ 78.154292][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.169710][ C1] buffer_io_error: 10 callbacks suppressed [ 78.169722][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.190188][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.199411][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.209025][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.218241][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.240843][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.250057][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.258239][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.268842][ C0] hrtimer: interrupt took 1402348 ns [ 78.275097][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.284833][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.294039][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.310942][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.320154][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.337188][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.346635][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.358087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 78.358090][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.375549][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.389524][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.398728][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 78.413584][ T5934] ldm_validate_partition_table(): Disk read failed. [ 78.532236][ T5934] Dev loop4: unable to read RDB block 0 [ 78.677098][ T5934] loop4: unable to read partition table [ 78.980018][ T5934] loop4: partition table beyond EOD, truncated [ 78.986533][ T23] Process accounting resumed [ 79.193065][ T5934] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 79.270274][ T5939] Process accounting resumed [ 80.091914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 80.227012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 80.289580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.648427][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25'. [ 81.250537][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 81.350358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.424426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 81.487921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 81.614915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 81.678395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 83.938963][ T787] cfg80211: failed to load regulatory.db [ 88.824934][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.35'. [ 89.659861][ T5977] syz_tun: entered allmulticast mode [ 89.773604][ T5977] bond0: entered promiscuous mode [ 89.779493][ T5982] tipc: Failed to remove unknown binding: 66,0,0/0:2814149801/2814149802 [ 89.789849][ T5983] tipc: Failed to remove unknown binding: 66,0,0/0:1666201854/1666201856 [ 89.808467][ T5982] tipc: Failed to remove unknown binding: 66,0,0/0:2814149801/2814149802 [ 89.827039][ T5981] input: syz1 as /devices/virtual/input/input6 [ 89.833445][ T5977] bond_slave_0: entered promiscuous mode [ 89.870760][ T5977] bond_slave_1: entered promiscuous mode [ 90.538656][ T5991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31'. [ 91.187859][ T5990] dvmrp6: entered allmulticast mode [ 100.225624][ T6017] overlay: ./file0 is not a directory [ 100.297266][ T6021] tipc: Failed to remove unknown binding: 66,0,0/0:417643336/417643338 [ 100.354174][ T6019] tipc: Failed to remove unknown binding: 66,0,0/0:3644842521/3644842522 [ 100.362677][ T6019] tipc: Failed to remove unknown binding: 66,0,0/0:3644842521/3644842522 [ 106.250941][ T6044] input: syz1 as /devices/virtual/input/input7 [ 111.009128][ T6074] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 113.242215][ T6080] syz.2.54 uses obsolete (PF_INET,SOCK_PACKET) [ 116.042693][ T6105] lo speed is unknown, defaulting to 1000 [ 116.144785][ T6105] lo speed is unknown, defaulting to 1000 [ 116.164469][ T6101] input: syz1 as /devices/virtual/input/input8 [ 117.628299][ T6114] [U] [ 117.631279][ T6114] [U] [ 117.633983][ T6114] [U] [ 117.636684][ T6114] [U] [ 117.641188][ T6114] [U] [ 117.643895][ T6114] [U] [ 117.646595][ T6114] [U] [ 117.649290][ T6114] [U] [ 117.653903][ T6114] [U] [ 117.656605][ T6114] [U] [ 117.659484][ T6114] [U] [ 117.662180][ T6114] [U] [ 117.666609][ T6114] [U] [ 117.669310][ T6114] [U] [ 117.672024][ T6114] [U] [ 117.674720][ T6114] [U] [ 117.679155][ T6114] [U] [ 117.681857][ T6114] [U] [ 117.684566][ T6114] [U] [ 117.687267][ T6114] [U] [ 117.693965][ T6114] [U] [ 117.696690][ T6114] [U] [ 117.699394][ T6114] [U] [ 117.702091][ T6114] [U] [ 117.706605][ T6114] [U] [ 117.709308][ T6114] [U] [ 117.712359][ T6114] [U] [ 117.715056][ T6114] [U] [ 117.719523][ T6114] [U] [ 117.722226][ T6114] [U] [ 117.724935][ T6114] [U] [ 117.727631][ T6114] [U] [ 117.887693][ T6114] [U] [ 117.890450][ T6114] [U] [ 117.893151][ T6114] [U] [ 117.895848][ T6114] [U] [ 117.900243][ T6114] [U] [ 117.902944][ T6114] [U] [ 117.905642][ T6114] [U] [ 117.908342][ T6114] [U] [ 117.915086][ T6114] [U] [ 117.917804][ T6114] [U] [ 117.920515][ T6114] [U] [ 117.923210][ T6114] [U] [ 117.927620][ T6114] [U] [ 117.930321][ T6114] [U] [ 117.933021][ T6114] [U] [ 117.935724][ T6114] [U] [ 117.940285][ T6114] [U] [ 117.942999][ T6114] [U] [ 117.945697][ T6114] [U] [ 117.948395][ T6114] [U] [ 117.952845][ T6114] [U] [ 117.955548][ T6114] [U] [ 117.958243][ T6114] [U] [ 117.960940][ T6114] [U] [ 117.965340][ T6114] [U] [ 117.968042][ T6114] [U] [ 117.970745][ T6114] [U] [ 117.973446][ T6114] [U] [ 117.977903][ T6114] [U] [ 117.980604][ T6114] [U] [ 117.983299][ T6114] [U] [ 117.986003][ T6114] [U] [ 117.990419][ T6114] [U] [ 117.993125][ T6114] [U] [ 117.995822][ T6114] [U] [ 117.998521][ T6114] [U] [ 118.169303][ T6114] [U] [ 118.172096][ T6114] [U] [ 118.174796][ T6114] [U] [ 118.177493][ T6114] [U] [ 118.181904][ T6114] [U] [ 118.184605][ T6114] [U] [ 118.187309][ T6114] [U] [ 118.190004][ T6114] [U] [ 118.194437][ T6114] [U] [ 118.197138][ T6114] [U] [ 118.199840][ T6114] [U] [ 118.202541][ T6114] [U] [ 118.206954][ T6114] [U] [ 118.209657][ T6114] [U] [ 118.212357][ T6114] [U] [ 118.215060][ T6114] [U] [ 118.219552][ T6114] [U] [ 118.222254][ T6114] [U] [ 118.224953][ T6114] [U] [ 118.227651][ T6114] [U] [ 118.232107][ T6114] [U] [ 118.234808][ T6114] [U] [ 118.237509][ T6114] [U] [ 118.240203][ T6114] [U] [ 118.245764][ T6114] [U] [ 118.248474][ T6114] [U] [ 118.251171][ T6114] [U] [ 118.253874][ T6114] [U] [ 118.258465][ T6114] [U] [ 118.261165][ T6114] [U] [ 118.263862][ T6114] [U] [ 118.266562][ T6114] [U] [ 118.270992][ T6114] [U] [ 118.273694][ T6114] [U] [ 118.276398][ T6114] [U] [ 118.279098][ T6114] [U] [ 118.283538][ T6114] [U] [ 118.286238][ T6114] [U] [ 118.288934][ T6114] [U] [ 118.291631][ T6114] [U] [ 118.429185][ T6114] [U] [ 118.431944][ T6114] [U] [ 118.434645][ T6114] [U] [ 118.437344][ T6114] [U] [ 118.441757][ T6114] [U] [ 118.444457][ T6114] [U] [ 118.447155][ T6114] [U] [ 118.449854][ T6114] [U] [ 118.454311][ T6114] [U] [ 118.457012][ T6114] [U] [ 118.459712][ T6114] [U] [ 118.462413][ T6114] [U] [ 118.467969][ T6114] [U] [ 118.470676][ T6114] [U] [ 118.473382][ T6114] [U] [ 118.476080][ T6114] [U] [ 118.480647][ T6114] [U] [ 118.483355][ T6114] [U] [ 118.486061][ T6114] [U] [ 119.550286][ T6110] [U] [ 122.471372][ T6113] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 122.483799][ T6113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 122.496611][ T6113] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.896290][ T28] audit: type=1800 audit(1781409607.991:2): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.59" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 123.064817][ T6105] lo speed is unknown, defaulting to 1000 [ 123.310429][ T6105] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.420929][ T6105] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 124.336310][ T6105] lo speed is unknown, defaulting to 1000 [ 124.492527][ T6105] lo speed is unknown, defaulting to 1000 [ 124.544949][ T6105] lo speed is unknown, defaulting to 1000 [ 124.676910][ T6105] lo speed is unknown, defaulting to 1000 [ 125.044525][ T6105] lo speed is unknown, defaulting to 1000 [ 126.307625][ T51] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 127.129460][ T51] Bluetooth: Frame is too long (len 5, expected len 4) [ 127.195417][ T6157] netlink: 56 bytes leftover after parsing attributes in process `syz.1.72'. [ 128.026093][ T6166] binder: 6165:6166 ioctl 4018620d 0 returned -22 [ 129.329636][ T51] Bluetooth: hci2: command tx timeout [ 129.360721][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 129.458801][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 129.542388][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'. [ 130.069377][ T6183] netlink: 156 bytes leftover after parsing attributes in process `syz.2.82'. [ 130.634242][ T6186] capability: warning: `syz.2.83' uses 32-bit capabilities (legacy support in use) [ 132.708196][ T6199] [ 132.711001][ T6199] ============================= [ 132.716715][ T6199] WARNING: suspicious RCU usage [ 132.722362][ T6199] syzkaller #0 Not tainted [ 132.727512][ T6199] ----------------------------- [ 132.733050][ T6199] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 132.742711][ T6199] [ 132.742711][ T6199] other info that might help us debug this: [ 132.742711][ T6199] [ 132.754524][ T6199] [ 132.754524][ T6199] rcu_scheduler_active = 2, debug_locks = 1 [ 132.763861][ T6199] 1 lock held by syz.1.86/6199: [ 132.769504][ T6199] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 132.780940][ T6199] [ 132.780940][ T6199] stack backtrace: [ 132.787830][ T6199] CPU: 0 PID: 6199 Comm: syz.1.86 Not tainted syzkaller #0 [ 132.795048][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.805142][ T6199] Call Trace: [ 132.808453][ T6199] [ 132.811401][ T6199] dump_stack_lvl+0x18c/0x250 [ 132.816104][ T6199] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.822289][ T6199] ? show_regs_print_info+0x20/0x20 [ 132.827507][ T6199] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.833692][ T6199] lockdep_rcu_suspicious+0x1e1/0x300 [ 132.839081][ T6199] ieee80211_check_concurrent_iface+0x475/0x950 [ 132.845348][ T6199] ieee80211_open+0xc1/0x200 [ 132.849955][ T6199] __dev_open+0x2cb/0x430 [ 132.854303][ T6199] ? dev_open+0x190/0x190 [ 132.858654][ T6199] __dev_change_flags+0x211/0x6a0 [ 132.863686][ T6199] ? lockdep_hardirqs_on+0x98/0x150 [ 132.868900][ T6199] ? dev_get_flags+0x1c0/0x1c0 [ 132.873668][ T6199] ? mutex_lock_nested+0x20/0x20 [ 132.878621][ T6199] dev_change_flags+0x88/0x1a0 [ 132.883407][ T6199] devinet_ioctl+0x95c/0x1c40 [ 132.888116][ T6199] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 132.893237][ T6199] ? _copy_from_user+0xa5/0xe0 [ 132.898018][ T6199] ? get_user_ifreq+0x12b/0x180 [ 132.902875][ T6199] inet_ioctl+0x42b/0x560 [ 132.907216][ T6199] ? tomoyo_path_number_perm+0x217/0x620 [ 132.912854][ T6199] ? inet_shutdown+0x370/0x370 [ 132.917623][ T6199] ? slab_free_freelist_hook+0x130/0x1a0 [ 132.923261][ T6199] ? tomoyo_path_number_perm+0x500/0x620 [ 132.928900][ T6199] ? __kmem_cache_free+0xba/0x1e0 [ 132.933937][ T6199] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 132.939403][ T6199] sock_do_ioctl+0xfc/0x310 [ 132.943918][ T6199] ? sock_show_fdinfo+0xb0/0xb0 [ 132.948787][ T6199] sock_ioctl+0x5ba/0x7e0 [ 132.953130][ T6199] ? sock_poll+0x3e0/0x3e0 [ 132.957563][ T6199] ? bpf_lsm_file_ioctl+0x9/0x10 [ 132.962497][ T6199] ? security_file_ioctl+0x80/0xa0 [ 132.967613][ T6199] ? sock_poll+0x3e0/0x3e0 [ 132.972036][ T6199] __se_sys_ioctl+0xfd/0x170 [ 132.976640][ T6199] do_syscall_64+0x55/0xb0 [ 132.981061][ T6199] ? clear_bhb_loop+0x40/0x90 [ 132.985738][ T6199] ? clear_bhb_loop+0x40/0x90 [ 132.990416][ T6199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.996326][ T6199] RIP: 0033:0x7fcff179ce59 [ 133.000764][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.020382][ T6199] RSP: 002b:00007fcff2606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.028802][ T6199] RAX: ffffffffffffffda RBX: 00007fcff1a15fa0 RCX: 00007fcff179ce59 [ 133.036779][ T6199] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 133.044750][ T6199] RBP: 00007fcff1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 133.052726][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.060700][ T6199] R13: 00007fcff1a16038 R14: 00007fcff1a15fa0 R15: 00007ffdc2384d78 [ 133.068695][ T6199] [ 133.216423][ T28] audit: type=1326 audit(1781409617.916:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.87" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25ef9ce59 code=0x7ffc0000 [ 133.365746][ T28] audit: type=1326 audit(1781409617.916:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.87" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25ef9ce59 code=0x7ffc0000 [ 133.516140][ T28] audit: type=1326 audit(1781409618.128:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.87" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc25ef9ce59 code=0x7ffc0000 [ 133.614822][ T28] audit: type=1326 audit(1781409618.174:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.87" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25ef9ce59 code=0x7ffc0000 [ 133.902755][ T28] audit: type=1326 audit(1781409618.174:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.87" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25ef9ce59 code=0x7ffc0000 [ 134.030678][ T28] audit: type=1326 audit(1781409618.544:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.87" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc25ef9ce59 code=0x7ffc0000 [ 136.270225][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.277633][ T1283] ieee802154 phy1 wpan1: encryption failed: -22