last executing test programs: 1m24.812313274s ago: executing program 4 (id=5): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f0000000580)="53807a552564029134cd11068d423216e03f43cd996c33b3dc0d59665cebd9aa6ecffbcaef83d586e99c00655f01c0edab0702df4b3171c395c4a9aa0537237ac547b1b5644fde7c6fc13eaa8076dedf74d65561face3e8400255ffb524ed7df2951b47eb2137a38ab0fac38401a969bcca3718b3607320e5c55457db5d03be8054614ae6d872359285a101925c319bdb63362f16577ef0e3bd0c3536497cb3c0fbe39fd041be7fab57c976ea386bef4ed6496b1a08f8135072c7dc50a21d2837f85ecd3bb4c1286c47bcff62ab0c0d0b5546d821ff1be32a50ca6979a6284e7462b00d010caaf8b17", 0xe9}], 0x5, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) fchmod(r0, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r2, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(r0, 0x540b, 0x1) 1m23.99894888s ago: executing program 4 (id=6): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) prlimit64(r4, 0xd, &(0x7f00000002c0)={0x4, 0x9}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2380) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 1m23.054321092s ago: executing program 4 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1087408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m22.268434923s ago: executing program 4 (id=11): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.801369696s ago: executing program 4 (id=14): openat$rfkill(0xffffffffffffff9c, 0x0, 0x4600, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) fcntl$setownex(r1, 0xf, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x40082) openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendfile(r7, r4, 0x0, 0x10000200000200) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x400008001, 0x0, 0x1002001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x1, 0x10, 0x80000002, 0xfffffffffffffffc}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.476221835s ago: executing program 32 (id=14): openat$rfkill(0xffffffffffffff9c, 0x0, 0x4600, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) fcntl$setownex(r1, 0xf, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x40082) openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendfile(r7, r4, 0x0, 0x10000200000200) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x400008001, 0x0, 0x1002001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x1, 0x10, 0x80000002, 0xfffffffffffffffc}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.142725798s ago: executing program 0 (id=156): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19.459904599s ago: executing program 0 (id=158): openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x4000003f}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010) 18.465532451s ago: executing program 0 (id=161): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x7000000, 0x1c, 0x1c, 0x7, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x30, 0x2e, 0x5f, 0x30, 0x61]}}, 0x0, 0x3b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, r5, 0x0, 0x1}, 0x50) 17.071384177s ago: executing program 0 (id=162): open(&(0x7f0000000300)='./cgroup\x00', 0x8000, 0x196) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x6) getsockname$packet(r1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 16.739051864s ago: executing program 0 (id=163): gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872424dfefdb) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000940)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d7003da3c397c28105b787960a0dda223a61291ae6e63f50f4d574d2d052e8abf468a767fe4e838e94bc2b1c7904c5c5aa80173e15507ea44e3449573d92123a6eaa9f76f01a0d5280b71d3c825beeedec26c8ce663720b04fa867651be872ca2aee6c91592e8263ac426597faacaefc7eed28341fec6d779bc2c25be6ee8836a8868e7b6a", 0xdd}, {&(0x7f0000000680)="ff", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14c}}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 14.881253043s ago: executing program 0 (id=167): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x1808004, 0x0) r3 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x639) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 10.063699362s ago: executing program 3 (id=180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) prlimit64(r4, 0xd, &(0x7f00000002c0)={0x4, 0x9}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 9.479997972s ago: executing program 5 (id=184): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r0, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb, 0x4000003f}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010) 9.221333243s ago: executing program 5 (id=186): open(&(0x7f0000000300)='./cgroup\x00', 0x8000, 0x196) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x6) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 8.99502829s ago: executing program 5 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0x2, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x0, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0x7, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x2, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 8.852288924s ago: executing program 3 (id=190): socket$packet(0x11, 0x3, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) open(0x0, 0x41, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) r2 = io_uring_setup(0x3275, &(0x7f0000000180)={0x0, 0x55dc, 0x20, 0x3, 0xa0}) io_uring_enter(r2, 0x1b45, 0x9085, 0x10, &(0x7f0000000000)={[0xffffffffffffff8c]}, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 8.78071817s ago: executing program 5 (id=191): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96", 0x8b}], 0x2}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2100) 6.82401689s ago: executing program 5 (id=194): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xee01, 0x0, 0x0, 0x0, 0x108}, 0x476f, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) 6.701870877s ago: executing program 3 (id=195): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0x4001, 0x800) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0xffffffff, 0x0, 0x2000, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0xffff, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x200, 0x20f, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x7, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x4000, 0x0, 0x2, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0xf445, 0x2, r4}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40c00, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.6133222s ago: executing program 1 (id=196): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x0, r2}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xf3e, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, 0x0, 0x0, 0x1c2a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) 6.539692056s ago: executing program 2 (id=197): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x46, 0x0, 0x4}) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000180)={0x0, 0xfffffffffffffffb, 0x7, 0x5, 0x0, 0x9, "c74d484950ba60d875199849b0756bcd", 0xc2, 0x7, 0x2, 0x6d, 0x0, 0x8, 0xe}) 5.538390307s ago: executing program 2 (id=198): open(&(0x7f0000000300)='./cgroup\x00', 0x8000, 0x196) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x6) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 5.410532383s ago: executing program 1 (id=199): openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) 5.350490791s ago: executing program 2 (id=200): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) prlimit64(r4, 0xd, &(0x7f00000002c0)={0x4, 0x9}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 5.23734197s ago: executing program 3 (id=201): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0xc00040, 0x10) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x6, 0x400, 0x487a}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) sendto(0xffffffffffffffff, 0x0, 0x0, 0x48040, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 3.767562012s ago: executing program 1 (id=202): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x40) syz_clone3(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x83fbe798703c9285}, 0x20000000) 2.371080348s ago: executing program 2 (id=203): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000140)={0x0, r3}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xf3e, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, 0x0, 0x0, 0x1c2a) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0xf6, 0x6, @random="5afe8b181d50"}, 0x14) 1.973036263s ago: executing program 1 (id=204): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e26, 0x10001, @local, 0xb}}}, 0x30) 1.797229889s ago: executing program 3 (id=205): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000480)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x3c, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 1.10928418s ago: executing program 1 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 907.611501ms ago: executing program 2 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0xf5ff, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 907.412781ms ago: executing program 5 (id=208): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) 97.554848ms ago: executing program 1 (id=209): madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) 53.65309ms ago: executing program 3 (id=210): open(&(0x7f0000000300)='./cgroup\x00', 0x8000, 0x196) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x6) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 0s ago: executing program 2 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000003c0)="51eb", 0x2}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, 0x0, &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRESHEX=0x0], 0xa0}}, 0x22004081) pipe2(&(0x7f0000000040), 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 63.927966][ T4173] cgroup: Unknown subsys name 'net' [ 64.075940][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.534037][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.958169][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.074091][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.082045][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.090137][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.111856][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.122016][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.129104][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.137193][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.180704][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.210789][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.238713][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.261651][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.298690][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.319471][ T4186] team0: Port device team_slave_0 added [ 67.344425][ T4186] team0: Port device team_slave_1 added [ 67.406974][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.414064][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.440834][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.453166][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.462496][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.470854][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.500199][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.507252][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.533545][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.544947][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.552296][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.560671][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.585089][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.592224][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.600221][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.625671][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.632936][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.641380][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.648983][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.656165][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.664607][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.689726][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.696813][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.705214][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.714908][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.724170][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.732031][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.740459][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.748718][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.766166][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.776046][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.783620][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.791742][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.805739][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.837213][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.844114][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.872601][ T4191] team0: Port device team_slave_0 added [ 67.880809][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.896898][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.914904][ T4191] team0: Port device team_slave_1 added [ 67.921993][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.939458][ T4188] team0: Port device team_slave_0 added [ 67.946929][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.979113][ T4188] team0: Port device team_slave_1 added [ 68.017835][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.025061][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.051283][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.063143][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.070880][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.097050][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.120279][ T4192] team0: Port device team_slave_0 added [ 68.126572][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.133862][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.159993][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.171659][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.178632][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.205600][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.218859][ T4187] team0: Port device team_slave_0 added [ 68.230147][ T4187] team0: Port device team_slave_1 added [ 68.236816][ T4192] team0: Port device team_slave_1 added [ 68.326671][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.333579][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.340591][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.348398][ T4191] Cannot create hsr debugfs directory [ 68.354641][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.361892][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.388007][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.399925][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.406980][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.433288][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.458316][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.465791][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.472462][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.480064][ T4188] Cannot create hsr debugfs directory [ 68.486226][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.493465][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.519679][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.531677][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.538636][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.565490][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.664726][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.671854][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.679028][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.686808][ T4187] Cannot create hsr debugfs directory [ 68.700327][ T4175] Bluetooth: hci4: command 0x0409 tx timeout [ 68.706963][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 68.751365][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.757935][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.764884][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.772801][ T4192] Cannot create hsr debugfs directory [ 68.789471][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 68.789526][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 68.802168][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 68.957626][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.987703][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.008728][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.026118][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.074458][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.106826][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.117283][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.128259][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.198884][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.213458][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.225912][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.243835][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.254303][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.288212][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.300111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.310555][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.321301][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.360003][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.372350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.382063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.392089][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.399279][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.408967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.417924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.426727][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.433799][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.442035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.451714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.466945][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.478172][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.505191][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.535495][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.544813][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.555493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.564558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.573532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.582283][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.591924][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.601470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.614484][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.625721][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.638834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.647685][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.687941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.697196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.706580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.715590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.729911][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.740445][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.771839][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.791133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.802243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.811099][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.818202][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.857603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.867352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.876755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.886082][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.893467][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.904743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.918467][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.950411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.958682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.967227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.991146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.002478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.011257][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.018315][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.027361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.037571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.046125][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.053233][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.076743][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.104806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.114088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.124416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.133576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.144727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.154097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.163463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.173615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.183389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.193279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.206839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.218621][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.239781][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.247642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.256525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.264847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.279699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.288454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.299710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.308882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.316784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.325801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.334449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.353689][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.365974][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.375127][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.392417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.401544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.409123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.418627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.427692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.437194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.446795][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.453942][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.462152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.471204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.480139][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.487209][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.495149][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.503614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.517257][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.549270][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.556913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.572540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.590702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.612118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.626770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.638297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.681234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.701587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.717308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.740922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.766878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.784843][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 70.793081][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 70.806591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.817295][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.824445][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.841181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.856086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.865059][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 70.871666][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 70.878485][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.885620][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.893726][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 70.907187][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.920187][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.931430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.945794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.976235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.995322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.055489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.082915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.094740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.105755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.115588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.124897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.134323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.144824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.165084][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.196160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.205043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.214086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.223555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.233904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.242705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.251649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.260796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.268607][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.275289][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.283457][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.300406][ T4186] device veth0_vlan entered promiscuous mode [ 71.314710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.323149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.337309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.346569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.370775][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.379734][ T4186] device veth1_vlan entered promiscuous mode [ 71.415156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.426954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.436794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.492442][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.501826][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.512455][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.538216][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.558637][ T4186] device veth0_macvtap entered promiscuous mode [ 71.569017][ T4188] device veth0_vlan entered promiscuous mode [ 71.576470][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.587454][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.597066][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.605306][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.615103][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.624975][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.634305][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.642752][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.651372][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.672849][ T4186] device veth1_macvtap entered promiscuous mode [ 71.688741][ T4188] device veth1_vlan entered promiscuous mode [ 71.716119][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.725535][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.734223][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.744852][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.753627][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.762901][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.771958][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.780212][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.807283][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.822886][ T4191] device veth0_vlan entered promiscuous mode [ 71.830828][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.838975][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.849062][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.856911][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.866470][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.888976][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.906863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.917146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.926240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.935649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.946740][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.955766][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.968838][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.978498][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.988375][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.997380][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.010082][ T4188] device veth0_macvtap entered promiscuous mode [ 72.017596][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.026883][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.035269][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.045377][ T4192] device veth0_vlan entered promiscuous mode [ 72.056421][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.071624][ T4188] device veth1_macvtap entered promiscuous mode [ 72.085973][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.105586][ T4191] device veth1_vlan entered promiscuous mode [ 72.141744][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.152273][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.170884][ T4192] device veth1_vlan entered promiscuous mode [ 72.189477][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.203730][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.216949][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.249802][ T4191] device veth0_macvtap entered promiscuous mode [ 72.265803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.280762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.293194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.303471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.313324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.322039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.332719][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.343359][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.354945][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.366539][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.376148][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.387164][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.396463][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.411002][ T4191] device veth1_macvtap entered promiscuous mode [ 72.434751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.445299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.454388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.463960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.472334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.481165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.493180][ T4187] device veth0_vlan entered promiscuous mode [ 72.531743][ T1629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.546285][ T4187] device veth1_vlan entered promiscuous mode [ 72.555942][ T1629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.566766][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.575126][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.606747][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.626912][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.637879][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.649192][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.660895][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.678704][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.689914][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.701714][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.712454][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.724952][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.740739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.749050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.758505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.768260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.777333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.788596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.799256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.817635][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.827908][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.836959][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.846007][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.860338][ T1324] Bluetooth: hci4: command 0x040f tx timeout [ 72.866549][ T1324] Bluetooth: hci2: command 0x040f tx timeout [ 72.880265][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.883309][ T4192] device veth0_macvtap entered promiscuous mode [ 72.896723][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.925557][ T4187] device veth0_macvtap entered promiscuous mode [ 72.938236][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.946355][ T1324] Bluetooth: hci3: command 0x040f tx timeout [ 72.948203][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.953119][ T1324] Bluetooth: hci1: command 0x040f tx timeout [ 72.953208][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 72.974215][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.983044][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.996050][ T4192] device veth1_macvtap entered promiscuous mode [ 73.028258][ T4187] device veth1_macvtap entered promiscuous mode [ 73.035629][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.045860][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.057690][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.066156][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.074881][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.083401][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.160330][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.171504][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.182669][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.193689][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.206713][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.233765][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.247182][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.255232][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.268153][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.288552][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.301839][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.315806][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.341551][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.352536][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.363308][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.376563][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.393628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.410024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.418909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.430135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.449391][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.462420][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.471081][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.476395][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.485523][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.499199][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.510016][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.521100][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.532616][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.541669][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.552649][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.562540][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.574121][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.585384][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.595970][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.606696][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.617710][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.629531][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.648300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.657394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.667385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.676487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.686613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.700078][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.708821][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.719177][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.728428][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.750913][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.763508][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.772610][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.781550][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.797182][ T1629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.813919][ T1629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.843127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.946736][ T4271] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.000648][ T4274] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.019351][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.027492][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.031866][ T1629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.058347][ T1629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.064663][ T4273] binder: 4272:4273 ioctl 540f 200000000180 returned -22 [ 74.085899][ T4271] IPVS: fo: FWM 3 0x00000003 - no destination available [ 74.095909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.096674][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 74.110558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.155376][ T1629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.175284][ T1629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.192747][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.219768][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.228184][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.288345][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.299543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.326615][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.367221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.462841][ T4281] bridge0: port 3(syz_tun) entered blocking state [ 74.513297][ T4281] bridge0: port 3(syz_tun) entered disabled state [ 74.604839][ T4281] device syz_tun entered promiscuous mode [ 74.617901][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.637996][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 74.711401][ T4281] bridge0: port 3(syz_tun) entered blocking state [ 74.718182][ T4281] bridge0: port 3(syz_tun) entered forwarding state [ 74.944567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.046987][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.301009][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 75.324331][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 75.330644][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 75.337460][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 75.344616][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 75.701470][ T4306] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 76.638705][ T4304] loop0: detected capacity change from 0 to 4096 [ 77.102041][ T4186] syz-executor (4186) used greatest stack depth: 21136 bytes left [ 77.200805][ T4284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.662812][ T4284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.349311][ C0] sched: RT throttling activated [ 78.399056][ T4284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.537664][ T4284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.281064][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.509842][ T4238] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.559885][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 79.809812][ T4238] usb 1-1: Using ep0 maxpacket: 32 [ 79.851542][ T21] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=b0.74 [ 79.862268][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.897453][ T21] usb 3-1: Product: syz [ 79.913720][ T21] usb 3-1: Manufacturer: syz [ 79.929845][ T21] usb 3-1: SerialNumber: syz [ 79.940756][ T4238] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 79.949002][ T4238] usb 1-1: config 0 has no interface number 0 [ 80.033938][ T21] usb 3-1: config 0 descriptor?? [ 80.092601][ T21] kl5kusb105 3-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 80.113336][ T21] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 80.169937][ T4238] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 80.198152][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.277543][ T4238] usb 1-1: Product: syz [ 80.401558][ T4238] usb 1-1: Manufacturer: syz [ 80.406259][ T4238] usb 1-1: SerialNumber: syz [ 80.413538][ T4238] usb 1-1: config 0 descriptor?? [ 80.451409][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 80.986178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 81.110959][ T4238] radio-si470x 1-1:0.35: this is not a si470x device. [ 81.179604][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.230136][ T4238] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 81.244501][ T21] usb 3-1: USB disconnect, device number 2 [ 81.275808][ T21] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 81.295453][ T21] kl5kusb105 3-1:0.0: device disconnected [ 81.304183][ T4349] binder: 4346:4349 ioctl 80087601 200000000000 returned -22 [ 81.349491][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 81.703016][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 81.805405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 82.345161][ T4345] sctp: failed to load transform for md5: -2 [ 82.432264][ T4238] usb 1-1: USB disconnect, device number 2 [ 82.534675][ T26] audit: type=1326 audit(1772229003.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4346 comm="syz.1.23" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8edda0799 code=0x0 [ 82.829424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 82.839367][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 82.848394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.930826][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 84.042241][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.081965][ T4381] autofs4:pid:4381:autofs_fill_super: called with bogus options [ 84.103808][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.130407][ T4326] device bridge_slave_0 entered promiscuous mode [ 84.191515][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.213652][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.330531][ T4326] device bridge_slave_1 entered promiscuous mode [ 84.500122][ T4381] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 85.361967][ T4390] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 85.434874][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.455188][ T4365] loop2: detected capacity change from 0 to 32768 [ 85.476985][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.765974][ T4392] device vlan0 entered promiscuous mode [ 85.785667][ T4326] team0: Port device team_slave_0 added [ 85.964968][ T4401] Zero length message leads to an empty skb [ 85.972200][ T4326] team0: Port device team_slave_1 added [ 86.077253][ T4178] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4178) [ 86.108843][ T4405] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 86.361896][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.403533][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.349907][ T1108] cfg80211: failed to load regulatory.db [ 87.365274][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.385060][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.445949][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.456713][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.642488][ T4326] device hsr_slave_0 entered promiscuous mode [ 90.660057][ T4326] device hsr_slave_1 entered promiscuous mode [ 90.686410][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.695199][ T4326] Cannot create hsr debugfs directory [ 90.709381][ T4267] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.179478][ T4267] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.249234][ T4267] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.260045][ T4267] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.286436][ T4267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 91.308336][ T4267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 91.492945][ T4267] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.527814][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.887049][ T4267] usb 4-1: Product: syz [ 91.912009][ T4267] usb 4-1: Manufacturer: syz [ 91.973954][ T4267] cdc_wdm 4-1:1.0: skipping garbage [ 91.994734][ T4267] cdc_wdm 4-1:1.0: skipping garbage [ 92.018469][ T4267] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 92.027613][ T4267] cdc_wdm 4-1:1.0: Unknown control protocol [ 92.378074][ T13] usb 4-1: USB disconnect, device number 2 [ 92.384903][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 92.385071][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 92.385091][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 93.222797][ T4284] device hsr_slave_0 left promiscuous mode [ 93.278434][ T4284] device hsr_slave_1 left promiscuous mode [ 93.305687][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.331750][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.387229][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.411570][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.522269][ T4284] device bridge_slave_1 left promiscuous mode [ 93.529539][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.268473][ T26] audit: type=1326 audit(1772229015.110:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2e139799 code=0x7ffc0000 [ 94.605488][ T26] audit: type=1326 audit(1772229015.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c2e139799 code=0x7ffc0000 [ 94.628407][ T26] audit: type=1326 audit(1772229015.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2e139799 code=0x7ffc0000 [ 94.659372][ T26] audit: type=1326 audit(1772229015.120:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c2e139799 code=0x7ffc0000 [ 94.681843][ T26] audit: type=1326 audit(1772229015.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2e139799 code=0x7ffc0000 [ 94.705654][ T4284] device bridge_slave_0 left promiscuous mode [ 94.709028][ T26] audit: type=1326 audit(1772229015.120:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2e139799 code=0x7ffc0000 [ 94.896562][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.000365][ T4284] device veth1_macvtap left promiscuous mode [ 95.006752][ T4284] device veth0_macvtap left promiscuous mode [ 95.229226][ T4284] device veth1_vlan left promiscuous mode [ 95.256334][ T4284] device veth0_vlan left promiscuous mode [ 96.703139][ T4507] binder: 4506:4507 ioctl 540f 200000000180 returned -22 [ 96.734293][ T4507] binder: 4506:4507 ioctl c0306201 200000000240 returned -11 [ 96.769774][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 96.785970][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 96.803529][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.820228][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.942636][ T4284] bond0 (unregistering): Released all slaves [ 97.129909][ T4326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.147027][ T4326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.176278][ T4326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.186631][ T4326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.389442][ T4267] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.556627][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.596283][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.612132][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.648003][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.694626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.715413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.754905][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.762069][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.829421][ T4267] usb 3-1: Using ep0 maxpacket: 16 [ 98.845283][ T4533] fuse: Unknown parameter 'user_id00000000000000000000' [ 98.881887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.922081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.459695][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.493039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.501806][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.508933][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.517069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.527654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.568059][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.600430][ T4267] usb 3-1: string descriptor 0 read error: -71 [ 100.610370][ T4267] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.612028][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.630222][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.650020][ T4267] usb 3-1: config 0 descriptor?? [ 100.669550][ T4267] usb 3-1: can't set config #0, error -71 [ 100.677742][ T4267] usb 3-1: USB disconnect, device number 3 [ 100.714035][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.775503][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.830071][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.890298][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.938535][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.992873][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.018690][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.040950][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.206395][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.016823][ T4445] Set syz1 is full, maxelem 65536 reached [ 103.656547][ T4572] binder: 4570:4572 ioctl 540f 200000000180 returned -22 [ 103.734455][ T4572] binder: 4570:4572 ioctl c0306201 200000000240 returned -11 [ 103.840142][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.874952][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.887464][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.661911][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 104.723230][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 104.744989][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 104.764059][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 104.779642][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 105.104127][ T4587] /dev/sg0: Can't open blockdev [ 105.601631][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.769025][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.879408][ T4294] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.538733][ T4326] device veth0_vlan entered promiscuous mode [ 106.546067][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.555296][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.574513][ T4326] device veth1_vlan entered promiscuous mode [ 106.679072][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.702308][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.709596][ T4294] usb 3-1: Using ep0 maxpacket: 32 [ 106.742118][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.825270][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.830206][ T4294] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 106.859406][ T4294] usb 3-1: config 0 has no interface number 0 [ 106.880113][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.888268][ T4294] usb 3-1: config 0 interface 89 has no altsetting 0 [ 106.936859][ T4326] device veth0_macvtap entered promiscuous mode [ 106.966916][ T4326] device veth1_macvtap entered promiscuous mode [ 107.035594][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.069461][ T4294] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 107.079434][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.094242][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.117298][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.138334][ T4294] usb 3-1: Product: syz [ 107.148077][ T4294] usb 3-1: Manufacturer: syz [ 107.153059][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.169470][ T4294] usb 3-1: SerialNumber: syz [ 107.188472][ T4294] usb 3-1: config 0 descriptor?? [ 107.206662][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.252966][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.271067][ T4294] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 107.297835][ T4294] em28xx 3-1:0.89: Video interface 89 found: bulk [ 107.322650][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.364882][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.403653][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.435418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.456877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.492959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.533617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.566579][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.590489][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.617841][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.668241][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.694409][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.738861][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.755458][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.767334][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.795180][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.830152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.851721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.890998][ T4326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.919575][ T4294] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 107.932001][ T4326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.980988][ T4326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.016048][ T4326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.227011][ T4652] binder: 4651:4652 ioctl 540f 200000000180 returned -22 [ 108.247917][ T4652] binder: 4651:4652 ioctl c0306201 200000000240 returned -11 [ 108.277930][ T1629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.314491][ T1629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.349394][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.498660][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.558403][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.588134][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.679448][ T4267] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.586269][ T4294] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 109.595021][ T4267] usb 4-1: config 0 has an invalid interface number: 10 but max is 0 [ 109.613791][ T4267] usb 4-1: config 0 has no interface number 0 [ 109.635578][ T4294] em28xx 3-1:0.89: board has no eeprom [ 109.649546][ T4267] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 109.680748][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.701063][ T4267] usb 4-1: config 0 descriptor?? [ 109.799768][ T4294] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 109.807281][ T4294] em28xx 3-1:0.89: analog set to bulk mode. [ 109.902826][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 109.957679][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 109.993237][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 110.096449][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 110.111288][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 110.314376][ T4294] usb 3-1: USB disconnect, device number 4 [ 110.334634][ T4294] em28xx 3-1:0.89: Disconnecting em28xx [ 110.344456][ T4233] em28xx 3-1:0.89: Registering V4L2 extension [ 112.119723][ T4267] pegasus: probe of 4-1:0.10 failed with error -32 [ 112.473857][ T4233] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 112.498299][ T4233] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 112.525450][ T4233] em28xx 3-1:0.89: No AC97 audio processor [ 112.585059][ T4233] usb 3-1: Decoder not found [ 112.635105][ T4233] em28xx 3-1:0.89: failed to create media graph [ 112.665520][ T4233] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 112.716762][ T4233] em28xx 3-1:0.89: Registering snapshot button... [ 112.746014][ T4233] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input6 [ 112.812478][ T4233] em28xx 3-1:0.89: Remote control support is not available for this card. [ 112.843127][ T4294] em28xx 3-1:0.89: Closing input extension [ 112.850680][ T4294] em28xx 3-1:0.89: Deregistering snapshot button [ 113.089389][ T4233] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.151621][ T4294] em28xx 3-1:0.89: Freeing device [ 113.500905][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 114.016407][ T4730] binder: 4729:4730 ioctl 540f 200000000180 returned -22 [ 114.023992][ T4233] usb 6-1: unable to get BOS descriptor or descriptor too short [ 114.060849][ T4730] binder: 4729:4730 ioctl c0306201 200000000240 returned -11 [ 114.119759][ T4233] usb 6-1: config 102 has an invalid interface number: 225 but max is 0 [ 114.164340][ T4233] usb 6-1: config 102 has no interface number 0 [ 114.219534][ T4233] usb 6-1: config 102 interface 225 has no altsetting 0 [ 114.415406][ T4315] usb 4-1: USB disconnect, device number 3 [ 114.489719][ T4233] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 114.498803][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.695322][ T4233] usb 6-1: Product: syz [ 114.728550][ T4233] usb 6-1: Manufacturer: syz [ 115.109440][ T4233] usb 6-1: SerialNumber: syz [ 115.271925][ T4233] usb 6-1: can't set config #102, error -71 [ 115.481266][ T4233] usb 6-1: USB disconnect, device number 2 [ 116.696575][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.95'. [ 116.761193][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.95'. [ 116.779370][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.95'. [ 116.803505][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.95'. [ 116.816389][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.95'. [ 117.928684][ T4829] device syzkaller1 entered promiscuous mode [ 117.970218][ T4851] process 'syz.0.101' launched './file1' with NULL argv: empty string added [ 118.181161][ T4855] overlayfs: missing 'lowerdir' [ 119.088150][ T4866] binder: 4864:4866 ioctl 540f 200000000180 returned -22 [ 119.482653][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.759570][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 119.919491][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.869221][ T4889] loop0: detected capacity change from 0 to 128 [ 120.877802][ T1108] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 120.976974][ T1108] usb 2-1: config 102 has no interface number 0 [ 121.012395][ T1108] usb 2-1: config 102 interface 225 has no altsetting 0 [ 121.239538][ T1108] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 121.263773][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.316105][ T1108] usb 2-1: Product: syz [ 121.336364][ T1108] usb 2-1: Manufacturer: syz [ 121.358888][ T1108] usb 2-1: SerialNumber: syz [ 121.631083][ T4907] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 121.637988][ T4907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.692223][ T4907] vhci_hcd vhci_hcd.0: Device attached [ 122.139624][ T21] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 122.147953][ T4315] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 122.229575][ T1108] (null): radio-mr800 - initialization failed [ 122.235908][ T1108] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 122.342071][ T1108] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 122.391940][ T1108] usb 2-1: USB disconnect, device number 2 [ 122.639497][ T4315] usb 1-1: config 0 has no interfaces? [ 123.269581][ T4315] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 123.279937][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.291312][ T4315] usb 1-1: config 0 descriptor?? [ 123.919076][ T4909] usbip_core: unknown command [ 123.924189][ T4909] vhci_hcd: unknown pdu 302063360 [ 123.929265][ T4909] usbip_core: unknown command [ 123.930387][ T1108] usb 1-1: USB disconnect, device number 3 [ 123.995921][ T4403] vhci_hcd: stop threads [ 124.000832][ T4403] vhci_hcd: release socket [ 124.087319][ T4403] vhci_hcd: disconnect device [ 124.955571][ T4947] binder: 4944:4947 ioctl 540f 200000000180 returned -22 [ 125.706160][ T4937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.114'. [ 126.387493][ T4956] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 126.395392][ T4956] UDF-fs: Scanning with blocksize 512 failed [ 126.402350][ T4956] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 126.409857][ T4956] UDF-fs: Scanning with blocksize 1024 failed [ 126.421541][ T4956] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 126.429019][ T4956] UDF-fs: Scanning with blocksize 2048 failed [ 126.435650][ T4956] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 126.443156][ T4956] UDF-fs: Scanning with blocksize 4096 failed [ 128.129474][ T21] vhci_hcd: vhci_device speed not set [ 129.188563][ T4292] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.891018][ T4292] usb 1-1: Using ep0 maxpacket: 32 [ 131.259474][ T4292] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.349568][ T4292] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 131.358943][ T5010] binder: 5009:5010 ioctl 540f 200000000180 returned -22 [ 131.373410][ T4292] usb 1-1: can't read configurations, error -71 [ 132.833922][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.840341][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.134692][ T150] block nbd0: Attempted send on invalid socket [ 135.142485][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.157069][ T150] block nbd0: Attempted send on invalid socket [ 135.163314][ T150] blk_update_request: I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.181305][ T5064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 135.229392][ T4238] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.873365][ T5063] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 136.032709][ T150] block nbd0: Attempted send on invalid socket [ 136.038969][ T150] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.055549][ T5063] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 136.068754][ T150] block nbd0: Attempted send on invalid socket [ 136.075075][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.180362][ T4238] usb 2-1: Using ep0 maxpacket: 32 [ 136.294567][ T150] block nbd0: Attempted send on invalid socket [ 136.301064][ T150] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.480859][ T5063] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 136.506290][ T150] block nbd0: Attempted send on invalid socket [ 136.512851][ T150] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.525579][ T5063] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 136.544889][ T150] block nbd0: Attempted send on invalid socket [ 136.551325][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.564812][ T150] block nbd0: Attempted send on invalid socket [ 136.571183][ T150] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.583133][ T5063] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 136.754836][ T264] block nbd0: Attempted send on invalid socket [ 136.761144][ T264] blk_update_request: I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.780189][ T5063] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 136.796897][ T264] block nbd0: Attempted send on invalid socket [ 136.803122][ T264] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.845369][ T5063] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 136.860983][ T5063] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 136.872008][ T5063] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 136.880011][ T4238] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.039515][ T4238] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 137.058376][ T4238] usb 2-1: config 102 has no interface number 0 [ 137.073296][ T5081] binder: 5080:5081 ioctl 540f 200000000180 returned -22 [ 137.103985][ T4238] usb 2-1: config 102 interface 225 has no altsetting 0 [ 137.549473][ T4238] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 137.643817][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.757677][ T4238] usb 2-1: Product: syz [ 137.798909][ T4238] usb 2-1: Manufacturer: syz [ 138.542459][ T4238] (null): radio-mr800 - initialization failed [ 138.548785][ T4238] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 138.598131][ T4238] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 138.724098][ T4238] usb 2-1: USB disconnect, device number 3 [ 139.652489][ T5112] infiniband syz1: set active [ 139.657496][ T5112] infiniband syz1: added syz_tun [ 139.751158][ T5112] RDS/IB: syz1: added [ 139.755929][ T5112] smc: adding ib device syz1 with port count 1 [ 139.762282][ T5112] smc: ib device syz1 port 1 has pnetid [ 143.025262][ T5150] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 143.050318][ T5153] binder: 5152:5153 ioctl 540f 200000000180 returned -22 [ 143.059469][ T5150] UDF-fs: Scanning with blocksize 512 failed [ 143.079227][ T5150] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 143.144075][ T5150] UDF-fs: Scanning with blocksize 1024 failed [ 143.183777][ T5150] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 143.237360][ T5150] UDF-fs: Scanning with blocksize 2048 failed [ 143.278064][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 143.304321][ T5150] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 143.338556][ T5150] UDF-fs: Scanning with blocksize 4096 failed [ 143.373956][ T5160] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 147.230190][ T26] audit: type=1326 audit(1772229067.920:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 147.878223][ T26] audit: type=1326 audit(1772229067.920:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 148.004281][ T5215] binder: 5212:5215 ioctl 540f 200000000180 returned -22 [ 148.045868][ T26] audit: type=1326 audit(1772229067.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 148.098456][ T5215] binder_alloc: 5212: binder_alloc_buf, no vma [ 148.124814][ T5215] binder: 5212:5215 ioctl c0306201 200000000240 returned -11 [ 148.198637][ T26] audit: type=1326 audit(1772229067.920:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 148.267524][ T26] audit: type=1326 audit(1772229067.920:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 148.295936][ T26] audit: type=1326 audit(1772229067.920:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 148.328407][ T26] audit: type=1326 audit(1772229067.920:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 148.355168][ T26] audit: type=1326 audit(1772229067.920:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 148.432386][ T26] audit: type=1326 audit(1772229067.920:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 148.561365][ T26] audit: type=1326 audit(1772229067.920:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.5.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe3dc3799 code=0x7ffc0000 [ 151.726873][ T5286] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 151.734533][ T5286] UDF-fs: Scanning with blocksize 512 failed [ 151.743859][ T5286] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 151.752223][ T5286] UDF-fs: Scanning with blocksize 1024 failed [ 151.760371][ T5286] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 151.768096][ T5286] UDF-fs: Scanning with blocksize 2048 failed [ 151.775923][ T5286] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 151.783636][ T5286] UDF-fs: Scanning with blocksize 4096 failed [ 152.353333][ T5287] input: syz0 as /devices/virtual/input/input7 [ 152.850459][ T5295] binder: 5294:5295 ioctl 540f 200000000180 returned -22 [ 153.041348][ T5299] binder_alloc: 5294: binder_alloc_buf, no vma [ 153.136136][ T5301] binder: 5294:5301 ioctl c0306201 200000000240 returned -11 [ 157.989287][ T5336] [ 157.991672][ T5336] ====================================================== [ 157.998699][ T5336] WARNING: possible circular locking dependency detected [ 158.005732][ T5336] syzkaller #0 Not tainted [ 158.010165][ T5336] ------------------------------------------------------ [ 158.017190][ T5336] syz.1.209/5336 is trying to acquire lock: [ 158.023090][ T5336] ffff888058cd8120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 158.032695][ T5336] [ 158.032695][ T5336] but task is already holding lock: [ 158.040065][ T5336] ffffc900018e8150 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 158.049675][ T5336] [ 158.049675][ T5336] which lock already depends on the new lock. [ 158.049675][ T5336] [ 158.060153][ T5336] [ 158.060153][ T5336] the existing dependency chain (in reverse order) is: [ 158.069684][ T5336] [ 158.069684][ T5336] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 158.077596][ T5336] _raw_spin_lock+0x2a/0x40 [ 158.082609][ T5336] __inet_hash+0xe3/0x960 [ 158.087450][ T5336] inet_csk_listen_start+0x22f/0x320 [ 158.093256][ T5336] inet_listen+0x2e1/0x590 [ 158.098202][ T5336] __sys_listen+0x19d/0x220 [ 158.103244][ T5336] __x64_sys_listen+0x56/0x60 [ 158.108430][ T5336] do_syscall_64+0x4c/0xa0 [ 158.113357][ T5336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.119768][ T5336] [ 158.119768][ T5336] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 158.127479][ T5336] __lock_acquire+0x2c42/0x7d10 [ 158.132944][ T5336] lock_acquire+0x19e/0x400 [ 158.137965][ T5336] mptcp_diag_get_info+0x1f2/0x9e0 [ 158.143602][ T5336] inet_sk_diag_fill+0xf5e/0x1ca0 [ 158.149182][ T5336] mptcp_diag_dump+0xce6/0x12b0 [ 158.154574][ T5336] __inet_diag_dump+0x1f6/0x380 [ 158.159938][ T5336] netlink_dump+0x694/0xcf0 [ 158.164982][ T5336] __netlink_dump_start+0x523/0x700 [ 158.170696][ T5336] inet_diag_handler_cmd+0x1d3/0x2b0 [ 158.176506][ T5336] sock_diag_rcv_msg+0x164/0x3e0 [ 158.181947][ T5336] netlink_rcv_skb+0x1f5/0x440 [ 158.187214][ T5336] sock_diag_rcv+0x26/0x40 [ 158.192145][ T5336] netlink_unicast+0x774/0x920 [ 158.197442][ T5336] netlink_sendmsg+0x8ba/0xbe0 [ 158.202716][ T5336] sock_write_iter+0x2a6/0x3a0 [ 158.207991][ T5336] do_iter_readv_writev+0x47e/0x5f0 [ 158.213701][ T5336] do_iter_write+0x205/0x7b0 [ 158.218889][ T5336] do_writev+0x281/0x480 [ 158.223641][ T5336] do_syscall_64+0x4c/0xa0 [ 158.228568][ T5336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.234976][ T5336] [ 158.234976][ T5336] other info that might help us debug this: [ 158.234976][ T5336] [ 158.245187][ T5336] Possible unsafe locking scenario: [ 158.245187][ T5336] [ 158.252623][ T5336] CPU0 CPU1 [ 158.257971][ T5336] ---- ---- [ 158.263320][ T5336] lock(&h->lhash2[i].lock); [ 158.267983][ T5336] lock(sk_lock-AF_INET6); [ 158.274989][ T5336] lock(&h->lhash2[i].lock); [ 158.282171][ T5336] lock(sk_lock-AF_INET6); [ 158.286658][ T5336] [ 158.286658][ T5336] *** DEADLOCK *** [ 158.286658][ T5336] [ 158.294784][ T5336] 6 locks held by syz.1.209/5336: [ 158.299789][ T5336] #0: ffffffff8d4463e8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 158.309088][ T5336] #1: ffffffff8d4462a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 158.319443][ T5336] #2: ffff888025e25698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 158.330124][ T5336] #3: ffffffff8d520288 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 158.340374][ T5336] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 158.349662][ T5336] #5: ffffc900018e8150 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 158.359652][ T5336] [ 158.359652][ T5336] stack backtrace: [ 158.365540][ T5336] CPU: 0 PID: 5336 Comm: syz.1.209 Not tainted syzkaller #0 [ 158.372810][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.382941][ T5336] Call Trace: [ 158.386211][ T5336] [ 158.389136][ T5336] dump_stack_lvl+0x188/0x250 [ 158.393820][ T5336] ? load_image+0x400/0x400 [ 158.398324][ T5336] ? show_regs_print_info+0x20/0x20 [ 158.403518][ T5336] ? print_circular_bug+0x12b/0x1a0 [ 158.408709][ T5336] check_noncircular+0x296/0x330 [ 158.413642][ T5336] ? add_chain_block+0x940/0x940 [ 158.418602][ T5336] ? lockdep_lock+0xf1/0x1f0 [ 158.423189][ T5336] ? __lock_acquire+0x13bc/0x7d10 [ 158.428224][ T5336] ? mark_lock+0x94/0x320 [ 158.432558][ T5336] __lock_acquire+0x2c42/0x7d10 [ 158.437415][ T5336] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 158.443383][ T5336] ? verify_lock_unused+0x140/0x140 [ 158.448572][ T5336] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 158.454550][ T5336] ? verify_lock_unused+0x140/0x140 [ 158.459740][ T5336] ? __local_bh_enable_ip+0xd7/0x1c0 [ 158.465015][ T5336] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.470374][ T5336] ? lockdep_hardirqs_on+0x94/0x140 [ 158.475564][ T5336] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.480918][ T5336] ? _local_bh_enable+0xa0/0xa0 [ 158.485751][ T5336] ? nla_put+0x130/0x1e0 [ 158.489988][ T5336] lock_acquire+0x19e/0x400 [ 158.494488][ T5336] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 158.499676][ T5336] ? read_lock_is_recursive+0x10/0x10 [ 158.505036][ T5336] ? rcu_lock_release+0x5/0x20 [ 158.509798][ T5336] ? __lock_acquire+0x7d10/0x7d10 [ 158.514824][ T5336] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 158.520042][ T5336] mptcp_diag_get_info+0x1f2/0x9e0 [ 158.525140][ T5336] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 158.530334][ T5336] inet_sk_diag_fill+0xf5e/0x1ca0 [ 158.535352][ T5336] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 158.541060][ T5336] ? do_raw_spin_lock+0x128/0x2f0 [ 158.546082][ T5336] ? __rwlock_init+0x140/0x140 [ 158.550831][ T5336] ? inet_diag_bc_sk+0x18b/0x1120 [ 158.555849][ T5336] mptcp_diag_dump+0xce6/0x12b0 [ 158.560690][ T5336] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 158.567287][ T5336] __inet_diag_dump+0x1f6/0x380 [ 158.572129][ T5336] netlink_dump+0x694/0xcf0 [ 158.576621][ T5336] ? netlink_lookup+0x1d0/0x1d0 [ 158.581474][ T5336] ? __inet_diag_dump_start+0x805/0x970 [ 158.587004][ T5336] __netlink_dump_start+0x523/0x700 [ 158.592187][ T5336] inet_diag_handler_cmd+0x1d3/0x2b0 [ 158.597460][ T5336] ? rcu_lock_release+0x20/0x20 [ 158.602297][ T5336] ? inet_diag_handler_get_info+0xb90/0xb90 [ 158.608221][ T5336] ? inet_diag_dump_start+0x20/0x20 [ 158.613445][ T5336] ? inet_diag_dump+0x50/0x50 [ 158.618119][ T5336] ? rcu_lock_release+0x20/0x20 [ 158.622976][ T5336] sock_diag_rcv_msg+0x164/0x3e0 [ 158.627906][ T5336] netlink_rcv_skb+0x1f5/0x440 [ 158.632660][ T5336] ? sock_diag_bind+0xa0/0xa0 [ 158.637326][ T5336] ? netlink_ack+0xb50/0xb50 [ 158.641903][ T5336] ? __lock_acquire+0x7d10/0x7d10 [ 158.646921][ T5336] sock_diag_rcv+0x26/0x40 [ 158.651321][ T5336] netlink_unicast+0x774/0x920 [ 158.656077][ T5336] netlink_sendmsg+0x8ba/0xbe0 [ 158.660828][ T5336] ? netlink_getsockopt+0x570/0x570 [ 158.666016][ T5336] ? aa_sock_msg_perm+0x94/0x150 [ 158.670944][ T5336] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 158.676240][ T5336] ? security_socket_sendmsg+0x7c/0xa0 [ 158.681680][ T5336] sock_write_iter+0x2a6/0x3a0 [ 158.686432][ T5336] ? sock_read_iter+0x380/0x380 [ 158.691296][ T5336] do_iter_readv_writev+0x47e/0x5f0 [ 158.696483][ T5336] ? aa_path_link+0x880/0x880 [ 158.701148][ T5336] ? generic_file_rw_checks+0x280/0x280 [ 158.706680][ T5336] ? common_file_perm+0x171/0x1c0 [ 158.711691][ T5336] ? fsnotify_perm+0x5d/0x560 [ 158.716356][ T5336] ? security_file_permission+0x75/0xa0 [ 158.721888][ T5336] do_iter_write+0x205/0x7b0 [ 158.726470][ T5336] ? import_iovec+0x6f/0xa0 [ 158.730976][ T5336] do_writev+0x281/0x480 [ 158.735218][ T5336] ? do_readv+0x460/0x460 [ 158.739549][ T5336] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 158.745534][ T5336] ? lock_chain_count+0x20/0x20 [ 158.750373][ T5336] ? vtime_user_exit+0x2c8/0x3e0 [ 158.755323][ T5336] ? lockdep_hardirqs_on+0x94/0x140 [ 158.760521][ T5336] do_syscall_64+0x4c/0xa0 [ 158.764924][ T5336] ? clear_bhb_loop+0x30/0x80 [ 158.769595][ T5336] ? clear_bhb_loop+0x30/0x80 [ 158.774262][ T5336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.780148][ T5336] RIP: 0033:0x7fe8edda0799 [ 158.784551][ T5336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.804261][ T5336] RSP: 002b:00007fe8ebffa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 158.812659][ T5336] RAX: ffffffffffffffda RBX: 00007fe8ee019fa0 RCX: 00007fe8edda0799 [ 158.820621][ T5336] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 158.828582][ T5336] RBP: 00007fe8ede36bd9 R08: 0000000000000000 R09: 0000000000000000 [ 158.836543][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.844507][ T5336] R13: 00007fe8ee01a038 R14: 00007fe8ee019fa0 R15: 00007fff6dfba6e8 [ 158.852469][ T5336] [ 158.856811][ T5336] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 158.865838][ T5336] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5336, name: syz.1.209 [ 158.874770][ T5336] INFO: lockdep is turned off. [ 158.879529][ T5336] Preemption disabled at: [ 158.879534][ T5336] [<0000000000000000>] 0x0 [ 158.888251][ T5336] CPU: 0 PID: 5336 Comm: syz.1.209 Not tainted syzkaller #0 [ 158.895530][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.905571][ T5336] Call Trace: [ 158.908841][ T5336] [ 158.911768][ T5336] dump_stack_lvl+0x188/0x250 [ 158.916445][ T5336] ? show_regs_print_info+0x20/0x20 [ 158.921637][ T5336] ? load_image+0x400/0x400 [ 158.926129][ T5336] ___might_sleep+0x493/0x610 [ 158.930797][ T5336] ? __might_sleep+0xf0/0xf0 [ 158.935380][ T5336] ? read_lock_is_recursive+0x10/0x10 [ 158.940748][ T5336] ? rcu_lock_release+0x5/0x20 [ 158.945554][ T5336] __lock_sock_fast+0x2f/0xe0 [ 158.950245][ T5336] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 158.955454][ T5336] mptcp_diag_get_info+0x1fe/0x9e0 [ 158.960561][ T5336] inet_sk_diag_fill+0xf5e/0x1ca0 [ 158.965582][ T5336] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 158.971288][ T5336] ? do_raw_spin_lock+0x128/0x2f0 [ 158.976333][ T5336] ? __rwlock_init+0x140/0x140 [ 158.981082][ T5336] ? inet_diag_bc_sk+0x18b/0x1120 [ 158.986095][ T5336] mptcp_diag_dump+0xce6/0x12b0 [ 158.990938][ T5336] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 158.997516][ T5336] __inet_diag_dump+0x1f6/0x380 [ 159.002360][ T5336] netlink_dump+0x694/0xcf0 [ 159.006869][ T5336] ? netlink_lookup+0x1d0/0x1d0 [ 159.011707][ T5336] ? __inet_diag_dump_start+0x805/0x970 [ 159.017257][ T5336] __netlink_dump_start+0x523/0x700 [ 159.022443][ T5336] inet_diag_handler_cmd+0x1d3/0x2b0 [ 159.027718][ T5336] ? rcu_lock_release+0x20/0x20 [ 159.032559][ T5336] ? inet_diag_handler_get_info+0xb90/0xb90 [ 159.038443][ T5336] ? inet_diag_dump_start+0x20/0x20 [ 159.043638][ T5336] ? inet_diag_dump+0x50/0x50 [ 159.048316][ T5336] ? rcu_lock_release+0x20/0x20 [ 159.053157][ T5336] sock_diag_rcv_msg+0x164/0x3e0 [ 159.058082][ T5336] netlink_rcv_skb+0x1f5/0x440 [ 159.062828][ T5336] ? sock_diag_bind+0xa0/0xa0 [ 159.067636][ T5336] ? netlink_ack+0xb50/0xb50 [ 159.072226][ T5336] ? __lock_acquire+0x7d10/0x7d10 [ 159.077254][ T5336] sock_diag_rcv+0x26/0x40 [ 159.081656][ T5336] netlink_unicast+0x774/0x920 [ 159.086416][ T5336] netlink_sendmsg+0x8ba/0xbe0 [ 159.091174][ T5336] ? netlink_getsockopt+0x570/0x570 [ 159.096356][ T5336] ? aa_sock_msg_perm+0x94/0x150 [ 159.101283][ T5336] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 159.106553][ T5336] ? security_socket_sendmsg+0x7c/0xa0 [ 159.112018][ T5336] sock_write_iter+0x2a6/0x3a0 [ 159.116771][ T5336] ? sock_read_iter+0x380/0x380 [ 159.121631][ T5336] do_iter_readv_writev+0x47e/0x5f0 [ 159.126820][ T5336] ? aa_path_link+0x880/0x880 [ 159.131508][ T5336] ? generic_file_rw_checks+0x280/0x280 [ 159.137045][ T5336] ? common_file_perm+0x171/0x1c0 [ 159.142061][ T5336] ? fsnotify_perm+0x5d/0x560 [ 159.146726][ T5336] ? security_file_permission+0x75/0xa0 [ 159.152267][ T5336] do_iter_write+0x205/0x7b0 [ 159.156844][ T5336] ? import_iovec+0x6f/0xa0 [ 159.161333][ T5336] do_writev+0x281/0x480 [ 159.165576][ T5336] ? do_readv+0x460/0x460 [ 159.169900][ T5336] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 159.175878][ T5336] ? lock_chain_count+0x20/0x20 [ 159.180725][ T5336] ? vtime_user_exit+0x2c8/0x3e0 [ 159.185657][ T5336] ? lockdep_hardirqs_on+0x94/0x140 [ 159.190852][ T5336] do_syscall_64+0x4c/0xa0 [ 159.195258][ T5336] ? clear_bhb_loop+0x30/0x80 [ 159.199931][ T5336] ? clear_bhb_loop+0x30/0x80 [ 159.204606][ T5336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.210498][ T5336] RIP: 0033:0x7fe8edda0799 [ 159.214907][ T5336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.234498][ T5336] RSP: 002b:00007fe8ebffa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 159.242932][ T5336] RAX: ffffffffffffffda RBX: 00007fe8ee019fa0 RCX: 00007fe8edda0799 [ 159.250892][ T5336] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 159.258854][ T5336] RBP: 00007fe8ede36bd9 R08: 0000000000000000 R09: 0000000000000000 [ 159.266819][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.274778][ T5336] R13: 00007fe8ee01a038 R14: 00007fe8ee019fa0 R15: 00007fff6dfba6e8 [ 159.282740][ T5336] [ 159.312543][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 159.668712][ T5338] device bridge0 entered promiscuous mode [ 159.686286][ T5338] device macvtap1 entered promiscuous mode [ 159.702559][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.