last executing test programs: 18.215419038s ago: executing program 0 (id=100): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x6, 0x1, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 15.05262481s ago: executing program 0 (id=119): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@userptr={0xb, 0x0, 0x4, 0x800, 0x9, {}, {0x2, 0xc3a360ab3b82f309, 0x9, 0x8, 0x5, 0x6, "1540043c"}, 0x6, 0x2, {&(0x7f0000000140)}, 0x8}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 14.903926152s ago: executing program 0 (id=121): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x65d, @loopback, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x20309}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x800) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040880) 14.305607874s ago: executing program 0 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 13.932853311s ago: executing program 0 (id=128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000180)=0x80) 13.45982184s ago: executing program 0 (id=133): socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x300, 0x3, 0xfffffffffffffffd, 0x0, 0x81}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x400}, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x80000001, 0x0, 0x0) 13.002873519s ago: executing program 32 (id=133): socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x300, 0x3, 0xfffffffffffffffd, 0x0, 0x81}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x400}, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x80000001, 0x0, 0x0) 10.39170398s ago: executing program 1 (id=150): r0 = socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x104) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x5b, 0x2000000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.532096696s ago: executing program 4 (id=155): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 9.367320719s ago: executing program 4 (id=156): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto(r0, &(0x7f0000000780)="7057da", 0x3, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 9.159757753s ago: executing program 2 (id=157): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) flock(r0, 0x6) 8.986029617s ago: executing program 2 (id=158): r0 = syz_io_uring_setup(0x472b, &(0x7f00000002c0)={0x0, 0x18bc, 0x4, 0x1, 0x375}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59004"]) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_SHUTDOWN={0x22, 0x6, 0x0, r3, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r8}}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44890) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x59555956}}) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r9, &(0x7f0000000040), 0x0) 8.78666966s ago: executing program 1 (id=160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x18, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x2, 0x1, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) 8.785933141s ago: executing program 2 (id=161): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f00000022c0)=""/4098, 0x1002}], 0x2}}], 0x1, 0x40010120, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) 8.429498567s ago: executing program 4 (id=164): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x6, 0x1, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) 6.395807276s ago: executing program 1 (id=165): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000841}, 0x4004010) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2ba581, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[], 0xff2e) pipe(&(0x7f0000000400)) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:11 0', 0x1b) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x1a}}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x4, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYBLOB="cc760478c2cf77e4ea2ec2883440d8f5aa4ee6c782a838d152d4004adc9e5d56ca6209fe627f02b353e3e7d1b0f535d37da5817622ab7c7db7582d00fc8aa35cb4852064257d2ca1c2a0762c48ef51ff59", @ANYRES64=0x0], 0x20) getpeername(r1, &(0x7f0000000440)=@caif=@util, &(0x7f0000000280)=0x80) 6.368736987s ago: executing program 2 (id=166): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6.20450675s ago: executing program 2 (id=167): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 6.151997621s ago: executing program 3 (id=168): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000001680)='0', 0x1}], 0x1) 6.084805212s ago: executing program 4 (id=169): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x18430f59}, {&(0x7f0000006180)=""/146, 0x98}], 0x2, &(0x7f0000008640), 0x286, 0x0) r1 = dup(r0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x4, 0x4, 0x2, 0x6, 0x8, 0x4, 0x34, 0x5, 0x6, 0x5, 0x4, 0xd, 0x40, 0x7f}, 0xe) 6.037221264s ago: executing program 3 (id=170): r0 = syz_io_uring_setup(0x472b, &(0x7f00000002c0)={0x0, 0x18bc, 0x4, 0x1, 0x375}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59004"]) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_SHUTDOWN={0x22, 0x6, 0x0, r3, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r8}}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44890) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x59555956}}) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r9, &(0x7f0000000040), 0x0) 5.443662385s ago: executing program 3 (id=171): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x82, &(0x7f0000000580)={r7, 0x2}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="8811040008180700000000000000000000000000000000018598479d9429e02ba5976630b3794c12bc620d7772d690eb33dc1cdf1072869da5faa2cf38e129d8395175d080fff5dd5e8f8defb0996be1a258269e5c306374bc8748de7502c1f852e0a49bae28514ce0d139209ba1109acbe21634ba8a9b88738775248f32183f0d14f9377ae9033e3977306e27d02cc51b0c879be9cca7261a24fd2e7f625c65e9606ef2d57d5f4e9cd15ecf4db7f4a5b6472b18d58417939173f5"], 0x8) 4.615710741s ago: executing program 1 (id=172): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create(0x52) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.554504431s ago: executing program 4 (id=173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000d00)={{0x1, 0x0, 0x80, {0x100000, 0x6000, 0x1}}, "bbdfa0dff7808aff261c875a6ad504565d79b9cc9af263b96b3ef4ad7ae5e4973a736a98eee9a4036341a322da1c14be9f745ccc9a2eb16c448431f6365c9571ad137f5b76a11d7cc0e03e8e87aaf3bbe669f0e6c758d3d5a2b8061d93d04adcf6a0a49b20f6cdb49b1042a9dcdb2a0b2395a37660b3d0f72107c84997863fc4c09fed0d185d12403ed91d3c9054a25fb323823cf292f075f8866068eba2ec3d3448743ba40ab14e2e47d292abbe899b1b43dbd4bda6b251bd3e165ef76c1d430bf8e5c2b509b158af7cf1eb43861aba8cd9a3cea56ac10ea6acd57b7775631f2e199229f389b8d3d75680d5dc4f4533376056e4751b41b9cd4a4e2f1fbd26a669b05daa42d6c913340dbed74f50528cb2e91078c9b4dd41b9f4a247b7e0ecced64ce41edacba87c118e5f4e72d588d0498b04668a1d1248075d7d556c9010ae0b8d7ec2a9a10baace34ccf4d63b9d6f0c7acd162452a76e69e98eb800b87c62da4b2868b070915aa6bb5d29ed703973d9cfa0cea07c33aa96b0922490999974b8e69d1a629a5f18961d19bba60f6f6a4cbd80c2b971e8766b4125d69ace6f86299ce4d14de8607b4002b800fc58830de7a84168ad5120f4e6f5a3023bc2df57d73a6cdc107d0e603922de188595330f602c45cd5eb78673191197a28d8888591e88c3c1a7a1ecccc543a5aab894ceddaa5b070568c14ee25e33e5ddf6756ff1f79fb6550bf4d8ac03875a81e53e932e6a7cbf539b4874b1dd763331f5b54161c20ab168c47e9c1a657809ac37383af391e65230f681556558f0098a8e6ffcffcd9978e98c6715f113d05561347bafe8821ee826221010cc191f24d1dfe5fe584fad5ac596af51cd8af043f88d040ed9db9417c35a142afc999a68d80fd10774e744688fb7448096ec39d26c40a45738e914b337491407a49dc7134f183c811c7dcc19f663d7eda957a9cfac818d8956f01a83ab2920bd0334461f4cd0463579ad8c43615e7b06bc05289e7fdd65cd02ec7ab1cc90e0743067016c769ec559f4af4d3a5d2b70f7c44c374e27f730e73b7da0c4b5549816e45326ac904da4d203261f97ab0f190f7c2a31c6919c80108a34d27473fcbe4595ea19e651ee02819e264f3f755c4da0232dce6277b8106fce3a65d956d3868d42c73bf380219a58690d241045baaf552dbcd9c6e5d9d3a2345f247eee04cd20e33c6100741f5b211898e0c92afceb2444dad8f773213172b0415f26237a74f00ac12c37fbd97ad2e525c0b2f28f03913b8af8e9daae97a15100ecaaf3acca8d88f46a8f3ffc505362c568d65cd955bed6d96abcea8bb5ac8e974be33e480b455692e562d064fdef63a21882341cbb7b63be926f0dbc09ba0f494e5be3de92269d6c984d2f1976da85e98a951467eff90b4d81bd13860d2fa6b22f0ff3ce14e76206710de8f567b611d86172119eb41357e60c26a9e9d1b1b9ab678744fd300ef672cd3301537cd7e7c5a1ae84f10a1e7eb7c9316ce72111e1ca6b1d9e2ce2c1ba35c471efff406a8e56fd2680f7bf5253866ce5ab14f07703c4142978070892b460a1b7bc5a49c499d416798ae2dd7a236a96e3e5b3b2898c9558336472709d02bb0d0aed29639234bbf3c8eba1168e5683cbd86f34136e64cb77f0a974e568e92c93827749aa976eea78d5365ac2bca05949ccc4bbab39d681ae8ef96de921d8f6fd3b9bcf890dfc3bf11079ed99d9d047d5ddf0d573d7cbf7badcdd4846b714fe276a7edec47ea253b2dd13275f2813d63f048ed370afc39a9cc2df286f9497d261d0d54f072aad73cb2573cbbcbd3e0cd61e8f757ebea62b5c0d9b325cb7479e0658f7ef1f4b5f46efc8e6c003ec141f104d1167217ec462776e3f65653a8680243fcf314015c12f05c8480f23a70df183eb6920e77ce72e1ab37a190ea3a57933fd3350e6f39d225bbf39921684bce52633543d6ad3f96b488a75482872643d51e7d1e73451afdbd5cd90b21394cad01d85c2fe9931cd9a94499c712f595591774bfa098d7c7b88dbbdaa58c91225c2f2795c4becdff6936867da047ba5f80259beeb1fddc4d2b64ad88ae5912efbb1ee705dcd423a4f5c62158aeddea49afd7fd1b76ba858fd8ba9ad6be0da82420ce70119167f157e8efea58addb5e81c7d667f01df26d3752b71f99b34e7456d018f4c5c8afc96c1f856096e7f11134f236fa6828d65e260bfae902956aec076d90d131501aa2e95aea1d2a778e6a059ac6c40668741a7684ef78bd62e5f7188073d37c6dd61e7c7f03ff9975cf686ae7ffe6ce1d0d6f95548a02c512f2c668ab2a0dce70502a09e04a9a0bd6aa00df78a192887d01452999a1acd7b8067a62a2d6ebdcef2f9161c1bf973f97374cdca8f420d8503682788cac015415bc382dfc2772360ea81904190b253c4b3eb7e73c67aaed3a50f85b30d0cf24ab77e9f108fe53f719ea969592aeaaf4bfb8293ea09bbdb99c06076f642244db7a17c352766d6ee05cad90c24757c53215049c3aed68f5f4bc4adee00f76335004c9a554166492a3aac18fc5423ba6a668556bf3b6b3c2a1ce698f8d2b309d0f70858e15a25015f7bf66431d91a9b8bd96f0ec2be9d448cf1d97f4c82478cb4fa07a1f97799b0fb13d73604410410d7b345c3f643e9d81287ce070e5a9216b3c453193493849d8ee2608e7d25b1563c5fade67404900a97cc075161e68ecd9060c056b42c08d82a8fa84fd8b410095932e1baed264e6d3eee0f08ba4621e341821d1b81bf4d7bac2d6c805055a37e3b2e4fff69fb13bfab7346de1fb39d50ebe5db38a8639af9ceec3e7908f1fb97823b7229e3dc6176b627a6f059452ef87a615f904d64078f7ed932f22d108a8cc0bee6fad1c79fb1d0f892475595ff3227aceb626e86a04febaa37a3a481695e3d397bf292579b25354a1771eab39efb454ff8b4517029db99f85e21e85534c894bed6acf3dfd9f6b8cb234f61bd83c7076bb3f150cfa69e5ea271effddb80ed1692afefbe77de18b1da3aabab30b3fdac0b9a8b31f7d335359d8364c806b09b8532d5666958022b201b4842ee3dd3427f930d6d5c4e11a31f987635e610886075084661b06099483fb2d050b727ac9bdf88915243f56485331b50f7cfab851a7a9e78a4c901bdba5d7c0466d598f6cfd06a5bb6891b9befa7b175e77d245d3e0d5586e92f337dc2819e009013a30bc81203a21954104a1f45a921bd0c743ea2f2eed52c5adca715148242597af8d1a0cd1c8268d9933fc211bb792389e54853f7da9769d634004f2391babc56b28e5ca8f5b81a02213dda97d4f481cb159d4d4741d18c9e5b2c05755a58d5172a79817f353a0bd459b5c8fb83a43073d739d7e957b477a0265e06ea225060eff43eb5ed632c053024c109525ef33700cfeb1d6431615ac79c33fe511b357c367c1081938d8bb7c18e5a62a7167f791c09d95e1beea1d02cf9929e95f918c3b82e9c3d5b7da940d94911955c17e9d591bb38834f254c87962cce760d01235e5162c238dfceb8ad384e9e4b9cbd0b828b86ef332f7e51cfba192633bbae02d7ce0bf2ed9eceac3b16370ba85129edd94423ad65fbf4bd9040a37e890e55b1db032d5880240f0957eba8585343810292af1d760cce1d1bec64ec53eb35589a99d627363339d3123fcd702ecf3b610bc3ae524911971a1f9bf66498f3023dc44dc6f90d18afa6d11ef1a6eaaadea84c86e5a2b63a3f652f0cd3740b86c08ecbfac6730a6083d4ba22fe40764ab021c6f5e258537cef6855bf5ccc4af7536acfdeea9fca306d5de6b3cbf178cdf6b03d1dd16b44a43f693a7e969b84122dcb66e136a0d1e0cacfe0f29fd298f04107e8169e391bb2cf0b6c67b8b761c36f97c2950544b9e48eeab17d7f696203149066ec6502fd476bb53421053b79bf67e400fabf5ec86ec63cecad1dccbd46cb32e4e8e7566c68f5e5305d9cb0804b5a2179a401f1bf8dee8d460086a429b2a45e4c80878948d21f9db4d358a962b5d047e7d72ba6ed46772ad3a408ffdcfb9cab3f17bd33654389bfbc42734a32af6d3cf21e67ba1b5c143a3473ac4183de9c23fbd0c2049cff0785d32bfb99bbfe2c2102c67eb7428357c2cd099f13361c413ab154e00ec6013b1a3d9057ff9099db6bde1da770b5fb71a78358e19aa6e1cb48eb9af388ec12723eea840ff7f6ee274f8554484becc3d979750fd84c638096d2fbd9b86f77ba377e478019fed882139267d70addee0815fc109d8c79c0b42263cec264f1621e16f044781ab367b41f4a0d9d68758391d4f66cf6b0609d20d5e65e1c0398bde45d680d18a7b06a523fe4f69d168393c7e59e2509a6ad45dc6243f60b6039740fb33a15dd2d541b36b4c7bc9ee249c128a0d74bec21f7f5fe72dcca725e1ad91dc5c8f98dbe2e3298a99e820e22b020031236fad2797ef284d95b163741141f1651d2cb74162aca91344efffefe1a85c10f11ddbfd353edff802fb3b2e4f5c311a172ae31f5f3fe6c75dcd4877b1642ffd54d5a0a0086cecbfae62e8c6ff1824c1690437abc7a8da91e8f96b29401a19cb8435ddc2af9a2d59674d56bf7ff862c2908854883e3d2240f61ccc24cc3d0fa8ef1a146c18f4889a4d98749305e5ade716bbc6d69d670141ff141b9612f22cf7cfca30f6992805e655d68df08ac19c2fa0e7503913572cbeb3bc894bcd47887b43e5badeb40a1ab5a27fa95d6323663d25205ddc00871b57324d8fc50191e02f964b8944690582fc71ab322a0e0902dddd5f951279bb65ce372d689d12788a05ab17617597b74feca8e876a648f1815e842939682f9c94da55300172801a20ea497d3511840dc6fef80ce868747eda45ec3e436693509be476707de58d23c3b3b7417b631d2ee9a17b5f391bbe05accbf918fcd5533363c08ec0495468a4e96874a04efbc3f592acc196058b73101a8218b6e5875e6f8cff6993b53223a83deeef711255bb900145ec0b6acd113c50b15cc82f945512824f483f62fbae559cb85f4c39e0710b73b5c0b8c35424e41940e6681b3076080a8adeab1b02bf570f33c6f1e4e4ff5b5099ee7158104348fb006fcbf74abc4c3b53dc1ff0572c53a4c60e3f0915780bc931841e73deeb33834f33ddcd247ae457879d4b81b98247165244accaab1c5bb8c43418fda228f0ce60867ca1dc8c4ceb4e3c12b9eeef756fdb40e4c3944c8d62b909c5f60519c105549b97500a633769137ac1fb1d0496f8e7ca9b0062d5e347c9a11da65f832ef01033502d5e5646a98399ac31642dbe46c02b964094c48b710981e2346aa66a19f6852be1b1a87d18d78cb185f723cf211b9ff4b42ac62e578fea94b1f48e64b24509c290719592675f0334831c313129a5970d68380141d230b230f66213c32705cc96e7f1895bad6cbf2bd2137e3ebf9d76b42abadaa35171d8255a9afb22199fbc2b8a1322219c46a6ba96244d42f1da2a8428003f44e678fc50b2f63cca3abb81c505a68c794db855afb496c1082b431974d4564c80caad5e1b4c0c8b2e76c749a4d5ddf2490a7c80cd64cae9b17c0246314b55d696f28dbdd5601d0255b294fbaec0c42b57d49506999af7a6f9e0ab9014ebb91fe623dabebcfbf9261774c6376fad7a2e4bb18ee709aac8d81d249b2794c5b515a633526c00527a55af1cdaf9650e70315955d6399364c484c7545373ca4d75bf7f6c00e4752a0a65fe150d49e35b478b5202ce00587a4f18521879868535ad908f43d2ae4c503121de0d22ce93d2cb6b651251010b856f06f", "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"}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000200)={0x81, 0xc000000, {}, {0xffffffffffffffff}, 0x58, 0x8000}) 2.811862296s ago: executing program 3 (id=174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x58b2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x489, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000240)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6], 0x120}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r9 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x9, 0x0, 0x400, 0x6, 0xfff, 0x3ff, 0x40}, 0x1c) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f0000000140)=""/56, &(0x7f0000000180)=0x38) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x65, 0x0, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x262, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 2.10397569s ago: executing program 1 (id=175): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0000000210001000000000000000000e000000100000000000000000000008eaac60b000000000200000000000000014e210000d52963dcf07357b9dab5d8433d000000000a000000ff0000005d194e24c5c947ad1375a9befc402acb9b2a502664c725814502aff4f2c5163ccac02d2bf58712", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000203c0000000000000008"], 0xa0}}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25170000001c00068015000300ddab7a6be74e9a479a0df763692750c8190000002400068008000600080000000400050004000500080001004c140000080006"], 0x164}, 0x1, 0x0, 0x0, 0x4005}, 0x12) 1.922256343s ago: executing program 2 (id=176): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x18, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x2, 0x1, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) close(0xffffffffffffffff) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) 1.53497267s ago: executing program 1 (id=177): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x6, 0x1, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 887.855603ms ago: executing program 4 (id=178): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x6, 0x1, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) 464.279701ms ago: executing program 3 (id=179): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 428.884592ms ago: executing program 5 (id=134): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000), 0x0) r2 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000005440)={0x0, 0x0, &(0x7f0000005400)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4008040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x11) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 199.887556ms ago: executing program 3 (id=180): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000002440)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 199.411516ms ago: executing program 5 (id=181): r0 = syz_io_uring_setup(0x472b, &(0x7f00000002c0)={0x0, 0x18bc, 0x4, 0x1, 0x375}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59004"]) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_SHUTDOWN={0x22, 0x6, 0x0, r3, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r8}}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44890) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x59555956}}) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r9, &(0x7f0000000040), 0x0) 0s ago: executing program 5 (id=182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcb}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000280)={0xffff, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x9, 0x6}) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 57.073639][ T4171] cgroup: Unknown subsys name 'net' [ 57.206933][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.694337][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.192596][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.255999][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.276498][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.354778][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.396476][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.403837][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.412888][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.425618][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.432954][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.441019][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.465935][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.509463][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.516848][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.525056][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.544516][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.551899][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.560350][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.572815][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.580225][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.588399][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.595464][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.602671][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.610554][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.630717][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.642496][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.699527][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.727864][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.738627][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.758542][ T4186] team0: Port device team_slave_0 added [ 60.773240][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.791209][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.798666][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.806500][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.815697][ T4186] team0: Port device team_slave_1 added [ 60.853245][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.860644][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.869027][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.884785][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.892128][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.900271][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.917881][ T4184] team0: Port device team_slave_0 added [ 60.925625][ T4185] team0: Port device team_slave_0 added [ 60.941610][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.948862][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.975303][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.987468][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.994547][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.002816][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.011994][ T4184] team0: Port device team_slave_1 added [ 61.019573][ T4185] team0: Port device team_slave_1 added [ 61.039637][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.046663][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.072646][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.107694][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.136126][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.143318][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.169403][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.182865][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.204166][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.213873][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.221729][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.248382][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.265889][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.273059][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.299285][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.325708][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.335751][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.343440][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.369711][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.394176][ T4183] team0: Port device team_slave_0 added [ 61.402374][ T4183] team0: Port device team_slave_1 added [ 61.430211][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.437463][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.462588][ T4182] team0: Port device team_slave_0 added [ 61.471529][ T4182] team0: Port device team_slave_1 added [ 61.478304][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.485262][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.511691][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.523933][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.531052][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.557083][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.618143][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.624870][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.632058][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.639985][ T4184] Cannot create hsr debugfs directory [ 61.663978][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.671227][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.678331][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.685980][ T4185] Cannot create hsr debugfs directory [ 61.703289][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.710530][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.737162][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.750262][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.757542][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.783657][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.855329][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.862175][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.869234][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.876915][ T4183] Cannot create hsr debugfs directory [ 61.887668][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 61.894670][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 61.897178][ T1112] Bluetooth: hci3: command 0x0409 tx timeout [ 61.901718][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 61.926205][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 61.979817][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.986514][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.993456][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.001370][ T4182] Cannot create hsr debugfs directory [ 62.237133][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.250248][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.260864][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.270460][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.320304][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.333260][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.342841][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.360730][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.430285][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.442072][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.470416][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.483175][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.547844][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.557022][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.568306][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.579684][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.604188][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.618216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.628555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.640044][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.690950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.700965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.710878][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.718198][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.732894][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.741214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.750450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.760089][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.767231][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.775161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.791775][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.803435][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.834236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.844048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.858769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.871123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.879339][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.891775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.901607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.924211][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.932616][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.986013][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.997983][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.011246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.024071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.033379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.042208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.051416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.059584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.068243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.086301][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.095035][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.118755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.128754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.138851][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.145942][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.163457][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.205472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.213795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.223248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.233036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.243755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.252714][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.259838][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.268602][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.278633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.288019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.297465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.306088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.318426][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.327680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.338699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.377014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.389685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.398264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.415070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.424546][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.431715][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.441081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.450211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.459419][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.466494][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.475118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.497338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.505609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.514365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.525654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.534733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.543819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.555011][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.575587][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.584900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.594705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.611704][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.624540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.638613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.646120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.692388][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.706062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.716397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.725951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.734743][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.743659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.753036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.762558][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.769678][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.778427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.787935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.796367][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.803517][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.812196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.821776][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.830589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.838968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.847090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.854928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.866115][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.879337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.897594][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.967178][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 63.967888][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 63.980938][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 63.988526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.002697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.012590][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 64.019314][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.026390][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.033983][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 64.035729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.050402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.059203][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.066272][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.074053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.084269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.093052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.102374][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.111198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.119890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.128492][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.137769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.146088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.160823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.170627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.190736][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.205144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.215215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.281824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.291357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.301513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.311969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.321799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.331139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.340410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.350693][ T4185] device veth0_vlan entered promiscuous mode [ 64.364590][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.388446][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.396322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.404684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.413015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.423228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.430995][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.438756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.452630][ T4185] device veth1_vlan entered promiscuous mode [ 64.464666][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.501667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.514921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.536434][ T4185] device veth0_macvtap entered promiscuous mode [ 64.565247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.577341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.586051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.596190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.608115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.616973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.626445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.634977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.643669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.655099][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.668060][ T4185] device veth1_macvtap entered promiscuous mode [ 64.704822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.715091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.724999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.732765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.741155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.750104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.758282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.771658][ T4184] device veth0_vlan entered promiscuous mode [ 64.782047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.791167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.812449][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.830755][ T4184] device veth1_vlan entered promiscuous mode [ 64.849053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.865838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.874206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.892061][ T4186] device veth0_vlan entered promiscuous mode [ 64.910441][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.932003][ T4186] device veth1_vlan entered promiscuous mode [ 64.947072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.955158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.970928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.983951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.999684][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.017887][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.027215][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.035931][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.045124][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.065007][ T4184] device veth0_macvtap entered promiscuous mode [ 65.075596][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.084298][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.094240][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.103120][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.112159][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.156157][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.165549][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.178515][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.192681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.201173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.218867][ T4184] device veth1_macvtap entered promiscuous mode [ 65.234389][ T4183] device veth0_vlan entered promiscuous mode [ 65.243820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.253154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.262368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.271048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.279513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.291741][ T4186] device veth0_macvtap entered promiscuous mode [ 65.302265][ T4186] device veth1_macvtap entered promiscuous mode [ 65.331810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.340838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.350695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.359129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.375849][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.405657][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.434009][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.446353][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.467130][ T4183] device veth1_vlan entered promiscuous mode [ 65.485473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.494581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.505059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.514145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.534816][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.551444][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.563342][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.611837][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.625100][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.629654][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.643302][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.645231][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.655338][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.674059][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.682160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.691678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.700962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.710334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.719130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.727114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.735930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.749197][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.758345][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.767480][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.776398][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.790316][ T4183] device veth0_macvtap entered promiscuous mode [ 65.817502][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.836207][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.846495][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.858050][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.869432][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.892045][ T4183] device veth1_macvtap entered promiscuous mode [ 65.907384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.915594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.928235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.937555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.948867][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.959225][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.968531][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.977338][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.994159][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.010232][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.019981][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.022539][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.050498][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 66.058961][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 66.065109][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 66.066072][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.072151][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 66.085349][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 66.102887][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.113631][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.123874][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.135804][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.145934][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.156996][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.168700][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.178661][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.189299][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.200973][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.212776][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.222671][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.233225][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.245236][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.267431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.276193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.294577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.310809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.348509][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.358789][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.373923][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.394517][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.437696][ T4293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.459374][ T4182] device veth0_vlan entered promiscuous mode [ 66.467306][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.482617][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.493663][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.514060][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.594184][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.624449][ T4182] device veth1_vlan entered promiscuous mode [ 66.628533][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.649876][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.678377][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.689234][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.707534][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.723285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.727135][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.740463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.756487][ T4297] netlink: 'syz.0.6': attribute type 2 has an invalid length. [ 66.776253][ T4297] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6'. [ 66.793191][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.793210][ T4182] device veth0_macvtap entered promiscuous mode [ 66.830765][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.840803][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.841527][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.857700][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.876109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.923034][ T4182] device veth1_macvtap entered promiscuous mode [ 66.954377][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.964091][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.969731][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.975929][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.994411][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.004239][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.016745][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.024401][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.024417][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.024434][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.024447][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.024459][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.075321][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.092283][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.124137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.134570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.142774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.157945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.167948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.188634][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.205054][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.228844][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.243562][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.255370][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.275219][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.290359][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.301386][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.320787][ T4235] usb 1-1: Using ep0 maxpacket: 8 [ 67.334067][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.357898][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.377384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.402220][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.413858][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.426948][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.437205][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.460603][ T4235] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 67.470793][ T4235] usb 1-1: config 179 has no interface number 0 [ 67.483724][ T4235] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 67.507605][ T4235] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 67.578018][ T4235] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 67.651922][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.680475][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.681394][ T4309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.704791][ T4235] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 67.723189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.772114][ T4313] process 'syz.1.7' launched './file1' with NULL argv: empty string added [ 67.788582][ T4235] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 67.829129][ T4235] usb 1-1: config 179 interface 65 has no altsetting 0 [ 67.851153][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.865511][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.880218][ T4235] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 67.896804][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.897166][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.013815][ T4235] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 68.127441][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 68.127491][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 68.127519][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 68.127547][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 68.127575][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 68.413886][ T4295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 68.418596][ T4235] usb 1-1: USB disconnect, device number 2 [ 68.427758][ T4235] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 68.571634][ T4309] device hsr0 entered promiscuous mode [ 68.574197][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 68.576073][ T4309] device hsr_slave_0 left promiscuous mode [ 68.594452][ T4309] device hsr_slave_1 left promiscuous mode [ 68.793607][ T4309] device hsr0 left promiscuous mode [ 69.021976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.109242][ T4333] ptrace attach of "./syz-executor exec"[4182] was attempted by "./syz-executor exec"[4333] [ 69.656688][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.817129][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.917257][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 70.011040][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8'. [ 70.048246][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 23: 48, using maximum allowed: 30 [ 70.111679][ T23] usb 1-1: config 0 interface 0 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 70.195093][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 70.367066][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.436851][ T23] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 70.445910][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.506825][ T23] usb 1-1: Product: syz [ 70.511181][ T23] usb 1-1: Manufacturer: syz [ 70.574353][ T23] usb 1-1: SerialNumber: syz [ 70.609936][ T23] usb 1-1: config 0 descriptor?? [ 70.957149][ T4342] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 70.998071][ T4342] udc-core: couldn't find an available UDC or it's busy [ 71.023917][ T4342] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.078814][ T23] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 71.109599][ T23] usb 1-1: Detected FT232H [ 71.146764][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 71.186961][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 71.216801][ T23] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 71.249995][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.256688][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.275186][ T23] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 71.312131][ T23] usb 1-1: USB disconnect, device number 3 [ 71.348394][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 71.371931][ T23] ftdi_sio 1-1:0.0: device disconnected [ 71.479828][ T4354] loop6: detected capacity change from 0 to 524288000 [ 71.567498][ T4358] loop_set_status: loop6 ( 6tPΪŔA8*V^3c) has still dirty pages (nrpages=2) [ 71.638493][ T4359] mmap: syz.1.16 (4359) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 71.986792][ T4366] syz.0.17 sent an empty control message without MSG_MORE. [ 72.326675][ T4296] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 72.446492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 72.456186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.466623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 72.475649][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 72.484724][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 72.726836][ T4296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.747502][ T4296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 72.774346][ T4296] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 72.793934][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.825783][ T4296] usb 5-1: config 0 descriptor?? [ 72.878403][ T4296] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 72.885233][ T4296] dvb-usb: bulk message failed: -22 (3/0) [ 72.924440][ T4296] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 72.978031][ T4296] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 72.995946][ T4296] usb 5-1: media controller created [ 73.003650][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.058207][ T4296] dvb-usb: bulk message failed: -22 (6/0) [ 73.076317][ T4296] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 73.137737][ T4296] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 73.180166][ T4296] dvb-usb: schedule remote query interval to 150 msecs. [ 73.190337][ T4385] dvb-usb: bulk message failed: -22 (2/0) [ 73.207578][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 73.221703][ T4296] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 73.379200][ T4296] dvb-usb: bulk message failed: -22 (1/0) [ 73.387818][ T4296] dvb-usb: error while querying for an remote control event. [ 73.578687][ T4296] dvb-usb: bulk message failed: -22 (1/0) [ 73.597129][ T4296] dvb-usb: error while querying for an remote control event. [ 73.776684][ T4296] dvb-usb: bulk message failed: -22 (1/0) [ 73.802826][ T4296] dvb-usb: error while querying for an remote control event. [ 74.004390][ T4296] dvb-usb: bulk message failed: -22 (1/0) [ 74.010339][ T4296] dvb-usb: error while querying for an remote control event. [ 74.057291][ T4296] usb 5-1: USB disconnect, device number 2 [ 74.233525][ T4296] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 75.054754][ T26] audit: type=1326 audit(1758413333.844:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.0.38" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10471e9c29 code=0x0 [ 75.518418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.037844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 76.783620][ T4481] netlink: 'syz.3.50': attribute type 4 has an invalid length. [ 80.728682][ T26] audit: type=1326 audit(1758413339.524:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 80.892668][ T26] audit: type=1326 audit(1758413339.524:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 81.007587][ T26] audit: type=1326 audit(1758413339.524:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 81.129255][ T26] audit: type=1326 audit(1758413339.564:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 81.163527][ T4537] netlink: 104 bytes leftover after parsing attributes in process `syz.0.67'. [ 81.231892][ T26] audit: type=1326 audit(1758413339.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 81.357197][ T26] audit: type=1326 audit(1758413339.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 81.518398][ T26] audit: type=1326 audit(1758413339.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 81.671751][ T26] audit: type=1326 audit(1758413339.564:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 81.776648][ T26] audit: type=1326 audit(1758413339.564:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 81.916741][ T26] audit: type=1326 audit(1758413339.574:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0932b30e09 code=0x7ffc0000 [ 83.006332][ T4568] tipc: Started in network mode [ 83.052385][ T4568] tipc: Node identity 667790e32af, cluster identity 4711 [ 83.108749][ T4568] tipc: Enabled bearer , priority 0 [ 83.126912][ T4570] device syzkaller0 entered promiscuous mode [ 83.232263][ T4572] vivid-001: disconnect [ 83.282902][ T4571] vivid-001: reconnect [ 83.296914][ T4567] tipc: Resetting bearer [ 83.484069][ T4567] tipc: Disabling bearer [ 83.549975][ T4575] netlink: 156 bytes leftover after parsing attributes in process `syz.3.82'. [ 83.782058][ T4579] syz.1.84[4579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.782254][ T4579] syz.1.84[4579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.126714][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.231077][ T4599] netlink: 'syz.3.91': attribute type 12 has an invalid length. [ 84.436660][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 84.576950][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.593789][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.604203][ T23] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 84.651990][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.707512][ T23] usb 5-1: config 0 descriptor?? [ 85.198499][ T23] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 85.205425][ T23] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 85.243647][ T23] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 85.396899][ T23] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 85.495634][ T4622] tipc: Started in network mode [ 85.526879][ T4622] tipc: Node identity 4, cluster identity 4711 [ 85.533224][ T4622] tipc: Node number set to 4 [ 85.826958][ T23] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 86.092002][ T4585] ft260 0003:0403:6030.0001: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 86.386970][ T4585] ft260 0003:0403:6030.0001: failed to reset I2C controller: -108 [ 86.416019][ T4585] ft260 0003:0403:6030.0001: ft260_i2c_write: failed to start transfer, ret -38 [ 86.609446][ T1326] cfg80211: failed to load regulatory.db [ 87.210579][ T13] usb 5-1: USB disconnect, device number 3 [ 89.097503][ T4689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'. [ 89.813638][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.879536][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.955226][ T4697] bond0 (unregistering): Released all slaves [ 89.979031][ T4706] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 90.291037][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 90.303004][ T4715] device bridge_slave_1 left promiscuous mode [ 90.311326][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.332333][ T4715] device bridge_slave_0 left promiscuous mode [ 90.342189][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.022964][ T4185] syz-executor (4185) used greatest stack depth: 20896 bytes left [ 91.088303][ T4723] fuse: root generation should be zero [ 91.149219][ T4311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.325354][ T4311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.477852][ T4311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.636002][ T4311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.022713][ T4742] chnl_net:caif_netlink_parms(): no params data found [ 93.311000][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.344783][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.382789][ T4742] device bridge_slave_0 entered promiscuous mode [ 93.432061][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.463573][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.487202][ T4742] device bridge_slave_1 entered promiscuous mode [ 93.688225][ T4742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.804071][ T4742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.948240][ T4311] device hsr_slave_0 left promiscuous mode [ 93.974812][ T4311] device hsr_slave_1 left promiscuous mode [ 94.005723][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.037613][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.078195][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.102672][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.132686][ T4311] device bridge_slave_1 left promiscuous mode [ 94.150187][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.199507][ T4311] device bridge_slave_0 left promiscuous mode [ 94.206819][ T4243] Bluetooth: hci3: command 0x0409 tx timeout [ 94.224038][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.338558][ T4311] device veth1_macvtap left promiscuous mode [ 94.349738][ T4311] device veth0_macvtap left promiscuous mode [ 94.366215][ T4311] device veth1_vlan left promiscuous mode [ 94.378423][ T4311] device veth0_vlan left promiscuous mode [ 95.327533][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 95.352570][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 95.782415][ T4742] team0: Port device team_slave_0 added [ 95.801696][ T4742] team0: Port device team_slave_1 added [ 95.916801][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.977008][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.075975][ T4742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.102226][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.119692][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.275006][ T4742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.286872][ T1326] Bluetooth: hci3: command 0x041b tx timeout [ 96.508589][ T4742] device hsr_slave_0 entered promiscuous mode [ 96.550497][ T4742] device hsr_slave_1 entered promiscuous mode [ 96.580631][ T4742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.639859][ T4742] Cannot create hsr debugfs directory [ 97.531708][ T4742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.589551][ T4742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.647689][ T4742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.676991][ T4742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.258432][ T4742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.361261][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.367126][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 98.444606][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.472569][ T4742] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.507777][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.521193][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.551868][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.558981][ T4515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.627428][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.655450][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.703297][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.734274][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.741538][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.784915][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.851526][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.889654][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.957191][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.997783][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.050895][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.091834][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.128891][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.212312][ T4742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.246304][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.295046][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.313375][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.369755][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.015139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.037011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.116948][ T4742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.447625][ T1326] Bluetooth: hci3: command 0x0419 tx timeout [ 101.082707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.123118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.310002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.360855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.421552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.458456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.521808][ T4742] device veth0_vlan entered promiscuous mode [ 101.664305][ T4742] device veth1_vlan entered promiscuous mode [ 101.796460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.827148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.895944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.937985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.989751][ T4742] device veth0_macvtap entered promiscuous mode [ 102.011402][ T4742] device veth1_macvtap entered promiscuous mode [ 102.094472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.118388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.258167][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.305265][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.356308][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.402499][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.429788][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.471616][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.500456][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.517444][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.517634][ T4947] netlink: 272 bytes leftover after parsing attributes in process `syz.1.175'. [ 102.536233][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.560797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.596368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.634672][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.670172][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.704787][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.750195][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.775121][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.791537][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.801924][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.818987][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.844820][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.876840][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.916132][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.999852][ T4742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.056707][ T4742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.081576][ T4742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.096784][ T4742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.618387][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.637074][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.790206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.842225][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.874850][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.909934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.746355][ T4995] [ 104.748732][ T4995] ====================================================== [ 104.755763][ T4995] WARNING: possible circular locking dependency detected [ 104.762798][ T4995] syzkaller #0 Not tainted [ 104.767297][ T4995] ------------------------------------------------------ [ 104.774328][ T4995] syz.5.182/4995 is trying to acquire lock: [ 104.780215][ T4995] ffff88807e518120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 104.789796][ T4995] [ 104.789796][ T4995] but task is already holding lock: [ 104.797150][ T4995] ffffc90001878ea8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 104.806715][ T4995] [ 104.806715][ T4995] which lock already depends on the new lock. [ 104.806715][ T4995] [ 104.817136][ T4995] [ 104.817136][ T4995] the existing dependency chain (in reverse order) is: [ 104.826147][ T4995] [ 104.826147][ T4995] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 104.834048][ T4995] _raw_spin_lock+0x2a/0x40 [ 104.839083][ T4995] __inet_hash+0xe3/0x960 [ 104.844084][ T4995] inet_csk_listen_start+0x22f/0x320 [ 104.849904][ T4995] inet_listen+0x2e1/0x590 [ 104.854867][ T4995] __sys_listen+0x19d/0x220 [ 104.859982][ T4995] __x64_sys_listen+0x56/0x60 [ 104.865182][ T4995] do_syscall_64+0x4c/0xa0 [ 104.870137][ T4995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.876650][ T4995] [ 104.876650][ T4995] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 104.884460][ T4995] __lock_acquire+0x2c33/0x7c60 [ 104.889837][ T4995] lock_acquire+0x197/0x3f0 [ 104.894876][ T4995] mptcp_diag_get_info+0x1db/0x990 [ 104.900507][ T4995] inet_sk_diag_fill+0xef6/0x1b50 [ 104.906054][ T4995] mptcp_diag_dump+0xcca/0x1290 [ 104.911421][ T4995] __inet_diag_dump+0x1f6/0x380 [ 104.916815][ T4995] netlink_dump+0x676/0xcd0 [ 104.921833][ T4995] __netlink_dump_start+0x523/0x700 [ 104.927555][ T4995] inet_diag_handler_cmd+0x1be/0x290 [ 104.933381][ T4995] sock_diag_rcv_msg+0x164/0x3e0 [ 104.938849][ T4995] netlink_rcv_skb+0x1e0/0x430 [ 104.944139][ T4995] sock_diag_rcv+0x26/0x40 [ 104.949078][ T4995] netlink_unicast+0x774/0x920 [ 104.954375][ T4995] netlink_sendmsg+0x8ab/0xbc0 [ 104.959664][ T4995] sock_write_iter+0x29c/0x380 [ 104.964950][ T4995] do_iter_readv_writev+0x497/0x600 [ 104.970668][ T4995] do_iter_write+0x205/0x7b0 [ 104.975775][ T4995] do_writev+0x254/0x410 [ 104.980559][ T4995] do_syscall_64+0x4c/0xa0 [ 104.985504][ T4995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.991925][ T4995] [ 104.991925][ T4995] other info that might help us debug this: [ 104.991925][ T4995] [ 105.002149][ T4995] Possible unsafe locking scenario: [ 105.002149][ T4995] [ 105.009596][ T4995] CPU0 CPU1 [ 105.015254][ T4995] ---- ---- [ 105.020617][ T4995] lock(&h->lhash2[i].lock); [ 105.025299][ T4995] lock(sk_lock-AF_INET6); [ 105.032320][ T4995] lock(&h->lhash2[i].lock); [ 105.039513][ T4995] lock(sk_lock-AF_INET6); [ 105.044015][ T4995] [ 105.044015][ T4995] *** DEADLOCK *** [ 105.044015][ T4995] [ 105.052149][ T4995] 6 locks held by syz.5.182/4995: [ 105.057166][ T4995] #0: ffffffff8d241b28 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 105.066476][ T4995] #1: ffffffff8d2419e8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 105.076845][ T4995] #2: ffff888077dc9690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 105.087548][ T4995] #3: ffffffff8d31be88 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 105.097859][ T4995] #4: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 105.107172][ T4995] #5: ffffc90001878ea8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 105.117176][ T4995] [ 105.117176][ T4995] stack backtrace: [ 105.123144][ T4995] CPU: 1 PID: 4995 Comm: syz.5.182 Not tainted syzkaller #0 [ 105.130427][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.140592][ T4995] Call Trace: [ 105.143870][ T4995] [ 105.146800][ T4995] dump_stack_lvl+0x168/0x230 [ 105.151478][ T4995] ? load_image+0x3b0/0x3b0 [ 105.156005][ T4995] ? show_regs_print_info+0x20/0x20 [ 105.161203][ T4995] ? print_circular_bug+0x12b/0x1a0 [ 105.166509][ T4995] check_noncircular+0x274/0x310 [ 105.171459][ T4995] ? add_chain_block+0x940/0x940 [ 105.176394][ T4995] ? lockdep_lock+0xdc/0x1e0 [ 105.181010][ T4995] ? mark_lock+0x94/0x320 [ 105.185522][ T4995] __lock_acquire+0x2c33/0x7c60 [ 105.190388][ T4995] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 105.196374][ T4995] ? verify_lock_unused+0x140/0x140 [ 105.201580][ T4995] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 105.207651][ T4995] ? verify_lock_unused+0x140/0x140 [ 105.212858][ T4995] ? __local_bh_enable_ip+0xcb/0x1b0 [ 105.218143][ T4995] ? __local_bh_enable_ip+0x12a/0x1b0 [ 105.223512][ T4995] ? lockdep_hardirqs_on+0x94/0x140 [ 105.228709][ T4995] ? __local_bh_enable_ip+0x12a/0x1b0 [ 105.234269][ T4995] ? _local_bh_enable+0xa0/0xa0 [ 105.239123][ T4995] ? skb_put+0x117/0x210 [ 105.243371][ T4995] lock_acquire+0x197/0x3f0 [ 105.247899][ T4995] ? inet_sk_diag_fill+0xef6/0x1b50 [ 105.253103][ T4995] ? read_lock_is_recursive+0x10/0x10 [ 105.258567][ T4995] ? rcu_lock_release+0x5/0x20 [ 105.263326][ T4995] ? __lock_acquire+0x7c60/0x7c60 [ 105.268358][ T4995] ? inet_sk_diag_fill+0xef6/0x1b50 [ 105.273658][ T4995] mptcp_diag_get_info+0x1db/0x990 [ 105.278780][ T4995] ? inet_sk_diag_fill+0xef6/0x1b50 [ 105.283992][ T4995] inet_sk_diag_fill+0xef6/0x1b50 [ 105.289024][ T4995] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 105.294746][ T4995] ? do_raw_spin_lock+0x11d/0x280 [ 105.299769][ T4995] ? inet_diag_bc_sk+0x187/0x10c0 [ 105.304798][ T4995] ? security_capable+0x85/0xb0 [ 105.309769][ T4995] mptcp_diag_dump+0xcca/0x1290 [ 105.314642][ T4995] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 105.321238][ T4995] __inet_diag_dump+0x1f6/0x380 [ 105.326096][ T4995] netlink_dump+0x676/0xcd0 [ 105.330698][ T4995] ? netlink_lookup+0x1d0/0x1d0 [ 105.335548][ T4995] ? __inet_diag_dump_start+0x805/0x970 [ 105.341095][ T4995] __netlink_dump_start+0x523/0x700 [ 105.346306][ T4995] inet_diag_handler_cmd+0x1be/0x290 [ 105.351605][ T4995] ? rcu_lock_release+0x20/0x20 [ 105.356455][ T4995] ? inet_diag_handler_get_info+0xb80/0xb80 [ 105.362347][ T4995] ? inet_diag_dump_start+0x20/0x20 [ 105.367542][ T4995] ? inet_diag_dump+0x50/0x50 [ 105.372233][ T4995] ? dev_queue_xmit+0x20/0x20 [ 105.376909][ T4995] ? memcpy+0x3c/0x60 [ 105.380890][ T4995] ? sock_diag_rcv+0x17/0x40 [ 105.385491][ T4995] ? sock_diag_rcv+0x17/0x40 [ 105.390164][ T4995] ? rcu_lock_release+0x20/0x20 [ 105.395028][ T4995] sock_diag_rcv_msg+0x164/0x3e0 [ 105.400148][ T4995] netlink_rcv_skb+0x1e0/0x430 [ 105.404927][ T4995] ? sock_diag_bind+0xa0/0xa0 [ 105.409626][ T4995] ? netlink_ack+0xb60/0xb60 [ 105.414218][ T4995] ? __lock_acquire+0x7c60/0x7c60 [ 105.419389][ T4995] sock_diag_rcv+0x26/0x40 [ 105.423825][ T4995] netlink_unicast+0x774/0x920 [ 105.428596][ T4995] netlink_sendmsg+0x8ab/0xbc0 [ 105.433376][ T4995] ? netlink_getsockopt+0x560/0x560 [ 105.438573][ T4995] ? aa_sock_msg_perm+0x94/0x150 [ 105.443517][ T4995] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 105.448805][ T4995] ? security_socket_sendmsg+0x7c/0xa0 [ 105.454281][ T4995] sock_write_iter+0x29c/0x380 [ 105.459055][ T4995] ? sock_read_iter+0x340/0x340 [ 105.463926][ T4995] do_iter_readv_writev+0x497/0x600 [ 105.469134][ T4995] ? generic_file_rw_checks+0x280/0x280 [ 105.474824][ T4995] ? common_file_perm+0x171/0x1c0 [ 105.479856][ T4995] ? fsnotify_perm+0x5d/0x560 [ 105.484537][ T4995] ? security_file_permission+0x75/0xa0 [ 105.490096][ T4995] do_iter_write+0x205/0x7b0 [ 105.494725][ T4995] ? import_iovec+0x6f/0xa0 [ 105.499232][ T4995] do_writev+0x254/0x410 [ 105.503500][ T4995] ? do_readv+0x3e0/0x3e0 [ 105.507853][ T4995] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 105.513843][ T4995] ? lock_chain_count+0x20/0x20 [ 105.518713][ T4995] ? vtime_user_exit+0x2dc/0x400 [ 105.523650][ T4995] ? lockdep_hardirqs_on+0x94/0x140 [ 105.528873][ T4995] do_syscall_64+0x4c/0xa0 [ 105.533287][ T4995] ? clear_bhb_loop+0x30/0x80 [ 105.537975][ T4995] ? clear_bhb_loop+0x30/0x80 [ 105.542737][ T4995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.548639][ T4995] RIP: 0033:0x7fa75ae90c29 [ 105.553052][ T4995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.572653][ T4995] RSP: 002b:00007fa7590f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 105.581066][ T4995] RAX: ffffffffffffffda RBX: 00007fa75b0d7fa0 RCX: 00007fa75ae90c29 [ 105.589145][ T4995] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000007 [ 105.597139][ T4995] RBP: 00007fa75af13e41 R08: 0000000000000000 R09: 0000000000000000 [ 105.605115][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.613107][ T4995] R13: 00007fa75b0d8038 R14: 00007fa75b0d7fa0 R15: 00007ffd016175e8 [ 105.621084][ T4995] [ 105.625417][ T4995] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 105.634894][ T4995] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4995, name: syz.5.182 [ 105.643876][ T4995] INFO: lockdep is turned off. [ 105.648652][ T4995] Preemption disabled at: [ 105.648659][ T4995] [<0000000000000000>] 0x0 [ 105.657408][ T4995] CPU: 1 PID: 4995 Comm: syz.5.182 Not tainted syzkaller #0 [ 105.664698][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.674766][ T4995] Call Trace: [ 105.678061][ T4995] [ 105.680990][ T4995] dump_stack_lvl+0x168/0x230 [ 105.685678][ T4995] ? show_regs_print_info+0x20/0x20 [ 105.690871][ T4995] ? load_image+0x3b0/0x3b0 [ 105.695383][ T4995] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 105.701548][ T4995] ___might_sleep+0x47c/0x600 [ 105.706231][ T4995] ? __might_sleep+0xf0/0xf0 [ 105.710825][ T4995] ? read_lock_is_recursive+0x10/0x10 [ 105.716195][ T4995] ? rcu_lock_release+0x5/0x20 [ 105.720967][ T4995] __lock_sock_fast+0x2f/0xe0 [ 105.725706][ T4995] ? inet_sk_diag_fill+0xef6/0x1b50 [ 105.730927][ T4995] mptcp_diag_get_info+0x1e7/0x990 [ 105.736047][ T4995] inet_sk_diag_fill+0xef6/0x1b50 [ 105.741072][ T4995] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 105.746790][ T4995] ? do_raw_spin_lock+0x11d/0x280 [ 105.751849][ T4995] ? inet_diag_bc_sk+0x187/0x10c0 [ 105.756869][ T4995] ? security_capable+0x85/0xb0 [ 105.761717][ T4995] mptcp_diag_dump+0xcca/0x1290 [ 105.766580][ T4995] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 105.773328][ T4995] __inet_diag_dump+0x1f6/0x380 [ 105.778208][ T4995] netlink_dump+0x676/0xcd0 [ 105.782717][ T4995] ? netlink_lookup+0x1d0/0x1d0 [ 105.787574][ T4995] ? __inet_diag_dump_start+0x805/0x970 [ 105.793148][ T4995] __netlink_dump_start+0x523/0x700 [ 105.798349][ T4995] inet_diag_handler_cmd+0x1be/0x290 [ 105.803631][ T4995] ? rcu_lock_release+0x20/0x20 [ 105.808473][ T4995] ? inet_diag_handler_get_info+0xb80/0xb80 [ 105.814358][ T4995] ? inet_diag_dump_start+0x20/0x20 [ 105.819551][ T4995] ? inet_diag_dump+0x50/0x50 [ 105.824227][ T4995] ? dev_queue_xmit+0x20/0x20 [ 105.828899][ T4995] ? memcpy+0x3c/0x60 [ 105.832902][ T4995] ? sock_diag_rcv+0x17/0x40 [ 105.837521][ T4995] ? sock_diag_rcv+0x17/0x40 [ 105.842123][ T4995] ? rcu_lock_release+0x20/0x20 [ 105.846976][ T4995] sock_diag_rcv_msg+0x164/0x3e0 [ 105.851916][ T4995] netlink_rcv_skb+0x1e0/0x430 [ 105.856685][ T4995] ? sock_diag_bind+0xa0/0xa0 [ 105.861382][ T4995] ? netlink_ack+0xb60/0xb60 [ 105.866013][ T4995] ? __lock_acquire+0x7c60/0x7c60 [ 105.871043][ T4995] sock_diag_rcv+0x26/0x40 [ 105.875468][ T4995] netlink_unicast+0x774/0x920 [ 105.880247][ T4995] netlink_sendmsg+0x8ab/0xbc0 [ 105.885043][ T4995] ? netlink_getsockopt+0x560/0x560 [ 105.890251][ T4995] ? aa_sock_msg_perm+0x94/0x150 [ 105.895186][ T4995] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 105.900486][ T4995] ? security_socket_sendmsg+0x7c/0xa0 [ 105.905950][ T4995] sock_write_iter+0x29c/0x380 [ 105.910744][ T4995] ? sock_read_iter+0x340/0x340 [ 105.915608][ T4995] do_iter_readv_writev+0x497/0x600 [ 105.920822][ T4995] ? generic_file_rw_checks+0x280/0x280 [ 105.926373][ T4995] ? common_file_perm+0x171/0x1c0 [ 105.931404][ T4995] ? fsnotify_perm+0x5d/0x560 [ 105.936098][ T4995] ? security_file_permission+0x75/0xa0 [ 105.941644][ T4995] do_iter_write+0x205/0x7b0 [ 105.946236][ T4995] ? import_iovec+0x6f/0xa0 [ 105.950739][ T4995] do_writev+0x254/0x410 [ 105.954979][ T4995] ? do_readv+0x3e0/0x3e0 [ 105.959312][ T4995] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 105.965291][ T4995] ? lock_chain_count+0x20/0x20 [ 105.970146][ T4995] ? vtime_user_exit+0x2dc/0x400 [ 105.975083][ T4995] ? lockdep_hardirqs_on+0x94/0x140 [ 105.980278][ T4995] do_syscall_64+0x4c/0xa0 [ 105.984692][ T4995] ? clear_bhb_loop+0x30/0x80 [ 105.989361][ T4995] ? clear_bhb_loop+0x30/0x80 [ 105.994130][ T4995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.000069][ T4995] RIP: 0033:0x7fa75ae90c29 [ 106.004519][ T4995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.024151][ T4995] RSP: 002b:00007fa7590f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 106.032566][ T4995] RAX: ffffffffffffffda RBX: 00007fa75b0d7fa0 RCX: 00007fa75ae90c29 [ 106.040540][ T4995] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000007 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.048508][ T4995] RBP: 00007fa75af13e41 R08: 0000000000000000 R09: 0000000000000000 [ 106.056472][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.064435][ T4995] R13: 00007fa75b0d8038 R14: 00007fa75b0d7fa0 R15: 00007ffd016175e8 [ 106.072426][ T4995] [ 107.331913][ T4311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.469687][ T4311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.561169][ T4311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.642076][ T4311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.436757][ T4311] device hsr_slave_0 left promiscuous mode [ 108.443441][ T4311] device hsr_slave_1 left promiscuous mode [ 108.452233][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.460738][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.468589][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.476013][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.483720][ T4311] device bridge_slave_1 left promiscuous mode [ 108.489957][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.498291][ T4311] device bridge_slave_0 left promiscuous mode [ 108.504650][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.514501][ T4311] device veth1_macvtap left promiscuous mode [ 108.520687][ T4311] device veth0_macvtap left promiscuous mode [ 108.526814][ T4311] device veth1_vlan left promiscuous mode [ 108.532587][ T4311] device veth0_vlan left promiscuous mode [ 108.627108][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 108.641098][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 108.651632][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.664643][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.711965][ T4311] bond0 (unregistering): Released all slaves [ 109.444905][ T4311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.500286][ T4311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.560898][ T4311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.602120][ T4311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.695906][ T4311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.750760][ T4311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.792596][ T4311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.841033][ T4311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.923166][ T4311] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.951626][ T4311] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.011754][ T4311] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.062546][ T4311] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.134210][ T4311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.218575][ T4311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.262450][ T4311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.320974][ T4311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.440645][ T4311] tipc: Left network mode [ 110.445471][ T4311] tipc: Left network mode [ 111.588762][ T4311] device hsr_slave_0 left promiscuous mode [ 111.595744][ T4311] device hsr_slave_1 left promiscuous mode [ 111.602755][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.610496][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.618424][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.625842][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.634286][ T4311] device bridge_slave_1 left promiscuous mode [ 111.640747][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.649520][ T4311] device bridge_slave_0 left promiscuous mode [ 111.655754][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.668166][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.675708][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.684716][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.692393][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.705995][ T4311] device hsr_slave_0 left promiscuous mode [ 111.714583][ T4311] device hsr_slave_1 left promiscuous mode [ 111.722130][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.731486][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.739694][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.749341][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.757241][ T4311] device bridge_slave_1 left promiscuous mode [ 111.763438][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.773700][ T4311] device bridge_slave_0 left promiscuous mode [ 111.780416][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.793469][ T4311] device hsr_slave_0 left promiscuous mode [ 111.799954][ T4311] device hsr_slave_1 left promiscuous mode [ 111.806328][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.815952][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.823837][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.831966][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.839835][ T4311] device bridge_slave_1 left promiscuous mode [ 111.846000][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.854296][ T4311] device bridge_slave_0 left promiscuous mode [ 111.860611][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.873662][ T4311] device veth1_macvtap left promiscuous mode [ 111.880025][ T4311] device veth0_macvtap left promiscuous mode [ 111.886059][ T4311] device veth1_vlan left promiscuous mode [ 111.891934][ T4311] device veth0_vlan left promiscuous mode [ 111.899093][ T4311] device veth1_macvtap left promiscuous mode [ 111.905129][ T4311] device veth0_macvtap left promiscuous mode [ 111.911364][ T4311] device veth1_vlan left promiscuous mode [ 111.917173][ T4311] device veth0_vlan left promiscuous mode [ 111.923343][ T4311] device veth1_macvtap left promiscuous mode [ 111.929623][ T4311] device veth0_macvtap left promiscuous mode [ 111.935667][ T4311] device veth1_vlan left promiscuous mode [ 111.941499][ T4311] device veth0_vlan left promiscuous mode [ 111.948216][ T4311] device veth1_macvtap left promiscuous mode [ 111.954241][ T4311] device veth0_macvtap left promiscuous mode [ 111.960476][ T4311] device veth1_vlan left promiscuous mode [ 111.966274][ T4311] device veth0_vlan left promiscuous mode [ 112.212910][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 112.225080][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 112.236520][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.249911][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.297700][ T4311] bond0 (unregistering): Released all slaves [ 112.407517][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 112.419525][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 112.430352][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.442143][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.486618][ T4311] bond0 (unregistering): Released all slaves [ 112.608628][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 112.619984][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 112.632386][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.645523][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.690928][ T4311] bond0 (unregistering): Released all slaves [ 112.769284][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 112.779630][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 112.792554][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.804853][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.848951][ T4311] bond0 (unregistering): Released all slaves