last executing test programs: 9.713190516s ago: executing program 4 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r4, r4, 0x3, 0xfffffffffffffffd, 0x4001}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 8.723398801s ago: executing program 4 (id=219): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000200)=""/73) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/82}, 0x20) socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000500)={0x0, 0x0}) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000200)=0x8000000) 5.35349795s ago: executing program 4 (id=238): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4005a5f, &(0x7f0000000640)={0x0, 0xec27, 0x80, 0x0, 0x386}, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 4.156930362s ago: executing program 1 (id=244): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xd, 0xbc63180633219268, @any, 0x2, 0xf8, 0x2, 0x6, 0x3306, 0x51}}}, 0x14) 4.071378258s ago: executing program 1 (id=247): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f00000024c0), 0x2680, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.758310908s ago: executing program 1 (id=248): r0 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x602) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, 0x0) read$FUSE(r0, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) 3.009646421s ago: executing program 2 (id=249): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=ANY=[@ANYRESDEC], 0x26ec}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.987230585s ago: executing program 1 (id=250): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108006000a000a010100080002", @ANYRES64=0x0], 0x30}}, 0x0) 2.901609513s ago: executing program 2 (id=252): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) 2.891216529s ago: executing program 1 (id=253): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xce, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0xbf000000}) 2.85080482s ago: executing program 2 (id=254): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000000)="b721670d", 0x4, 0x4000014, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x120, 0x0) 2.702295858s ago: executing program 2 (id=256): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.496273243s ago: executing program 0 (id=259): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.3541014s ago: executing program 0 (id=260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 2.245656574s ago: executing program 0 (id=261): kexec_load(0x0, 0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0xfffffff5, 0x800000, 0x8000}], 0x320000) 2.218837751s ago: executing program 0 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x40, r1, 0xb97534d5fe9704cf, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x693}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0x4}]}, 0x40}}, 0x4000004) 2.089488635s ago: executing program 0 (id=264): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 2.089108747s ago: executing program 2 (id=265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000020800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.010783115s ago: executing program 2 (id=267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 1.926369059s ago: executing program 4 (id=269): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f00000024c0), 0x2680, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.870418008s ago: executing program 4 (id=271): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$media(0x0, 0x66, 0x180502) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000040), &(0x7f0000000380)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000e80)={{0x80000000, 0x0, 0x2, [0x7, 0x2]}, {0x80000000, r1, 0x6, [0x10000, 0x1]}, 0x4, [0x5, 0x5]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fanotify_init(0x8, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x2, [0x14a, 0x100]}, 0x8) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = epoll_create1(0x80000) sendfile(r8, r5, 0x0, 0xffffff7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000780)="0000e38d4cbaec", 0x7}], 0x1}, 0x20004011) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$6lowpan_enable(r4, &(0x7f0000000280)='1', 0x1) r13 = socket(0x10, 0x3, 0x0) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600074e2300000000000000000000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="02000000ff7f0000f7ffffffffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) recvmsg$unix(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 1.689541387s ago: executing program 3 (id=272): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) fsetxattr$security_capability(r2, &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x4}, {0x80, 0x3}], r4}, 0x18, 0x1) 1.656249118s ago: executing program 3 (id=273): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000003c0)={0x1f, 0x0, @any, 0x0, 0xffffffffffffffff}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000200)=0x3, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, &(0x7f0000000300)=""/106, &(0x7f0000000280)=0x6a) fgetxattr(r6, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/237, 0xed) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="616a764ecc70303c7aefc86f78b09df695d4710e2fec431e815a6d896bfcc4cf1742e1bec168a268084ded0f0419f3229b37bb8d223c68bd888cee4c78852982d54e29", @ANYRES16=0x0], 0x288}, 0x1, 0x0, 0x0, 0x8295aac7ea61552c}, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe7e) 1.497853803s ago: executing program 0 (id=274): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="c14a8cf012b79241197fa55c95cb78c868dc7f4065db6a1f55fdb9b3b620905db1150adbd5a48a5968dce0ca0c3b439a84136af4f91b835cf51a0b762c624ee970f63316960a1c5a1e36e766cf0fbb9676e41671fbe2c846cae88f54cd08de9d971d8205b0f52c3dc829935ceb9b6f73bf7cacade0e52ab90b160f562cc866b026c1261b336312bd662d41d1b80d8141466b9092866d89534e4425d9f046c0f047516825d6671ed32c121c5aa880c9759fb464a544c710dec4bd5b3663332c9310983127de7a7c3e9253a76a0a63a3c692fb2c07fdbae7c2", 0xd8}, {&(0x7f0000000280)="3a9956c64df7c66b7f95b69c46eaa813c943d5cf148b90b62a361ebcd78b041aa5705bbb03fb487eb5ee8d7464c339590ca1bc4edae6b783479647008d27ca60cf62d4f8af4a72242cc21788f5e80bdc43060e1491c8c6c0501cf6f7962c0e5d8c3b1671b17d9fbc2d5e1ea19b7bc33ecd73205071acedce4aae8de86f40", 0x7e}, {0x0}], 0x3, 0x0, 0x0, 0x4024814}}], 0x1, 0x48044) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000340)={0xfff, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_emit_ethernet(0x132, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 665.574582ms ago: executing program 3 (id=275): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x88, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xb, 0xa}, {0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x9, [0x5, 0x2, 0x8, 0xb, 0x8, 0x2, 0x6, 0x4, 0xa, 0xf, 0xb, 0x1, 0x5, 0x3, 0x0, 0xe], 0x1, [0x4, 0x0, 0x101, 0x8, 0x9, 0x6, 0x9, 0x5, 0x5, 0x6000, 0x9, 0xa, 0x1c00, 0x1, 0x101, 0x101], [0x2, 0x0, 0x6, 0x2, 0x0, 0x40, 0x0, 0x0, 0x3, 0xf62, 0x0, 0x666, 0x1ff, 0x5, 0x3, 0x9]}}}}]}, 0x88}}, 0x4000) 504.98607ms ago: executing program 3 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 416.892933ms ago: executing program 3 (id=277): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 301.578673ms ago: executing program 3 (id=278): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 253.100526ms ago: executing program 4 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x5}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=280): socket$packet(0x11, 0x2, 0x300) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f00000000c0)=0xe4) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r4, r4, 0x0, 0x40008) socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 34.559209][ T6477] cgroup: Unknown subsys name 'net' [ 34.793284][ T6477] cgroup: Unknown subsys name 'cpuset' [ 34.796981][ T6477] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.106980][ T6477] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.697759][ T6491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.698276][ T6491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.704340][ T6493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.705149][ T6493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.705851][ T6493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.706339][ T6493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.711204][ T6494] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.718413][ T6494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.720174][ T6499] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.721146][ T6499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.721430][ T6499] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.721796][ T6499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.722382][ T6499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.722796][ T6499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.732323][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.735141][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.738000][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.744454][ T6491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.747838][ T6491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.751869][ T6491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.799596][ T6057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.802798][ T6057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.804981][ T6057] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.808080][ T6057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.810685][ T6057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.152983][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 37.185997][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 37.232704][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 37.252050][ T6487] chnl_net:caif_netlink_parms(): no params data found [ 37.331441][ T6496] chnl_net:caif_netlink_parms(): no params data found [ 37.387749][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.387913][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.388354][ T6495] bridge_slave_0: entered allmulticast mode [ 37.389281][ T6495] bridge_slave_0: entered promiscuous mode [ 37.391894][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.391942][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.396267][ T6495] bridge_slave_1: entered allmulticast mode [ 37.397196][ T6495] bridge_slave_1: entered promiscuous mode [ 37.430217][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.430404][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.430527][ T6498] bridge_slave_0: entered allmulticast mode [ 37.431406][ T6498] bridge_slave_0: entered promiscuous mode [ 37.432790][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.432841][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.432946][ T6498] bridge_slave_1: entered allmulticast mode [ 37.433740][ T6498] bridge_slave_1: entered promiscuous mode [ 37.496193][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.496282][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.496604][ T6488] bridge_slave_0: entered allmulticast mode [ 37.497553][ T6488] bridge_slave_0: entered promiscuous mode [ 37.499390][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.499438][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.499536][ T6488] bridge_slave_1: entered allmulticast mode [ 37.500687][ T6488] bridge_slave_1: entered promiscuous mode [ 37.527796][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.542029][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.542135][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.542232][ T6487] bridge_slave_0: entered allmulticast mode [ 37.544761][ T6487] bridge_slave_0: entered promiscuous mode [ 37.546214][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.546261][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.546363][ T6487] bridge_slave_1: entered allmulticast mode [ 37.547231][ T6487] bridge_slave_1: entered promiscuous mode [ 37.559437][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.563121][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.580397][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.597947][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.605807][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.613817][ T6495] team0: Port device team_slave_0 added [ 37.615318][ T6495] team0: Port device team_slave_1 added [ 37.629016][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.629114][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.629223][ T6496] bridge_slave_0: entered allmulticast mode [ 37.630061][ T6496] bridge_slave_0: entered promiscuous mode [ 37.631703][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.631747][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.631857][ T6496] bridge_slave_1: entered allmulticast mode [ 37.633440][ T6496] bridge_slave_1: entered promiscuous mode [ 37.667152][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.667213][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.667261][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.668696][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.668722][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.668748][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.675379][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.677115][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.699636][ T6496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.702059][ T6498] team0: Port device team_slave_0 added [ 37.704328][ T6488] team0: Port device team_slave_0 added [ 37.714621][ T6487] team0: Port device team_slave_0 added [ 37.717285][ T6496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.718384][ T6498] team0: Port device team_slave_1 added [ 37.730171][ T6488] team0: Port device team_slave_1 added [ 37.739020][ T6487] team0: Port device team_slave_1 added [ 37.787740][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.789746][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.790966][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.792081][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.792106][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.792132][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.816054][ T6495] hsr_slave_0: entered promiscuous mode [ 37.818234][ T6495] hsr_slave_1: entered promiscuous mode [ 37.828346][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.828394][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.828438][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.829655][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.829679][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.829705][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.832030][ T6496] team0: Port device team_slave_0 added [ 37.833873][ T6496] team0: Port device team_slave_1 added [ 37.835665][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.835692][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.835718][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.836997][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.837022][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.837048][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.926700][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.926753][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.926801][ T6496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.930931][ T6498] hsr_slave_0: entered promiscuous mode [ 37.931429][ T6498] hsr_slave_1: entered promiscuous mode [ 37.931833][ T6498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.931917][ T6498] Cannot create hsr debugfs directory [ 37.938783][ T6487] hsr_slave_0: entered promiscuous mode [ 37.939312][ T6487] hsr_slave_1: entered promiscuous mode [ 37.939669][ T6487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.939697][ T6487] Cannot create hsr debugfs directory [ 37.946550][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.946592][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.946619][ T6496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.013412][ T6488] hsr_slave_0: entered promiscuous mode [ 38.013927][ T6488] hsr_slave_1: entered promiscuous mode [ 38.014217][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.014245][ T6488] Cannot create hsr debugfs directory [ 38.107216][ T6496] hsr_slave_0: entered promiscuous mode [ 38.109816][ T6496] hsr_slave_1: entered promiscuous mode [ 38.111921][ T6496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.112527][ T6496] Cannot create hsr debugfs directory [ 38.317002][ T6495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.337369][ T6495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.349917][ T6495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.357536][ T6495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.399564][ T6487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.404167][ T6487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.408148][ T6487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.424206][ T6487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.461862][ T6498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.467524][ T6498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.482694][ T6498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.486316][ T6498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.491803][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.520856][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.544865][ T1634] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.545138][ T1634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.546623][ T1634] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.546680][ T1634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.555909][ T6488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.560001][ T6488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.577900][ T6488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.585378][ T6488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.669014][ T6496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.684277][ T6496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.689718][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.699246][ T6487] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.707688][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.713676][ T6496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.721862][ T6496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.731039][ T6491] Bluetooth: hci3: command tx timeout [ 38.754538][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.754663][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.770166][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.777601][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.778850][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.778902][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.818136][ T1634] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.818231][ T1634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.820761][ T6491] Bluetooth: hci0: command tx timeout [ 38.820863][ T6057] Bluetooth: hci1: command tx timeout [ 38.821054][ T6491] Bluetooth: hci2: command tx timeout [ 38.824805][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.834074][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.834170][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.835201][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.835247][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.868627][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.875107][ T1634] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.875195][ T1634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.890561][ T55] Bluetooth: hci4: command tx timeout [ 38.959096][ T6498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.959176][ T6498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.008452][ T6495] veth0_vlan: entered promiscuous mode [ 39.029432][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.043931][ T6495] veth1_vlan: entered promiscuous mode [ 39.079656][ T6496] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.098199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.098288][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.112575][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.112676][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.116435][ T6495] veth0_macvtap: entered promiscuous mode [ 39.119046][ T6495] veth1_macvtap: entered promiscuous mode [ 39.144812][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.146975][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.150177][ T6495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.152826][ T6495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.152858][ T6495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.152887][ T6495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.171636][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.174306][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.187447][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.276493][ T6487] veth0_vlan: entered promiscuous mode [ 39.297396][ T6498] veth0_vlan: entered promiscuous mode [ 39.299728][ T6487] veth1_vlan: entered promiscuous mode [ 39.322182][ T1634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.322273][ T1634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.325406][ T6498] veth1_vlan: entered promiscuous mode [ 39.357573][ T6498] veth0_macvtap: entered promiscuous mode [ 39.373169][ T6498] veth1_macvtap: entered promiscuous mode [ 39.394005][ T6487] veth0_macvtap: entered promiscuous mode [ 39.397196][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.397254][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.406952][ T6487] veth1_macvtap: entered promiscuous mode [ 39.416150][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.419172][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.424014][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.435362][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.435426][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.435844][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.435866][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.436625][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.462368][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.465377][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.468858][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.472657][ T6487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.475173][ T6487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.477144][ T6487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.477176][ T6487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.485393][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.485459][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.490936][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.490960][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.491793][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.492854][ T6496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.523149][ T6498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.525699][ T6498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.528135][ T6498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.531294][ T6498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.533397][ T6488] veth0_vlan: entered promiscuous mode [ 39.557574][ T6495] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.566206][ T6488] veth1_vlan: entered promiscuous mode [ 39.593666][ T6496] veth0_vlan: entered promiscuous mode [ 39.596690][ T6496] veth1_vlan: entered promiscuous mode [ 39.671705][ T6496] veth0_macvtap: entered promiscuous mode [ 39.684177][ T295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.684231][ T295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.699453][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 39.712555][ T6496] veth1_macvtap: entered promiscuous mode [ 39.720124][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.722037][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 39.722991][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.723015][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.726853][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.726880][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.726901][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.726920][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.726939][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.727702][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.732630][ T6581] Zero length message leads to an empty skb [ 39.791307][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.795457][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.797691][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.797716][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.797735][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.797754][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.798758][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.822700][ T6488] veth0_macvtap: entered promiscuous mode [ 39.825134][ T6488] veth1_macvtap: entered promiscuous mode [ 39.843625][ T6496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.843705][ T6496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.843735][ T6496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.843763][ T6496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.866713][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.866777][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.872725][ T6585] @: renamed from vlan0 (while UP) [ 39.902664][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.902723][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.915158][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.920551][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.920618][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.920646][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.920671][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.920696][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.920721][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.920746][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.946410][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.977808][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.977877][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.977897][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.977917][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.977935][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.977954][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.977973][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.977992][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.978490][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.994643][ T6488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.994695][ T6488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.994725][ T6488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.994754][ T6488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.079598][ T6591] Bluetooth: MGMT ver 1.23 [ 40.098536][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.098614][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.153066][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.158365][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.209280][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.212638][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.276967][ T1634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.277027][ T1634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.870501][ T55] Bluetooth: hci3: command tx timeout [ 40.890348][ T55] Bluetooth: hci1: command tx timeout [ 40.892672][ T6057] Bluetooth: hci0: command tx timeout [ 40.901271][ T55] Bluetooth: hci2: command tx timeout [ 40.971785][ T55] Bluetooth: hci4: command tx timeout [ 41.376529][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 42.704568][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.704891][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.871925][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.872179][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.891466][ T55] Bluetooth: hci3: command tx timeout [ 42.970418][ T55] Bluetooth: hci2: command tx timeout [ 42.972001][ T6057] Bluetooth: hci1: command tx timeout [ 42.972080][ T6057] Bluetooth: hci0: command tx timeout [ 43.050652][ T55] Bluetooth: hci4: command tx timeout [ 43.823558][ T6698] input: syz1 as /devices/virtual/input/input2 [ 43.940561][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.106683][ T11] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 44.106779][ T11] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 44.106804][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 44.106838][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 44.106865][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 44.108447][ T11] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 44.108483][ T11] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 44.108507][ T11] usb 1-1: Product: syz [ 44.108527][ T11] usb 1-1: Manufacturer: syz [ 44.145379][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 44.145475][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 44.148115][ T11] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 44.148150][ T11] cdc_wdm 1-1:1.0: Unknown control protocol [ 44.399490][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 44.407475][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 7 bytes [ 44.443657][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 44.856001][ T24] usb 1-1: USB disconnect, device number 2 [ 44.973072][ T55] Bluetooth: hci3: command tx timeout [ 45.063109][ T55] Bluetooth: hci2: command tx timeout [ 45.064759][ T6491] Bluetooth: hci0: command tx timeout [ 45.064832][ T6491] Bluetooth: hci1: command tx timeout [ 45.131353][ T6057] Bluetooth: hci4: command tx timeout [ 45.535104][ T6739] lo: entered promiscuous mode [ 45.535476][ T6739] batadv_slave_1: entered promiscuous mode [ 45.536909][ T6738] batadv_slave_1: left promiscuous mode [ 45.537599][ T6738] lo: left promiscuous mode [ 46.179936][ T6746] syz.3.54 uses obsolete (PF_INET,SOCK_PACKET) [ 46.391993][ T6750] syz_tun: entered allmulticast mode [ 46.409397][ T6748] syz_tun: left allmulticast mode [ 48.356371][ T24] IPVS: starting estimator thread 0... [ 48.460716][ T6786] IPVS: using max 34 ests per chain, 81600 per kthread [ 49.070171][ T6797] netlink: 'syz.1.68': attribute type 2 has an invalid length. [ 49.070450][ T6797] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 49.632094][ T6785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.65'. [ 50.131190][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.131435][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.721623][ T6831] 9pnet_virtio: no channels available for device syz [ 51.300730][ T6849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.85'. [ 51.302768][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.303363][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.546949][ T6057] Bluetooth: hci0: ISO packet for unknown connection handle 3872 [ 52.106506][ T6868] exFAT-fs (nullb0): invalid boot record signature [ 52.106607][ T6868] exFAT-fs (nullb0): failed to read boot sector [ 52.106628][ T6868] exFAT-fs (nullb0): failed to recognize exfat type [ 52.798915][ T6870] could not allocate digest TFM handle sha1-ssse3 [ 52.939176][ T6877] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.086385][ T6889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.099261][ T6889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.436195][ T24] libceph: connect (1)[c::]:6789 error -101 [ 53.438157][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 53.446255][ T24] libceph: connect (1)[c::]:6789 error -101 [ 53.448142][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 53.473521][ T6894] vlan2: entered allmulticast mode [ 53.474974][ T6894] bond0: entered allmulticast mode [ 53.475218][ T6894] bond_slave_0: entered allmulticast mode [ 53.475256][ T6894] bond_slave_1: entered allmulticast mode [ 53.504730][ T6897] ceph: No mds server is up or the cluster is laggy [ 53.746653][ T24] libceph: connect (1)[c::]:6789 error -101 [ 53.748618][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 53.752807][ T24] libceph: connect (1)[c::]:6789 error -101 [ 53.773093][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 54.031257][ T24] libceph: connect (1)[c::]:6789 error -101 [ 54.033170][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 54.125009][ T6913] ceph: No mds server is up or the cluster is laggy [ 54.659879][ T6948] sit0: entered allmulticast mode [ 55.028878][ T6955] sit0: entered promiscuous mode [ 55.116337][ T6978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.461996][ T6987] Bluetooth: MGMT ver 1.23 [ 55.979686][ T6980] openvswitch: netlink: IP tunnel dst address not specified [ 56.634792][ T6992] ceph: No mds server is up or the cluster is laggy [ 56.636556][ T24] libceph: connect (1)[c::]:6789 error -101 [ 56.636699][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 56.825005][ T7002] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3 [ 56.856417][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.856772][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.129459][ T9] IPVS: starting estimator thread 0... [ 57.210438][ T7031] IPVS: using max 34 ests per chain, 81600 per kthread [ 58.135037][ T7048] could not allocate digest TFM handle sha1-ssse3 [ 58.255215][ T7056] ======================================================= [ 58.255215][ T7056] WARNING: The mand mount option has been deprecated and [ 58.255215][ T7056] and is ignored by this kernel. Remove the mand [ 58.255215][ T7056] option from the mount to silence this warning. [ 58.255215][ T7056] ======================================================= [ 58.269107][ T7056] 9pnet_virtio: no channels available for device syz [ 58.382568][ T7063] netlink: 'syz.0.130': attribute type 5 has an invalid length. [ 60.158090][ T7100] bond0: option ad_select: unable to set because the bond device is up [ 60.276873][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 60.961732][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.965148][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.655869][ T6057] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 62.658372][ T6057] Bluetooth: hci4: Injecting HCI hardware error event [ 62.661679][ T6057] Bluetooth: hci4: hardware error 0x00 [ 63.333986][ T7202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.338985][ T7202] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 63.721924][ T7219] warning: `syz.1.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.763399][ T2393] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.765793][ T2393] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.097265][ T6057] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 66.817479][ T7294] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 66.817546][ T7294] netlink: 784 bytes leftover after parsing attributes in process `syz.3.204'. [ 69.769058][ T7333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.769179][ T7333] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 69.852997][ T1775] cfg80211: failed to load regulatory.db [ 69.921199][ T7333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.921263][ T7333] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 70.360574][ T1775] hid-generic 0005:15C2:0009.0001: unknown main item tag 0x0 [ 70.380517][ T1775] hid-generic 0005:15C2:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 70.942547][ T7333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.942631][ T7333] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 71.141432][ T7333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.141494][ T7333] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 71.637931][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.643069][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.811991][ T7377] random: crng reseeded on system resumption [ 72.831130][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 72.871240][ T7383] capability: warning: `syz.4.238' uses deprecated v2 capabilities in a way that may be insecure [ 72.877278][ T31] audit: type=1326 audit(72.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 72.893041][ T31] audit: type=1326 audit(72.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 72.897857][ T31] audit: type=1326 audit(72.640:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 72.897910][ T31] audit: type=1326 audit(72.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 72.897949][ T31] audit: type=1326 audit(72.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 72.897987][ T31] audit: type=1326 audit(72.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 72.898026][ T31] audit: type=1326 audit(72.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 72.898063][ T31] audit: type=1326 audit(72.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb375b75c code=0x7ffc0000 [ 72.898101][ T31] audit: type=1326 audit(72.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 72.902832][ T31] audit: type=1326 audit(72.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7382 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb375b728 code=0x7ffc0000 [ 73.182359][ T7393] erofs (device nullb0): cannot find valid erofs superblock [ 75.558237][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.559718][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.724958][ T7444] bond_slave_0: entered promiscuous mode [ 75.725085][ T7444] bond_slave_1: entered promiscuous mode [ 75.726146][ T7444] bond_slave_0: left promiscuous mode [ 75.726260][ T7444] bond_slave_1: left promiscuous mode [ 76.159156][ T7457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.265'. [ 78.316905][ T7502] [ 78.317576][ T7502] ====================================================== [ 78.319467][ T7502] WARNING: possible circular locking dependency detected [ 78.321374][ T7502] 6.15.0-rc2-syzkaller-gc72692105976 #0 Not tainted [ 78.323127][ T7502] ------------------------------------------------------ [ 78.325032][ T7502] syz.0.274/7502 is trying to acquire lock: [ 78.326607][ T7502] ffff800092445fe8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 78.328764][ T7502] [ 78.328764][ T7502] but task is already holding lock: [ 78.330709][ T7502] ffff0000f4130aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x14c/0xb14 [ 78.333368][ T7502] [ 78.333368][ T7502] which lock already depends on the new lock. [ 78.333368][ T7502] [ 78.336158][ T7502] [ 78.336158][ T7502] the existing dependency chain (in reverse order) is: [ 78.338551][ T7502] [ 78.338551][ T7502] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 78.340818][ T7502] __mutex_lock_common+0x1d0/0x2190 [ 78.342343][ T7502] mutex_lock_nested+0x2c/0x38 [ 78.343711][ T7502] smc_switch_to_fallback+0x44/0xa3c [ 78.345209][ T7502] smc_sendmsg+0xf8/0x86c [ 78.346452][ T7502] __sys_sendto+0x36c/0x4f4 [ 78.347756][ T7502] __arm64_sys_sendto+0xd8/0xf8 [ 78.349148][ T7502] invoke_syscall+0x98/0x2b8 [ 78.350442][ T7502] el0_svc_common+0x130/0x23c [ 78.351768][ T7502] do_el0_svc+0x48/0x58 [ 78.352998][ T7502] el0_svc+0x58/0x150 [ 78.354222][ T7502] el0t_64_sync_handler+0x78/0x108 [ 78.355692][ T7502] el0t_64_sync+0x198/0x19c [ 78.356998][ T7502] [ 78.356998][ T7502] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 78.359043][ T7502] sockopt_lock_sock+0x84/0x144 [ 78.360420][ T7502] do_ip_setsockopt+0x118c/0x290c [ 78.361848][ T7502] ip_setsockopt+0x68/0x134 [ 78.363204][ T7502] raw_setsockopt+0xd8/0x298 [ 78.364571][ T7502] sock_common_setsockopt+0xb0/0xcc [ 78.366018][ T7502] do_sock_setsockopt+0x1ec/0x328 [ 78.367523][ T7502] __arm64_sys_setsockopt+0x170/0x1e0 [ 78.369128][ T7502] invoke_syscall+0x98/0x2b8 [ 78.370461][ T7502] el0_svc_common+0x130/0x23c [ 78.371871][ T7502] do_el0_svc+0x48/0x58 [ 78.373070][ T7502] el0_svc+0x58/0x150 [ 78.374248][ T7502] el0t_64_sync_handler+0x78/0x108 [ 78.375769][ T7502] el0t_64_sync+0x198/0x19c [ 78.377046][ T7502] [ 78.377046][ T7502] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 78.378952][ T7502] __lock_acquire+0x1728/0x3058 [ 78.380338][ T7502] lock_acquire+0x14c/0x2e0 [ 78.381624][ T7502] __mutex_lock_common+0x1d0/0x2190 [ 78.383096][ T7502] mutex_lock_nested+0x2c/0x38 [ 78.384471][ T7502] rtnl_lock+0x20/0x2c [ 78.385730][ T7502] start_sync_thread+0xe0/0x2014 [ 78.387185][ T7502] do_ip_vs_set_ctl+0x3ac/0x90c [ 78.388602][ T7502] nf_setsockopt+0x270/0x290 [ 78.389948][ T7502] ip_setsockopt+0x124/0x134 [ 78.391220][ T7502] tcp_setsockopt+0xcc/0xe8 [ 78.392565][ T7502] sock_common_setsockopt+0xb0/0xcc [ 78.394092][ T7502] smc_setsockopt+0x1e0/0xb14 [ 78.395523][ T7502] do_sock_setsockopt+0x1ec/0x328 [ 78.397017][ T7502] __arm64_sys_setsockopt+0x170/0x1e0 [ 78.398615][ T7502] invoke_syscall+0x98/0x2b8 [ 78.400048][ T7502] el0_svc_common+0x130/0x23c [ 78.401404][ T7502] do_el0_svc+0x48/0x58 [ 78.402638][ T7502] el0_svc+0x58/0x150 [ 78.403827][ T7502] el0t_64_sync_handler+0x78/0x108 [ 78.405362][ T7502] el0t_64_sync+0x198/0x19c [ 78.406770][ T7502] [ 78.406770][ T7502] other info that might help us debug this: [ 78.406770][ T7502] [ 78.409403][ T7502] Chain exists of: [ 78.409403][ T7502] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 78.409403][ T7502] [ 78.412906][ T7502] Possible unsafe locking scenario: [ 78.412906][ T7502] [ 78.414841][ T7502] CPU0 CPU1 [ 78.416280][ T7502] ---- ---- [ 78.417719][ T7502] lock(&smc->clcsock_release_lock); [ 78.419081][ T7502] lock(sk_lock-AF_INET); [ 78.420913][ T7502] lock(&smc->clcsock_release_lock); [ 78.422980][ T7502] lock(rtnl_mutex); [ 78.424058][ T7502] [ 78.424058][ T7502] *** DEADLOCK *** [ 78.424058][ T7502] [ 78.426229][ T7502] 1 lock held by syz.0.274/7502: [ 78.427479][ T7502] #0: ffff0000f4130aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x14c/0xb14 [ 78.430202][ T7502] [ 78.430202][ T7502] stack backtrace: [ 78.431735][ T7502] CPU: 1 UID: 0 PID: 7502 Comm: syz.0.274 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 78.434599][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.437215][ T7502] Call trace: [ 78.438037][ T7502] show_stack+0x2c/0x3c (C) [ 78.439240][ T7502] __dump_stack+0x30/0x40 [ 78.440377][ T7502] dump_stack_lvl+0xd8/0x12c [ 78.441551][ T7502] dump_stack+0x1c/0x28 [ 78.442577][ T7502] print_circular_bug+0x324/0x32c [ 78.443845][ T7502] check_noncircular+0x154/0x174 [ 78.445104][ T7502] __lock_acquire+0x1728/0x3058 [ 78.446367][ T7502] lock_acquire+0x14c/0x2e0 [ 78.447516][ T7502] __mutex_lock_common+0x1d0/0x2190 [ 78.448878][ T7502] mutex_lock_nested+0x2c/0x38 [ 78.450069][ T7502] rtnl_lock+0x20/0x2c [ 78.451125][ T7502] start_sync_thread+0xe0/0x2014 [ 78.452432][ T7502] do_ip_vs_set_ctl+0x3ac/0x90c [ 78.453682][ T7502] nf_setsockopt+0x270/0x290 [ 78.454824][ T7502] ip_setsockopt+0x124/0x134 [ 78.455999][ T7502] tcp_setsockopt+0xcc/0xe8 [ 78.457181][ T7502] sock_common_setsockopt+0xb0/0xcc [ 78.458557][ T7502] smc_setsockopt+0x1e0/0xb14 [ 78.459774][ T7502] do_sock_setsockopt+0x1ec/0x328 [ 78.461057][ T7502] __arm64_sys_setsockopt+0x170/0x1e0 [ 78.462499][ T7502] invoke_syscall+0x98/0x2b8 [ 78.463656][ T7502] el0_svc_common+0x130/0x23c [ 78.464893][ T7502] do_el0_svc+0x48/0x58 [ 78.466013][ T7502] el0_svc+0x58/0x150 [ 78.467026][ T7502] el0t_64_sync_handler+0x78/0x108 [ 78.468349][ T7502] el0t_64_sync+0x198/0x19c [ 78.523292][ T7505] IPVS: stopping backup sync thread 7506 ... [ 78.675051][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.280'.