last executing test programs: 13.835928891s ago: executing program 0 (id=257): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x94) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000240)=0x1000, 0x208) openat(0xffffffffffffff9c, 0x0, 0x1c9b41, 0x8) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000002980)=ANY=[@ANYBLOB="377664896b59031234c06f4989a6c0ef06d60f47bbb588d41e05a221221616d65f3e74bfe62f0d6af17caf858417805bbedc7183e828755da7d38af680aecfe0be356f9141c2718a0e3f152ebaba896417c86e4a34ca18925338e3b4d23018bf8f37de7286f356779d376a8dc4d471ff2bf2d5aa265df41b4b0418a185971db943eada0c0b8dee4476115697e140e4ce2a76a80df45b8aa417672f237cb0a8bad80d0b3400adbf8f1cb8156826b467d72a7a9b7d201cbe9f26ee93b80ff8631ce5fd2e36a3a7ffb984eb6babc24fb2baacf48f5c06162368701ffe62b7de019da806f4252e75f04116dbaa590faf4025c094c015c3de7009f607aaf773ca8fe85dc10af8e6f63850595122821a4626026a4bf04eee9f72ff2b0afc21b5965d210d9957b5aff658d7a7ec9517a5b82711f7eebafaf0994ef984394571f06835caeec23ae5185652fa907c2df99a1e3e39ad4ee8cba548a7b9b3caa3e1e47bc8aa46199854e41cf8bc638e1964f56c4ffa871f70ee8c17d126d91dbdab5f476f76bac4b517ef7acd8c07e4cee5303af3a27404744fc4355f9cece9e078ff468e2722020398ddf9c973ff3e929933fcb453a38b0d7f932b78100bd3ed166f1164df1e6fca942ff76c4de1e72e9be08dae4b98d16c900ad4bf274350fa44a39d08750d0bbbcfa4d4734c0df6ce15808a64561a08ed8e98ecff284b4100f758953014dbf7ea578491231666ea01cbf29adbe5bf7a478bcf7ec4037b2ec5a8295a44470056a015031abf7a9e6b5d33b2c214e0d1738493f00b2604a9e190db00ebaf4efbcc4baf0357599a9b59e8a49c30ac8b8a91da906202c6428d3686ea81808c75b012d85324a85bdb7a22132d88a56acf805561540a6cf116c206af3b7b0c43ae38fcde561d9981c2a388a341c2e0a22e532b479d4064d8755f91db4f93001bb1d8e396b61135c06edc02179b3388aaa6f0904d3862f68c1cace3f265ca4bbb448b81fd9373eaa316487560b2ebe0108fd1f419f0f22313b852f988b333fe46f23573dd781ef918363999e8dc84886c33ecb618af2b2e798bb33c194ac629443c64263ced3c587b1be061aa26acc06d5a8e76740a7343304905f9a311c455b6c0e3eeb0ea32ce3849eee7d988f8dc15f13b90b3a72b27822f999ccd1511b460bce7c698b208e04d3ce0533a9f8b41106fe2bce20e8d736150a246515b6e2b180a4c948ac1879b531f94b0b9a030a782f6c1a060c7f397a786e67643c8c4e5c67768d70a114b62449903571d54f3a31e3a9df3f7cfef6c9305fce8f994aaf7ab91f18d105ff4935f68f18c8a756ed23ac800c1af3bffb9ef73387fe3fb16fb32f0c088e532555bb3efaac548e8d119464363fb708aab44117c340520c0f95b56ca53870c086bbfb01b9c21deb9ee26a1bbf7aac2a2ae7d96051f1912e72213b08e35ef4ef6a8f4a279c945d64c467a7ce8c771a6cf19b56986efce781a37109f8bca590ba402e09011313395849f72a14f92507ebbbef2f67b9ae82b7d25005122fcf660577c9f73902667b24e9f750a7bc4d455319e0708987ee04b9335bc55ec67cc13669fb089c73ba31143f54911d884931f59404c9ece4e5958e2fb75ef834d62b563e1b31246f144aaf68bd8c697eaed6afb1c7167ed7b93331e40a2f11906e8a2fa2649062f5fe48c95c456823522cb1d7362bad6ed9f77770cf5fa47eadad814d4e45a946a954bac6ba080cab24622dcf09f477175f55a01c3f414c87f3f42528d232c07b405d847e3a09c89aaf59b254c6d433410ac777072ba0ad77a9f8d60d3d76eec720736b5456fcdb9a01f8328b1ec35104e5cbcaaa09801be076ac50419babdcbb1fc4f8063fb47a07180e34afec81698e20bbae7c882e665d6c270c99db4d628301582c4b00691333dd814a68b86f52a27cd3fb27877e3b16ea101c291891a23e9f92907f753a216e463dcd786a9cffa8fc0deb5d699ac0af5c6357e522878958cb627e150be10662a14000ae18a64e3abe3bf59bbaaec95ad5d839f73db69ae4740b633bf5f5112d3d5e8f7306d879aa875b040fbc1dd61cfc9ac8ca50eb5da6a9d5818a7b378f0098b3aa0086b8ce07be1d914705167f8328a51332752e3e075cd13aff567124f6672361141f9b732039dfe6cf2da4b2d7a3706fa19e0cdab259d37edde44f5d2d83b4ec95f8dc6e224f1eb32cb40a2be792905b57d0ca024bb14a5a47cbadf452203da4fb05ecb3900b71c1079be5212f4f98cecb5bd78313504ea74d6ef23a15c808412771a4bdb474a2869e7c3b620692d270a4f7f286ef46da38cf8f3f3cc79e047d1dc46f2a012b772433f07f32ee03e6e80da6639e12bc3556254483afb9d4545f13c441ff42f74e1a507501033622174588680fef50913950df830b5675a82b3b43e7ae4022c288c49697bb43e79a0e84e96e1f74ed54c87f43645d3b5e663e906ccf1ad8428c3f53a141da2fb3e6b419e82bb7dd2d2bf8bcfa04817fee31ff44c4f99bad05b080031f098582c554e1531378b00e692e72a9431485d81504655795cd4b6ba4a9d1444e2d88ce0adb05023adba223178709e57d34c0a54049c05f554c47e151a1515699991825e8564556873dc65803ed8feffb01648fc088f1ed95af8f288dead745d2ee0c79d40eae158e9e607bde37eff6dd9b57c5740ed55d8f7849077cbb0174425fab1fb363ee5618b9912a49c6238d53e87a865aec4886c48f0ff1cede6aa1ee53aae11be0d0ee2a6136c4f09b23992ab99844d0c77c8ffde7bab25c248c50e85dce223085b44443d589ecefc5530839d0c9299a155786ff766dc860fb4015d8ee24fc87c1ce13b2f4586393a50a546f92583cd103f752228e69e29b6921946798cddc55c66bf6728b9470111113cc09041aa2c013e45469ebf25a85c432826550eaa2c4afdd3fa8812ae2057a2b6bcf75bc9956be851588e3a9b9d1251850ea83a443ddf55cf2d4838a5f3e32ec50ad0ace0e8d1bb7597622a0f691e3d44f0dafc44c2330e8a38b927a41826169a53a124b39fd98fb341e5b0c92caeceb1caae7b73f68045a2d2e598a94b8c715594ff043fd3ff118d95c057d3125bb972b29490999c5f3bb13d2ac0213420d85a800d09dc0a92421f86fdf1efb499311c215561b9ee7a3382177f07eaa09266d5be0178a85c04502c208b30f9b0866e996f8b913a73d70fd552d531470749651756a6c9deec0dc10d1e804f39b6ae1cf5ac960958e6ef8497fca327dca83d4ba011772ef438470f1bfde20cbb732a9d5ba53b458024cdea8cdc27960efbf4e4375e6b29c4908f33049feb3597d7e44dddcad99a570801ad87d3140c0d6d5d9d212657c039285dd4a21fc6020900fce45fb5a229d83637e7edad236211a15048d17539387e94088888e70c70e2eeb63a5a7d2b2d04605029b261fb07e1419c4c268416b9d07892853af79763adc461a1daef258263c4385579007226d711eb5ab923c8dc8da12b7d140c351d4900e195358861d4a71cf4749b086d04aed332989ff5d6d2b8f9dbcf0c799c0f7fb651aaabfab9b374df9be9b2b8b99dd49613be44d8f733f7e9375f7c1e42d54e35edf483fc9154da9dfa1ca3b431ec9e4268e8aea0451b57645db78476774f4c9ef0035a25ed5a52fd938c54595680dbb8c95a21f9b1cedf217945598442031c1daff642c641bbf140ac716f34e5726fd2278993d7ef5d68674776d0afbab236c30076e49bb23585958e1d3ccad80d041a1238a4f0f74d55da747d2d8c6d480b6ee4796f2784e465c892db8310fabb903a916cf751d8f5c37049a182419b96a5f393225bcebf5bf7afce61b3832f3c5691f226acab9b066a3480aeecdb2b818ff54f2f4b94200c9fc0b0b6b6cd33d9366f167ce8d6ac147380aca8b580b936305da2e3634d704ac8393f7da2f111465a0b27a63faafff98773f0287e730f8cb0304f8570d86990cf5624e99da7de64096f0d487590056d5f6de019a3a0a621a0387485090402fe09d198dfcf037d62efdf05c6c15b9e96b6574ec0acdf894f31612662caac8bec41b6314f982fb68a0b6683c64de88f20a8ff02ba8fef831e281dee1d352ae1484457ebdf7273d7965a740ea0885bcaa76dcda5a91b1ed794812eb86ddee035777122c5005a54227b44ff521cd7da504974f5fc967b6e46919375876f36d0ec2ffdc41dd074964ea8040291b548b38ff883548370817985383d537551dc4fd4743ca21b6e5b103d3c23e03e21a585cc9ea1a749389dc23e16c8ecaa70f91404b175c3aa5e09b0889b78cdaac8687a0741c25bbe7a753954bf0abbad0296652c62bebfc86a29f099e79e9b8a09a839b4f632fbd439f5d3c52864eb0442d0d665ac8a54e17b2211a554f4d3d1147adfd6baf8e5a1a4596c12fd194089b0c17a0e127651400079667c5ee544206a3bc1df82d67916ae6dda0405bff95a07c2de3d6abda21ca56ec1dc226191069dbd7b4638aca20f6f55ead323354b7769c675b51da40159f902719fb24c4b89d9678fae1498eb681f859c583f99f3f695e21996428a21666ccb61e1b563baff1b46262e5596453bed802f49846b04797550fbe8148e1272bf3b598689534f8b1941d39c2a4eb02048fac85848ab0759ad482a6932673383cc48977ecf505a59a1c2d209c721be642ca0a4472d8f0cef069728d5fef091bd71fda476ab50fce25aae316b97963e6db545557229dceecad59e", @ANYRES16=r0], &(0x7f0000000180), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x6, 0xfa00, {0x3, &(0x7f0000000340), 0x13f, 0x5}}, 0x20) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681fc71", 0x6, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x482, 0x0, 0x3}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10000000000008, 0x2000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000900)={0x401, 0x1}) 11.769490064s ago: executing program 0 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r3}) 11.739422267s ago: executing program 4 (id=262): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x18, 0x5a, 0x5, 0x70bd29, 0x25dfdbfe, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0x8080) 10.875985312s ago: executing program 4 (id=263): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) r1 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dmmidi(&(0x7f0000000200), 0xffffffffffffffff, 0x541d01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap(&(0x7f000030f000/0x1000)=nil, 0x1000, 0x0, 0x97052, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0xffff, &(0x7f0000000040)=0x272) fremovexattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB]) migrate_pages(0x0, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.719808207s ago: executing program 0 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e29004218030018258000000000000002", 0x29}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01022dbd7080ffdbdf25c72200000500200000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24008800}, 0x40d0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 9.683631999s ago: executing program 4 (id=267): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') 9.012034555s ago: executing program 4 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x48, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 8.746776751s ago: executing program 4 (id=271): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 5.40250984s ago: executing program 2 (id=276): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 5.228002457s ago: executing program 0 (id=278): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') 4.669811431s ago: executing program 2 (id=280): kexec_load(0x7, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000480), 0x0, 0x6, 0x5}], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 4.498747938s ago: executing program 0 (id=281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x24008810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001600)) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) syz_usb_connect(0x3, 0x73, &(0x7f0000003a40)={{0x12, 0x1, 0x201, 0xad, 0xd1, 0xa5, 0x10, 0x2040, 0x7501, 0x3fac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x3, 0x8, 0x9, 0xc0, 0x8, [{{0x9, 0x4, 0xdf, 0xdf, 0x0, 0x5d, 0x81, 0xd5, 0x7}}, {{0x9, 0x4, 0xfd, 0x5, 0x0, 0x10, 0xa8, 0xea, 0x8, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0xfc52, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x90}, @obex={0x5, 0x24, 0x15, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x58fe, 0x3, 0x80, 0x81, 0x1, 0x9}]}]}}, {{0x9, 0x4, 0x8a, 0x86, 0x0, 0x18, 0xdb, 0x3a, 0x3}}]}}]}}, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0}) 3.854724572s ago: executing program 3 (id=284): unshare(0xc020600) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 3.513805195s ago: executing program 1 (id=285): socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x8, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9a) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/uevent_helper', 0xc80, 0x85) 3.513635915s ago: executing program 2 (id=286): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.412452895s ago: executing program 2 (id=287): mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) 2.386625385s ago: executing program 3 (id=288): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.385820326s ago: executing program 1 (id=289): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') lseek(r3, 0x7ff, 0x0) 2.361514378s ago: executing program 2 (id=290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) 2.209531563s ago: executing program 1 (id=291): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.166494667s ago: executing program 3 (id=292): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') 1.709038682s ago: executing program 3 (id=293): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) r1 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dmmidi(&(0x7f0000000200), 0xffffffffffffffff, 0x541d01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap(&(0x7f000030f000/0x1000)=nil, 0x1000, 0x0, 0x97052, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000000)=0x604, 0x4) fremovexattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB]) migrate_pages(0x0, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.311693371s ago: executing program 2 (id=294): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) socket$inet6(0x10, 0x3, 0x0) 1.244536798s ago: executing program 1 (id=295): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.067379385s ago: executing program 1 (id=296): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x80) accept4$netrom(r2, 0x0, 0x0, 0x800) 1.043520547s ago: executing program 3 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000001f40)="28d71545d8e30a", 0x7}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 422.210158ms ago: executing program 0 (id=298): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 115.154149ms ago: executing program 4 (id=299): msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(r1, 0x0) epoll_create1(0x80000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x48, 0x1}, {0x28, 0xd8, 0x76, 0xffbff024}, {0x6, 0x26, 0x4, 0x207}]}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x78ae43d9a4c16c5b}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 87.135691ms ago: executing program 1 (id=300): mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) 0s ago: executing program 3 (id=301): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') lseek(r3, 0x7ff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 48.533487][ T4172] cgroup: Unknown subsys name 'net' [ 48.639918][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.928408][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.307859][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.328663][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.399917][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.464538][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.503881][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.513232][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.520307][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.528936][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.537821][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.545013][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.552957][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.585221][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.592407][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.600012][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.607856][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.617520][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.625299][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.644272][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.651396][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.659220][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.691267][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.698498][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.706883][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.749558][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.760773][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.794084][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.804265][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.813519][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.820562][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.828934][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.838007][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.866674][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.873953][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.881592][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.890182][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.899507][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.906799][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.914514][ T4187] device bridge_slave_0 entered promiscuous mode [ 51.950749][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.958063][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.966238][ T4187] device bridge_slave_1 entered promiscuous mode [ 51.975703][ T4182] team0: Port device team_slave_0 added [ 51.992605][ T4184] team0: Port device team_slave_0 added [ 52.018079][ T4182] team0: Port device team_slave_1 added [ 52.025026][ T4184] team0: Port device team_slave_1 added [ 52.039878][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.050925][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.063029][ T4190] team0: Port device team_slave_0 added [ 52.070371][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.096070][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.114267][ T4190] team0: Port device team_slave_1 added [ 52.134173][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.141140][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.167160][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.179392][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.186610][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.212694][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.240203][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.247209][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.273324][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.285500][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.292631][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.318582][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.331840][ T4187] team0: Port device team_slave_0 added [ 52.341308][ T4183] team0: Port device team_slave_0 added [ 52.367155][ T4187] team0: Port device team_slave_1 added [ 52.374286][ T4183] team0: Port device team_slave_1 added [ 52.391403][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.398845][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.425029][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.437442][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.444658][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.470774][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.523963][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.530669][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.538158][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.545326][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.571301][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.592868][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.601211][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.607975][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.615734][ T4182] Cannot create hsr debugfs directory [ 52.621667][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.628843][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.654765][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.667101][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.674195][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.700332][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.711843][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.718946][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.745204][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.856909][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.863863][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.870320][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.878131][ T4190] Cannot create hsr debugfs directory [ 52.887086][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.894029][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.900520][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.908530][ T4187] Cannot create hsr debugfs directory [ 52.924003][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.930788][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.937621][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.945431][ T4183] Cannot create hsr debugfs directory [ 52.992962][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 53.002349][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 53.008999][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 53.015169][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 53.021247][ T4189] Bluetooth: hci2: command 0x0409 tx timeout [ 53.203796][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.214819][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.233257][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.241871][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.284822][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.295733][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.316762][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.345368][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.371568][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.399835][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.411313][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.429181][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.462978][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.521172][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.532991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.543110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.575946][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.587164][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.612485][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.620047][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.633615][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.644400][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.656704][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.674559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.684147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.693940][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.701149][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.710007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.720359][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.734875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.744697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.766730][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.774549][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.796289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.805293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.814029][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.821081][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.829146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.838784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.853308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.861943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.871433][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.878887][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.889037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.897686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.906498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.921223][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.939865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.947994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.958307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.967363][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.974487][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.983963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.992868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.001179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.009916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.039350][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.057320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.066567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.076313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.085347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.094146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.101792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.109702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.118832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.127266][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.134325][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.142463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.150239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.174081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.183125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.206574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.215766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.225764][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.232922][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.250189][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.260634][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.275493][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.293987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.304209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.315401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.324865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.333913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.342967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.351259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.364862][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.376536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.408654][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.435627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.450315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.458948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.469860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.479856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.489203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.510394][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.521699][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.542701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.551387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.561723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.573294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.581781][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.589002][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.598707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.607560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.616327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.625294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.634725][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.641789][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.649601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.658524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.667055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.675882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.685412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.709862][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.730326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.739195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.748465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.757133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.764925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.777836][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.791241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.809302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.824426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.834371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.846683][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.865063][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.879066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.888995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.898286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.906892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.915455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.937391][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.948935][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.959093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.968181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.976723][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.983796][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.991571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.003520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.011833][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.018925][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.026690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.035585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.044525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.053043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.061306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.074756][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 55.080871][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 55.087551][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 55.091742][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.093958][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 55.107409][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 55.114673][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.131186][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.139744][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.166582][ T4182] device veth0_vlan entered promiscuous mode [ 55.188273][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.197242][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.206544][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.215918][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.224829][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.235026][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.243079][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.256020][ T4182] device veth1_vlan entered promiscuous mode [ 55.278108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.287406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.298355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.307740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.319455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.330304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.339201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.348013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.356249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.364670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.387466][ T4184] device veth0_vlan entered promiscuous mode [ 55.404439][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.414438][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.423520][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.431773][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.441155][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.449539][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.464504][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.481823][ T4184] device veth1_vlan entered promiscuous mode [ 55.509797][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.522921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.530410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.540021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.562742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.590508][ T4187] device veth0_vlan entered promiscuous mode [ 55.604178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.618597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.627558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.636656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.645299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.653951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.667998][ T4184] device veth0_macvtap entered promiscuous mode [ 55.677911][ T4182] device veth0_macvtap entered promiscuous mode [ 55.691115][ T4187] device veth1_vlan entered promiscuous mode [ 55.703538][ T4184] device veth1_macvtap entered promiscuous mode [ 55.718253][ T4182] device veth1_macvtap entered promiscuous mode [ 55.763619][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.775180][ T4187] device veth0_macvtap entered promiscuous mode [ 55.785154][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.799796][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.808966][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.817685][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.826136][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.834388][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.844501][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.853243][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.861853][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.870686][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.887472][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.898044][ T4187] device veth1_macvtap entered promiscuous mode [ 55.905668][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.917348][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.928433][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.938650][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.947435][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.958041][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.967818][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.977275][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.986639][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.012102][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.022770][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.040862][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.051839][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.061147][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.070697][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.080097][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.092987][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.100897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.109169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.117836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.126755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.142666][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.153153][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.163732][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.175484][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.186918][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.195797][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.204802][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.214208][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.222949][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.246610][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.255967][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.267347][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.279886][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.290306][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.301017][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.313029][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.339939][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.348729][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.359759][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.368853][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.380463][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.389717][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.398631][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.407577][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.468392][ T4190] device veth0_vlan entered promiscuous mode [ 56.491215][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.500155][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.509340][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.518158][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.528124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.537107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.576590][ T4190] device veth1_vlan entered promiscuous mode [ 56.601950][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.615247][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.635624][ T4183] device veth0_vlan entered promiscuous mode [ 56.667931][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.676182][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.690956][ T4183] device veth1_vlan entered promiscuous mode [ 56.727000][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.727672][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.744258][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.745414][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.757154][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.784145][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.793831][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.797529][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.801965][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.817215][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.825732][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.834399][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.843335][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.863246][ T4190] device veth0_macvtap entered promiscuous mode [ 56.880797][ T4183] device veth0_macvtap entered promiscuous mode [ 56.891311][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.900018][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.910074][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.919434][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.940736][ T4183] device veth1_macvtap entered promiscuous mode [ 56.949340][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.959939][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.980342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.989168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.999934][ T4190] device veth1_macvtap entered promiscuous mode [ 57.017988][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.026199][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.037619][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.045367][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.059244][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.071177][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.080311][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.104412][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.116354][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.140192][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.150908][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.161207][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.162588][ T1678] Bluetooth: hci4: command 0x040f tx timeout [ 57.176004][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.178012][ T1678] Bluetooth: hci3: command 0x040f tx timeout [ 57.201751][ T1678] Bluetooth: hci0: command 0x040f tx timeout [ 57.205476][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.208526][ T1678] Bluetooth: hci1: command 0x040f tx timeout [ 57.221222][ T1678] Bluetooth: hci2: command 0x040f tx timeout [ 57.222935][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.239496][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.249607][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.261877][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.271917][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.282367][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.292379][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.302914][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.316002][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.333952][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.343134][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.351967][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.362562][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.378326][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.390499][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.412762][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.423575][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.433660][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.448808][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.461199][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.478023][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.489528][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.499762][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.510369][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.521448][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.532713][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.542560][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.553764][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.565107][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.587814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.648329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.668281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.685796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.702630][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.720320][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.729881][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.744365][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.771178][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.780714][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.789741][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.792330][ T4257] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.800403][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.212847][ T4257] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 58.295395][ T4257] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 58.414308][ T4257] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 58.425314][ T4257] usb 2-1: config 220 has no interface number 2 [ 58.431710][ T4257] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 58.445865][ T4257] usb 2-1: config 220 interface 0 has no altsetting 0 [ 58.562288][ T4257] usb 2-1: config 220 interface 76 has no altsetting 0 [ 58.592203][ T4257] usb 2-1: config 220 interface 1 has no altsetting 0 [ 58.753645][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.773606][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.779176][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.792342][ T4257] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 58.810821][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.815290][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.830327][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.843423][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.854604][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.859433][ T4257] usb 2-1: Product: syz [ 58.868229][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.874370][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.879936][ T4257] usb 2-1: Manufacturer: syz [ 58.887543][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.890758][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.910959][ T4257] usb 2-1: SerialNumber: syz [ 58.921546][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.065037][ T4323] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 59.087312][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.200700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.210695][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.233087][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 59.294514][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 59.340175][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 59.363029][ T4257] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 59.378971][ T4257] usb 2-1: No valid video chain found. [ 59.390933][ T4257] usb 2-1: selecting invalid altsetting 0 [ 59.430800][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 59.455629][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 59.512288][ T4264] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 59.523116][ T4257] usb 2-1: selecting invalid altsetting 0 [ 59.532470][ T4257] usbtest: probe of 2-1:220.1 failed with error -22 [ 59.576608][ T4257] usb 2-1: USB disconnect, device number 2 [ 59.644009][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.652943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 59.902181][ T4264] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 60.025960][ T4264] usb 5-1: config 0 has no interface number 0 [ 60.032441][ T4264] usb 5-1: config 0 interface 182 has no altsetting 0 [ 60.512473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.521487][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.530524][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.539541][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 60.548628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 60.557695][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 60.592744][ T4264] usb 5-1: language id specifier not provided by device, defaulting to English [ 60.865597][ T4344] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 60.992664][ T4264] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=40.a5 [ 61.429374][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.770043][ T4264] usb 5-1: Product: ᳒컉妇冑〔Ԝ䷝䯉宸 [ 61.824926][ T4264] usb 5-1: SerialNumber: syz [ 62.235268][ T4264] usb 5-1: config 0 descriptor?? [ 63.662172][ T4264] usb 5-1: can't set config #0, error -71 [ 63.696915][ T4264] usb 5-1: USB disconnect, device number 2 [ 63.735489][ T4381] Zero length message leads to an empty skb [ 63.798223][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 70.323538][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 71.323425][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333308][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.499775][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.572254][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.612149][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.643154][ T7] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 72.661820][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 72.663413][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.699258][ T7] usb 3-1: config 0 descriptor?? [ 73.363885][ T4515] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 73.420020][ T4515] exFAT-fs (nullb0): invalid boot record signature [ 73.426587][ T4515] exFAT-fs (nullb0): failed to read boot sector [ 73.432848][ T4515] exFAT-fs (nullb0): failed to recognize exfat type [ 73.775661][ T4264] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.552227][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 74.558233][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 74.996499][ T7] usb 3-1: USB disconnect, device number 2 [ 75.022123][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 75.615358][ T4264] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 75.618000][ T4542] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.649425][ T4264] usb 1-1: can't read configurations, error -71 [ 76.365026][ T1325] cfg80211: failed to load regulatory.db [ 82.525184][ T4615] vxfs: WRONG superblock magic 00000000 at 1 [ 82.532026][ T4615] vxfs: WRONG superblock magic 00000000 at 8 [ 82.538105][ T4615] vxfs: can't find superblock. [ 82.864197][ T4257] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 83.281083][ T4257] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.606674][ T4630] fido_id[4630]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.045674][ T4641] binder_alloc: 4635: binder_alloc_buf, no vma [ 86.595174][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.700842][ T1325] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 88.044988][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.013469][ T1325] usb 5-1: config 0 descriptor?? [ 89.332611][ T1325] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 89.784987][ T1325] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 89.836142][ T1325] [drm:udl_init] *ERROR* Selecting channel failed [ 89.968923][ T1325] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 89.978520][ T1325] [drm] Initialized udl on minor 2 [ 90.002264][ T1325] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 90.035085][ T1325] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 90.055425][ T1325] usb 5-1: USB disconnect, device number 3 [ 90.068545][ T4264] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 90.081448][ T4264] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 90.096708][ T4264] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 90.112200][ T4316] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.351935][ T4718] mkiss: ax0: crc mode is auto. [ 90.522286][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.621657][ T4316] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.772078][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.797134][ T4316] usb 1-1: config 0 descriptor?? [ 90.964210][ T4316] pwc: Askey VC010 type 2 USB webcam detected. [ 93.412114][ T4316] pwc: recv_control_msg error -32 req 02 val 2b00 [ 93.462257][ T4316] pwc: recv_control_msg error -32 req 02 val 2700 [ 93.564855][ T4316] pwc: recv_control_msg error -32 req 02 val 2c00 [ 94.516027][ T4316] pwc: recv_control_msg error -32 req 04 val 1000 [ 95.502175][ T4316] pwc: recv_control_msg error -71 req 04 val 1300 [ 95.522161][ T4316] pwc: recv_control_msg error -71 req 04 val 1400 [ 95.557688][ T4316] pwc: recv_control_msg error -71 req 02 val 2000 [ 95.678533][ T4316] pwc: recv_control_msg error -71 req 02 val 2100 [ 95.722192][ T4316] pwc: recv_control_msg error -71 req 04 val 1500 [ 95.729027][ T4773] capability: warning: `syz.3.128' uses deprecated v2 capabilities in a way that may be insecure [ 95.744439][ T4316] pwc: recv_control_msg error -71 req 02 val 2500 [ 95.782154][ T4316] pwc: recv_control_msg error -71 req 02 val 2400 [ 95.813437][ T4316] pwc: recv_control_msg error -71 req 02 val 2600 [ 95.846456][ T4316] pwc: recv_control_msg error -71 req 02 val 2900 [ 95.957298][ T4316] pwc: recv_control_msg error -71 req 02 val 2800 [ 96.027527][ T4316] pwc: recv_control_msg error -71 req 04 val 1100 [ 96.082133][ T4316] pwc: recv_control_msg error -71 req 04 val 1200 [ 96.122413][ T4765] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.163382][ T4316] pwc: Registered as video103. [ 96.232308][ T4316] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 97.135757][ T4316] usb 1-1: USB disconnect, device number 4 [ 103.808073][ T4863] device veth0_macvtap left promiscuous mode [ 103.840685][ T4863] macvtap0: refused to change device tx_queue_len [ 104.222244][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.902170][ T7] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 104.919786][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.950901][ T7] usb 1-1: config 0 has no interfaces? [ 104.989845][ T7] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 105.135174][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.182818][ T7] usb 1-1: config 0 descriptor?? [ 107.572105][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.862064][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 108.022197][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.014998][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.015984][ T4901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 109.117020][ T7] usb 3-1: config 0 has no interfaces? [ 109.152294][ T4302] usb 1-1: USB disconnect, device number 5 [ 109.307839][ T7] usb 3-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 109.323413][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.331602][ T7] usb 3-1: Product: syz [ 109.340735][ T7] usb 3-1: Manufacturer: syz [ 109.346053][ T7] usb 3-1: SerialNumber: syz [ 109.364716][ T7] usb 3-1: config 0 descriptor?? [ 109.412086][ T4264] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 109.542050][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.939133][ T4924] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.571981][ C0] sched: RT throttling activated [ 111.575507][ T4302] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.641335][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 112.689837][ T4189] usb 3-1: USB disconnect, device number 3 [ 112.833070][ T4264] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 112.833509][ T21] usb 5-1: device descriptor read/all, error -71 [ 112.928794][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.202211][ T4302] usb 1-1: device descriptor read/all, error -71 [ 113.272010][ T4264] usb 2-1: Product: syz [ 113.723093][ T4264] usb 2-1: config 0 descriptor?? [ 113.762175][ T4264] usb 2-1: can't set config #0, error -71 [ 113.792381][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.132172][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 114.302600][ T21] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.322191][ T21] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.332631][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.342275][ T21] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 114.374564][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.392626][ T4264] usb 2-1: USB disconnect, device number 3 [ 114.413469][ T4940] netlink: 96 bytes leftover after parsing attributes in process `syz.1.178'. [ 114.434328][ T21] usb 5-1: config 0 descriptor?? [ 115.112502][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.125113][ T21] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 115.262165][ T4189] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.335466][ T1325] usb 5-1: USB disconnect, device number 5 [ 115.371096][ T4955] fido_id[4955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 115.393004][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 115.505359][ T4957] binder: 4956:4957 ioctl c0306201 200000000680 returned -14 [ 115.542188][ T4189] usb 4-1: Using ep0 maxpacket: 16 [ 115.608268][ T4959] ubi0: attaching mtd0 [ 115.616240][ T4959] ubi0: scanning is finished [ 115.628155][ T4959] ubi0: empty MTD device detected [ 115.662121][ T4189] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.674809][ T4189] usb 4-1: config 0 has no interface number 0 [ 115.681054][ T4189] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 115.692383][ T4189] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 115.692502][ T7] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 115.716742][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.725064][ T7] usb 3-1: Product: syz [ 115.730545][ T7] usb 3-1: Manufacturer: syz [ 115.740937][ T7] usb 3-1: SerialNumber: syz [ 115.756329][ T7] usb 3-1: config 0 descriptor?? [ 115.773497][ T4959] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.791448][ T4959] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.805070][ T4959] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.814402][ T4959] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.821811][ T4959] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.834098][ T4959] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.845745][ T4959] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 596929959 [ 115.857990][ T4959] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.866496][ T4189] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 115.877343][ T4960] ubi0: background thread "ubi_bgt0d" started, PID 4960 [ 115.905041][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.932037][ T4189] usb 4-1: Product: syz [ 115.942175][ T4189] usb 4-1: Manufacturer: syz [ 115.962022][ T4189] usb 4-1: SerialNumber: syz [ 115.983157][ T4189] usb 4-1: config 0 descriptor?? [ 116.029724][ T7] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 116.292206][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.422014][ T4189] usb 4-1: USB disconnect, device number 2 [ 116.562136][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 116.682302][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.702198][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.733504][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.774463][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.808648][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.829932][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.866388][ T4971] udevd[4971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.905347][ T4189] Bluetooth: hci4: command 0x0405 tx timeout [ 117.140521][ T7] gspca_sunplus: reg_w_riv err -71 [ 117.145985][ T7] sunplus: probe of 3-1:0.0 failed with error -71 [ 117.154607][ T7] usb 3-1: USB disconnect, device number 4 [ 117.212281][ T21] usb 1-1: GET_CAPABILITIES returned 0 [ 117.217795][ T21] usbtmc 1-1:16.0: can't read capabilities [ 117.443703][ T4264] usb 1-1: USB disconnect, device number 8 [ 117.600947][ T4985] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 117.723012][ T4985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.739345][ T4988] bond1: (slave ip6erspan0): making interface the new active one [ 117.759511][ T4988] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 117.772410][ T4985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.192'. [ 117.786716][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 118.058666][ T4988] syz.4.192 (4988) used greatest stack depth: 20992 bytes left [ 121.366502][ T5029] mkiss: ax0: crc mode is auto. [ 125.992110][ T5069] sp0: Synchronizing with TNC [ 127.699896][ T5088] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 132.674139][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.681146][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.555409][ T5181] ODEBUG: Out of memory. ODEBUG disabled [ 137.820628][ T5187] overlayfs: unrecognized mount option "upperdir=" or missing value [ 137.851880][ T5181] syz.3.250 (5181): drop_caches: 2 [ 139.641805][ T5200] mmap: syz.0.257 (5200) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 140.274008][ T5217] netlink: 'syz.4.262': attribute type 3 has an invalid length. [ 142.297092][ T5237] smc: net device bond0 applied user defined pnetid SYZ2 [ 142.985240][ T4264] libceph: connect (1)[c::]:6789 error -101 [ 142.985240][ T4257] libceph: connect (1)[b::]:6789 error -101 [ 142.985632][ T4264] libceph: mon0 (1)[c::]:6789 connect error [ 142.992199][ T4257] libceph: mon0 (1)[b::]:6789 connect error [ 143.031916][ T5247] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.315629][ T4264] libceph: connect (1)[c::]:6789 error -101 [ 143.328471][ T4264] libceph: mon0 (1)[c::]:6789 connect error [ 143.702410][ T4302] libceph: connect (1)[b::]:6789 error -101 [ 143.994468][ T4302] libceph: mon0 (1)[b::]:6789 connect error [ 144.008559][ T5232] ceph: No mds server is up or the cluster is laggy [ 144.008570][ T5236] ceph: No mds server is up or the cluster is laggy [ 144.172669][ T5256] syz.2.272 (5256): /proc/5253/oom_adj is deprecated, please use /proc/5253/oom_score_adj instead. [ 144.542751][ T4264] libceph: connect (1)[c::]:6789 error -101 [ 144.548774][ T4264] libceph: mon0 (1)[c::]:6789 connect error [ 144.558315][ T5147] syz.1.236 (5147): drop_caches: 2 [ 144.575239][ T21] libceph: connect (1)[b::]:6789 error -101 [ 145.112175][ T21] libceph: mon0 (1)[b::]:6789 connect error [ 147.286510][ T146] Bluetooth: hci3: unknown advertising packet type: 0x31 [ 147.287570][ T146] Bluetooth: hci3: Malicious advertising data. [ 147.842350][ T4264] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.102205][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 148.262432][ T4264] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.362250][ T4264] usb 1-1: config 8 has an invalid interface number: 223 but max is 2 [ 148.370526][ T4264] usb 1-1: config 8 has an invalid interface number: 253 but max is 2 [ 149.387292][ T4264] usb 1-1: config 8 has an invalid interface number: 138 but max is 2 [ 149.396165][ T4264] usb 1-1: config 8 has no interface number 0 [ 149.402674][ T4264] usb 1-1: config 8 has no interface number 1 [ 149.413067][ T4264] usb 1-1: config 8 has no interface number 2 [ 149.420155][ T4264] usb 1-1: config 8 interface 223 has no altsetting 0 [ 149.436620][ T4264] usb 1-1: config 8 interface 253 has no altsetting 0 [ 149.446843][ T4264] usb 1-1: config 8 interface 138 has no altsetting 0 [ 149.722381][ T4264] usb 1-1: New USB device found, idVendor=2040, idProduct=7501, bcdDevice=3f.ac [ 149.753726][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.796108][ T4264] usb 1-1: Product: syz [ 149.801540][ T4264] usb 1-1: Manufacturer: syz [ 149.811516][ T4264] usb 1-1: SerialNumber: syz [ 150.373428][ T4264] pvrusb2: Hardware description: WinTV HVR-1950 Model 751xx [ 150.405049][ T4264] usb 1-1: selecting invalid altsetting 0 [ 150.659696][ T4264] pvrusb2: Hardware description: WinTV HVR-1950 Model 751xx [ 150.670162][ T4264] usb 1-1: selecting invalid altsetting 0 [ 150.770476][ T2422] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 150.807539][ T4264] pvrusb2: Hardware description: WinTV HVR-1950 Model 751xx [ 150.821474][ T2422] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 150.837533][ T4264] usb 1-1: selecting invalid altsetting 0 [ 150.876946][ T4264] usb 1-1: USB disconnect, device number 9 [ 151.823563][ T5333] [ 151.825920][ T5333] ====================================================== [ 151.832933][ T5333] WARNING: possible circular locking dependency detected [ 151.839957][ T5333] syzkaller #0 Not tainted [ 151.844366][ T5333] ------------------------------------------------------ [ 151.851382][ T5333] syz.0.298/5333 is trying to acquire lock: [ 151.857283][ T5333] ffff8880191d8120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 151.866887][ T5333] [ 151.866887][ T5333] but task is already holding lock: [ 151.874249][ T5333] ffffc90001747a90 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 151.883834][ T5333] [ 151.883834][ T5333] which lock already depends on the new lock. [ 151.883834][ T5333] [ 151.894229][ T5333] [ 151.894229][ T5333] the existing dependency chain (in reverse order) is: [ 151.903237][ T5333] [ 151.903237][ T5333] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 151.911122][ T5333] _raw_spin_lock+0x2a/0x40 [ 151.916129][ T5333] __inet_hash+0xe3/0x960 [ 151.920964][ T5333] inet_csk_listen_start+0x22f/0x320 [ 151.926748][ T5333] inet_listen+0x2e1/0x590 [ 151.931662][ T5333] __sys_listen+0x19d/0x220 [ 151.936665][ T5333] __x64_sys_listen+0x56/0x60 [ 151.941842][ T5333] do_syscall_64+0x4c/0xa0 [ 151.946762][ T5333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.953156][ T5333] [ 151.953156][ T5333] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 151.960865][ T5333] __lock_acquire+0x2c33/0x7c60 [ 151.966223][ T5333] lock_acquire+0x197/0x3f0 [ 151.971228][ T5333] mptcp_diag_get_info+0x1db/0x990 [ 151.976840][ T5333] inet_sk_diag_fill+0xef6/0x1b50 [ 151.982371][ T5333] mptcp_diag_dump+0xcca/0x1290 [ 151.987760][ T5333] __inet_diag_dump+0x1f6/0x380 [ 151.993136][ T5333] netlink_dump+0x676/0xcd0 [ 151.998141][ T5333] __netlink_dump_start+0x523/0x700 [ 152.003846][ T5333] inet_diag_handler_cmd+0x1be/0x290 [ 152.009639][ T5333] sock_diag_rcv_msg+0x164/0x3e0 [ 152.015080][ T5333] netlink_rcv_skb+0x1e0/0x430 [ 152.020347][ T5333] sock_diag_rcv+0x26/0x40 [ 152.025274][ T5333] netlink_unicast+0x774/0x920 [ 152.030541][ T5333] netlink_sendmsg+0x8ab/0xbc0 [ 152.035820][ T5333] sock_write_iter+0x29c/0x380 [ 152.041087][ T5333] do_iter_readv_writev+0x497/0x600 [ 152.046786][ T5333] do_iter_write+0x205/0x7b0 [ 152.051879][ T5333] do_writev+0x254/0x410 [ 152.056618][ T5333] do_syscall_64+0x4c/0xa0 [ 152.061548][ T5333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.067944][ T5333] [ 152.067944][ T5333] other info that might help us debug this: [ 152.067944][ T5333] [ 152.078165][ T5333] Possible unsafe locking scenario: [ 152.078165][ T5333] [ 152.085599][ T5333] CPU0 CPU1 [ 152.090949][ T5333] ---- ---- [ 152.096292][ T5333] lock(&h->lhash2[i].lock); [ 152.100949][ T5333] lock(sk_lock-AF_INET6); [ 152.107947][ T5333] lock(&h->lhash2[i].lock); [ 152.115121][ T5333] lock(sk_lock-AF_INET6); [ 152.119613][ T5333] [ 152.119613][ T5333] *** DEADLOCK *** [ 152.119613][ T5333] [ 152.127732][ T5333] 6 locks held by syz.0.298/5333: [ 152.132731][ T5333] #0: ffffffff8d2422a8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 152.142016][ T5333] #1: ffffffff8d242168 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 152.152362][ T5333] #2: ffff88801fb94698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 152.163031][ T5333] #3: ffffffff8d31c688 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 152.173270][ T5333] #4: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 152.182551][ T5333] #5: ffffc90001747a90 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 152.192530][ T5333] [ 152.192530][ T5333] stack backtrace: [ 152.198393][ T5333] CPU: 0 PID: 5333 Comm: syz.0.298 Not tainted syzkaller #0 [ 152.205652][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.215695][ T5333] Call Trace: [ 152.218955][ T5333] [ 152.221873][ T5333] dump_stack_lvl+0x168/0x230 [ 152.226546][ T5333] ? load_image+0x3b0/0x3b0 [ 152.231028][ T5333] ? show_regs_print_info+0x20/0x20 [ 152.236206][ T5333] ? print_circular_bug+0x12b/0x1a0 [ 152.241384][ T5333] check_noncircular+0x274/0x310 [ 152.246319][ T5333] ? add_chain_block+0x940/0x940 [ 152.251236][ T5333] ? lockdep_lock+0xdc/0x1e0 [ 152.255810][ T5333] ? __lock_acquire+0x13ad/0x7c60 [ 152.260812][ T5333] ? verify_lock_unused+0x140/0x140 [ 152.265989][ T5333] ? mark_lock+0x94/0x320 [ 152.270298][ T5333] __lock_acquire+0x2c33/0x7c60 [ 152.275131][ T5333] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 152.281098][ T5333] ? verify_lock_unused+0x140/0x140 [ 152.286278][ T5333] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 152.292238][ T5333] ? verify_lock_unused+0x140/0x140 [ 152.297419][ T5333] ? __local_bh_enable_ip+0xcb/0x1b0 [ 152.302681][ T5333] ? __local_bh_enable_ip+0x12a/0x1b0 [ 152.308033][ T5333] ? lockdep_hardirqs_on+0x94/0x140 [ 152.313210][ T5333] ? __local_bh_enable_ip+0x12a/0x1b0 [ 152.318556][ T5333] ? _local_bh_enable+0xa0/0xa0 [ 152.323382][ T5333] ? skb_put+0x117/0x210 [ 152.327608][ T5333] lock_acquire+0x197/0x3f0 [ 152.332094][ T5333] ? inet_sk_diag_fill+0xef6/0x1b50 [ 152.337271][ T5333] ? read_lock_is_recursive+0x10/0x10 [ 152.342621][ T5333] ? rcu_lock_release+0x5/0x20 [ 152.347551][ T5333] ? __lock_acquire+0x7c60/0x7c60 [ 152.352595][ T5333] ? inet_sk_diag_fill+0xef6/0x1b50 [ 152.357900][ T5333] mptcp_diag_get_info+0x1db/0x990 [ 152.363006][ T5333] ? inet_sk_diag_fill+0xef6/0x1b50 [ 152.368243][ T5333] inet_sk_diag_fill+0xef6/0x1b50 [ 152.373269][ T5333] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 152.378987][ T5333] ? do_raw_spin_lock+0x11d/0x280 [ 152.383991][ T5333] ? inet_diag_bc_sk+0x187/0x10c0 [ 152.388998][ T5333] ? preempt_schedule_thunk+0x16/0x18 [ 152.394443][ T5333] mptcp_diag_dump+0xcca/0x1290 [ 152.399369][ T5333] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 152.405945][ T5333] __inet_diag_dump+0x1f6/0x380 [ 152.410778][ T5333] netlink_dump+0x676/0xcd0 [ 152.415266][ T5333] ? netlink_lookup+0x1d0/0x1d0 [ 152.420106][ T5333] ? __inet_diag_dump_start+0x805/0x970 [ 152.425636][ T5333] __netlink_dump_start+0x523/0x700 [ 152.430819][ T5333] inet_diag_handler_cmd+0x1be/0x290 [ 152.436094][ T5333] ? rcu_lock_release+0x20/0x20 [ 152.440948][ T5333] ? inet_diag_handler_get_info+0xb80/0xb80 [ 152.446825][ T5333] ? inet_diag_dump_start+0x20/0x20 [ 152.452002][ T5333] ? inet_diag_dump+0x50/0x50 [ 152.456664][ T5333] ? rcu_lock_release+0x20/0x20 [ 152.461493][ T5333] sock_diag_rcv_msg+0x164/0x3e0 [ 152.466414][ T5333] netlink_rcv_skb+0x1e0/0x430 [ 152.471159][ T5333] ? sock_diag_bind+0xa0/0xa0 [ 152.475814][ T5333] ? netlink_ack+0xb60/0xb60 [ 152.480383][ T5333] ? __lock_acquire+0x7c60/0x7c60 [ 152.485395][ T5333] sock_diag_rcv+0x26/0x40 [ 152.489800][ T5333] netlink_unicast+0x774/0x920 [ 152.494616][ T5333] netlink_sendmsg+0x8ab/0xbc0 [ 152.499360][ T5333] ? netlink_getsockopt+0x560/0x560 [ 152.504577][ T5333] ? aa_sock_msg_perm+0x94/0x150 [ 152.509518][ T5333] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 152.514781][ T5333] ? security_socket_sendmsg+0x7c/0xa0 [ 152.520218][ T5333] sock_write_iter+0x29c/0x380 [ 152.524965][ T5333] ? sock_read_iter+0x340/0x340 [ 152.529797][ T5333] do_iter_readv_writev+0x497/0x600 [ 152.534973][ T5333] ? generic_file_rw_checks+0x280/0x280 [ 152.540495][ T5333] ? common_file_perm+0x171/0x1c0 [ 152.545498][ T5333] ? fsnotify_perm+0x5d/0x560 [ 152.550154][ T5333] ? security_file_permission+0x75/0xa0 [ 152.555693][ T5333] do_iter_write+0x205/0x7b0 [ 152.560267][ T5333] ? import_iovec+0x6f/0xa0 [ 152.564759][ T5333] do_writev+0x254/0x410 [ 152.568988][ T5333] ? do_readv+0x3e0/0x3e0 [ 152.573299][ T5333] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 152.579257][ T5333] ? lock_chain_count+0x20/0x20 [ 152.584096][ T5333] ? vtime_user_exit+0x2dc/0x400 [ 152.589099][ T5333] ? lockdep_hardirqs_on+0x94/0x140 [ 152.594277][ T5333] do_syscall_64+0x4c/0xa0 [ 152.598675][ T5333] ? clear_bhb_loop+0x30/0x80 [ 152.603329][ T5333] ? clear_bhb_loop+0x30/0x80 [ 152.607982][ T5333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.613859][ T5333] RIP: 0033:0x7f11d12b5fc9 [ 152.618257][ T5333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.637930][ T5333] RSP: 002b:00007f11cf51d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 152.646323][ T5333] RAX: ffffffffffffffda RBX: 00007f11d150cfa0 RCX: 00007f11d12b5fc9 [ 152.654281][ T5333] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 152.662232][ T5333] RBP: 00007f11d1338f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.670790][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.678737][ T5333] R13: 00007f11d150d038 R14: 00007f11d150cfa0 R15: 00007fff92aa3338 [ 152.686695][ T5333] [ 152.689758][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.696896][ T5333] BUG: sleeping function called from invalid context at net/core/sock.c:3288 [ 152.706773][ T5333] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5333, name: syz.0.298 [ 152.715801][ T5333] INFO: lockdep is turned off. [ 152.720595][ T5333] Preemption disabled at: [ 152.720615][ T5333] [<0000000000000000>] 0x0 [ 152.729439][ T5333] CPU: 0 PID: 5333 Comm: syz.0.298 Not tainted syzkaller #0 [ 152.736724][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.747556][ T5333] Call Trace: [ 152.750829][ T5333] [ 152.753751][ T5333] dump_stack_lvl+0x168/0x230 [ 152.758442][ T5333] ? show_regs_print_info+0x20/0x20 [ 152.763633][ T5333] ? load_image+0x3b0/0x3b0 [ 152.768203][ T5333] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.774336][ T5333] ___might_sleep+0x47c/0x600 [ 152.778993][ T5333] ? __might_sleep+0xf0/0xf0 [ 152.783556][ T5333] ? read_lock_is_recursive+0x10/0x10 [ 152.788904][ T5333] ? rcu_lock_release+0x5/0x20 [ 152.793646][ T5333] __lock_sock_fast+0x2f/0xe0 [ 152.798301][ T5333] ? inet_sk_diag_fill+0xef6/0x1b50 [ 152.803477][ T5333] mptcp_diag_get_info+0x1e7/0x990 [ 152.808571][ T5333] inet_sk_diag_fill+0xef6/0x1b50 [ 152.813577][ T5333] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 152.819271][ T5333] ? do_raw_spin_lock+0x11d/0x280 [ 152.824271][ T5333] ? inet_diag_bc_sk+0x187/0x10c0 [ 152.829272][ T5333] ? preempt_schedule_thunk+0x16/0x18 [ 152.834624][ T5333] mptcp_diag_dump+0xcca/0x1290 [ 152.839475][ T5333] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 152.846039][ T5333] __inet_diag_dump+0x1f6/0x380 [ 152.850867][ T5333] netlink_dump+0x676/0xcd0 [ 152.855352][ T5333] ? netlink_lookup+0x1d0/0x1d0 [ 152.860281][ T5333] ? __inet_diag_dump_start+0x805/0x970 [ 152.865833][ T5333] __netlink_dump_start+0x523/0x700 [ 152.871012][ T5333] inet_diag_handler_cmd+0x1be/0x290 [ 152.876283][ T5333] ? rcu_lock_release+0x20/0x20 [ 152.881125][ T5333] ? inet_diag_handler_get_info+0xb80/0xb80 [ 152.886996][ T5333] ? inet_diag_dump_start+0x20/0x20 [ 152.892173][ T5333] ? inet_diag_dump+0x50/0x50 [ 152.896835][ T5333] ? rcu_lock_release+0x20/0x20 [ 152.902056][ T5333] sock_diag_rcv_msg+0x164/0x3e0 [ 152.906990][ T5333] netlink_rcv_skb+0x1e0/0x430 [ 152.911830][ T5333] ? sock_diag_bind+0xa0/0xa0 [ 152.916502][ T5333] ? netlink_ack+0xb60/0xb60 [ 152.921081][ T5333] ? __lock_acquire+0x7c60/0x7c60 [ 152.926088][ T5333] sock_diag_rcv+0x26/0x40 [ 152.930482][ T5333] netlink_unicast+0x774/0x920 [ 152.935222][ T5333] netlink_sendmsg+0x8ab/0xbc0 [ 152.939965][ T5333] ? netlink_getsockopt+0x560/0x560 [ 152.945141][ T5333] ? aa_sock_msg_perm+0x94/0x150 [ 152.950055][ T5333] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 152.955338][ T5333] ? security_socket_sendmsg+0x7c/0xa0 [ 152.960775][ T5333] sock_write_iter+0x29c/0x380 [ 152.965517][ T5333] ? sock_read_iter+0x340/0x340 [ 152.970346][ T5333] do_iter_readv_writev+0x497/0x600 [ 152.975523][ T5333] ? generic_file_rw_checks+0x280/0x280 [ 152.981044][ T5333] ? common_file_perm+0x171/0x1c0 [ 152.986047][ T5333] ? fsnotify_perm+0x5d/0x560 [ 152.990704][ T5333] ? security_file_permission+0x75/0xa0 [ 152.996224][ T5333] do_iter_write+0x205/0x7b0 [ 153.000801][ T5333] ? import_iovec+0x6f/0xa0 [ 153.005300][ T5333] do_writev+0x254/0x410 [ 153.009545][ T5333] ? do_readv+0x3e0/0x3e0 [ 153.013915][ T5333] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 153.019878][ T5333] ? lock_chain_count+0x20/0x20 [ 153.024734][ T5333] ? vtime_user_exit+0x2dc/0x400 [ 153.029656][ T5333] ? lockdep_hardirqs_on+0x94/0x140 [ 153.034841][ T5333] do_syscall_64+0x4c/0xa0 [ 153.039252][ T5333] ? clear_bhb_loop+0x30/0x80 [ 153.043911][ T5333] ? clear_bhb_loop+0x30/0x80 [ 153.048568][ T5333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.054526][ T5333] RIP: 0033:0x7f11d12b5fc9 [ 153.058918][ T5333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.078523][ T5333] RSP: 002b:00007f11cf51d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 153.086919][ T5333] RAX: ffffffffffffffda RBX: 00007f11d150cfa0 RCX: 00007f11d12b5fc9 [ 153.094882][ T5333] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 153.102839][ T5333] RBP: 00007f11d1338f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.110795][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.118743][ T5333] R13: 00007f11d150d038 R14: 00007f11d150cfa0 R15: 00007fff92aa3338 [ 153.126772][ T5333] [ 153.129858][ C0] vkms_vblank_simulate: vblank timer overrun