last executing test programs: 9m52.013332484s ago: executing program 0 (id=212): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 9m51.939545121s ago: executing program 0 (id=214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034700)=""/102400, 0x19000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffa, 0x4) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 9m51.083848946s ago: executing program 0 (id=217): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$watch_queue(0x0, 0x80) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 9m47.887612261s ago: executing program 0 (id=223): syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001"], 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004f0033"], 0x4394) 9m43.375725877s ago: executing program 0 (id=237): setresgid(0xee00, 0x0, 0x0) io_setup(0x800, &(0x7f0000000440)=0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10fff9) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4a4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) io_submit(r0, 0x0, &(0x7f0000000940)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 9m41.367789736s ago: executing program 0 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 9m26.315172693s ago: executing program 32 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 12.263537997s ago: executing program 5 (id=2536): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) 11.23038692s ago: executing program 5 (id=2538): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x1148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r6}) pselect6(0x40, &(0x7f00000003c0)={0x8, 0x78ad, 0x5, 0xba2b, 0x9, 0x900, 0x1, 0xea8b}, 0x0, &(0x7f0000000540)={0x8, 0xe9, 0x9, 0x101, 0xffffffffffff1931, 0x8000, 0xc6bf, 0x8}, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={[0xea78]}, 0x8}) 11.115157401s ago: executing program 1 (id=2540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x5, 0x7, 0x59565955, 0x6, 0x9aa5, 0x6, 0x7, 0xf20e, 0x1, 0x0, 0x1, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x34, 0x64, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {0xa}, {0xc, 0xffff}}, [@f_rsvp6={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040091) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(0x0, 0x413edd7, 0x50900) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) 10.960525946s ago: executing program 3 (id=2541): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bridge0\x00', {0x2}, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x4, 0x9, 0x0, 0x6, 0xfa10, 0xffffffff}, 0x0) madvise(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0x2) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000200)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000200)={{0x8, 0x3, 0x5, 0x3, 'syz1\x00', 0x9}, 0x3, 0x2, 0x8, 0x0, 0x2, 0x5d2, 'syz0\x00', &(0x7f0000000340)=['/dev/00\xdbHxSv\x99/\xbf*\n\xb9q\xbay\xf0a#\x00F8\x0f}Eu\x9e\xa1%@aG\xca\x82\x8a\xd2\x06\xa6`g\xfd\xd3\x98\xca\xbf\xdeih\"\x87\x8a\xc1%\x986+K~S\xbe\xa9\xad\xfc\xea\xaf\x8ea\xf0Q\x87\xd7\xc3\xb7c\xcaq\x87eR\x01T\x7f\xdb\xa7\xff\xc4\xc9\x89', '/dev/snd/controlC#\x00'], 0x70}) 10.187494963s ago: executing program 5 (id=2542): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) r4 = socket(0x2b, 0x80801, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r6}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000a72000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @remote}) 8.480798721s ago: executing program 4 (id=2545): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 8.231535946s ago: executing program 4 (id=2546): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xe0) 7.443593214s ago: executing program 4 (id=2548): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) 6.457998751s ago: executing program 4 (id=2550): r0 = socket(0x80000000000000a, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x2, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x4, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x10b, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) 5.415459894s ago: executing program 1 (id=2552): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800), 0x0) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) 5.330148662s ago: executing program 4 (id=2553): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) bind$netrom(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a32000000000800"], 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 5.299971065s ago: executing program 1 (id=2554): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = gettid() tkill(r2, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='vxfs\x00', 0x1006404, 0x0) 4.726365742s ago: executing program 3 (id=2555): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010200000000000000000a00000004000380300002802c00018014000300fc00000000000000b94df7a0000000201400040000000000000000000000ffffac1414aa"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) close(r2) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r1}}, 0x18) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a000100"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 4.455853039s ago: executing program 5 (id=2556): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x240) r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, 0x0, 0x2000c090) close_range(r2, r3, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x1, 0x8, 0x8}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[], 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) 3.73565396s ago: executing program 3 (id=2557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x4001) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x5, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@unlock_all, 0xb) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) 2.81920819s ago: executing program 3 (id=2558): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x81, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 2.690994033s ago: executing program 3 (id=2559): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xe0) 2.571747545s ago: executing program 2 (id=2560): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) 2.571121665s ago: executing program 3 (id=2561): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) 2.451131057s ago: executing program 2 (id=2562): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000440)) 2.290284623s ago: executing program 2 (id=2563): r0 = socket(0x80000000000000a, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x2, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x4, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x10b, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) 2.050180207s ago: executing program 1 (id=2564): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800), 0x0) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) 1.191736502s ago: executing program 1 (id=2565): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 1.113627439s ago: executing program 2 (id=2566): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fa32a328bb46f9b4ad66621684"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) 1.097725451s ago: executing program 1 (id=2567): r0 = socket(0x3, 0xf, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026fcf786b4a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 973.013123ms ago: executing program 2 (id=2568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4001) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x5, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@unlock_all, 0xb) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) 940.066226ms ago: executing program 4 (id=2569): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r5 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) syz_io_uring_setup(0x234, &(0x7f0000000100)={0x0, 0xe5, 0x10100, 0x0, 0x376}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) 787.826352ms ago: executing program 5 (id=2570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r0, 0xffffffffffffffff, 0x36, 0x0, @val=@tracing={0x0, 0x3}}, 0x75) 752.162865ms ago: executing program 5 (id=2571): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 0s ago: executing program 2 (id=2572): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 38.911902][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.926128][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. syzkaller login: [ 63.588617][ T4172] cgroup: Unknown subsys name 'net' [ 63.723301][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.227655][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.720982][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 66.744286][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.761350][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 66.831976][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 66.884701][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 66.958306][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.965428][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.974013][ T4182] device bridge_slave_0 entered promiscuous mode [ 66.983490][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.990700][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.999339][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.026535][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.033628][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.041801][ T4182] device bridge_slave_1 entered promiscuous mode [ 67.049525][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.056873][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.064752][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.081537][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.088892][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.096976][ T4183] device bridge_slave_0 entered promiscuous mode [ 67.113554][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.120691][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.129009][ T4183] device bridge_slave_1 entered promiscuous mode [ 67.145096][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.152297][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.164137][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.181886][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.208553][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.215711][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.223978][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.233584][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.252473][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.284952][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.296267][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.328727][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.340271][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.364453][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.371679][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.379853][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.388295][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.395360][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.403576][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.413102][ T4182] team0: Port device team_slave_0 added [ 67.422109][ T4182] team0: Port device team_slave_1 added [ 67.436342][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.448302][ T4196] team0: Port device team_slave_0 added [ 67.491228][ T4196] team0: Port device team_slave_1 added [ 67.505335][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.525807][ T4183] team0: Port device team_slave_0 added [ 67.541857][ T4184] team0: Port device team_slave_0 added [ 67.555849][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.566357][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.573534][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.600014][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.612978][ T4183] team0: Port device team_slave_1 added [ 67.620265][ T4184] team0: Port device team_slave_1 added [ 67.637355][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.644372][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.670412][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.689819][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.696884][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.723138][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.764140][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.771444][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.798546][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.823904][ T4185] team0: Port device team_slave_0 added [ 67.838633][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.845602][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.871868][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.887936][ T4185] team0: Port device team_slave_1 added [ 67.906196][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.913468][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.939534][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.951452][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.958663][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.984746][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.022326][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.029698][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.055819][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.088114][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.095103][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.121197][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.134063][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.141225][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.167322][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.181416][ T4182] device hsr_slave_0 entered promiscuous mode [ 68.188454][ T4182] device hsr_slave_1 entered promiscuous mode [ 68.233093][ T4183] device hsr_slave_0 entered promiscuous mode [ 68.240032][ T4183] device hsr_slave_1 entered promiscuous mode [ 68.247660][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.255437][ T4183] Cannot create hsr debugfs directory [ 68.263974][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.270854][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.277621][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.285186][ T4196] Cannot create hsr debugfs directory [ 68.310473][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.317311][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.323810][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.331497][ T4184] Cannot create hsr debugfs directory [ 68.357457][ T2287] Bluetooth: hci1: command 0x0409 tx timeout [ 68.364269][ T2287] Bluetooth: hci2: command 0x0409 tx timeout [ 68.366624][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 68.371499][ T2287] Bluetooth: hci3: command 0x0409 tx timeout [ 68.385877][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.393308][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.400063][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.407792][ T4185] Cannot create hsr debugfs directory [ 68.437575][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 68.725640][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.737001][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.746594][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.755597][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.806282][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.823049][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.839168][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.857151][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.913904][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.923485][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.962803][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.971630][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.049469][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.061880][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.072289][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.088073][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.134148][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.150844][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.164591][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.177767][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.195663][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.215535][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.224662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.239170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.260786][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.276295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.285694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.298361][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.331449][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.341554][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.351436][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.358774][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.368773][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.378191][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.387343][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.394408][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.402277][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.412453][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.457791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.468459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.481282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.491919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.500975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.510529][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.517648][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.525418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.534930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.547455][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.558739][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.571296][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.588713][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.597898][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.606263][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.613393][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.640130][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.649487][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.660147][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.669695][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.690231][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.699456][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.711986][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.723715][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.731347][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.740042][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.748635][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.764739][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.785561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.795669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.813406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.825089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.847570][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.865661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.874134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.882496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.891614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.902492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.911271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.919886][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.927086][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.934806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.943198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.952860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.977065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.985727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.997439][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.004524][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.013862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.036179][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.047201][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.077943][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.086194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.095821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.105344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.115365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.125003][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.132123][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.140958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.150403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.159350][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.166630][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.174470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.183271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.192124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.201934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.210326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.222538][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.260117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.270147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.284822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.295055][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.302206][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.317710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.327306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.335729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.344811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.353563][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.360677][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.368664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.378974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.388036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.396647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.405002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.413630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.422304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.436704][ T4261] Bluetooth: hci3: command 0x041b tx timeout [ 70.443117][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 70.452226][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 70.459417][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.466856][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 70.477470][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.493582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.507437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.514995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.523685][ T4248] Bluetooth: hci4: command 0x041b tx timeout [ 70.534196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.544334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.553310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.562370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.571438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.581519][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.590747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.601017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.629988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.642367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.654818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.669839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.682570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.691449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.700194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.708815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.718176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.736890][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.750384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.760891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.777962][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.813882][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.828256][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.837294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.844773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.854420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.863843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.873675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.882572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.906002][ T4184] device veth0_vlan entered promiscuous mode [ 70.933566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.943255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.954246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.962330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.970492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.978753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.992288][ T4184] device veth1_vlan entered promiscuous mode [ 71.020646][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.046712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.055721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.086375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.096042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.140753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.152898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.178517][ T4184] device veth0_macvtap entered promiscuous mode [ 71.212703][ T4184] device veth1_macvtap entered promiscuous mode [ 71.229312][ T4182] device veth0_vlan entered promiscuous mode [ 71.247268][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.253861][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.274500][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.283581][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.292377][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.301259][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.313855][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.322525][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.331623][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.339493][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.369836][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.383846][ T4182] device veth1_vlan entered promiscuous mode [ 71.399450][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.408058][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.415552][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.430684][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.448353][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.457939][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.472901][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.490797][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.512557][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.520952][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.530085][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.541870][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.551719][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.561224][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.570600][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.588808][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.598639][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.608827][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.618333][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.634401][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.643914][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.682684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.692452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.739674][ T4182] device veth0_macvtap entered promiscuous mode [ 71.750023][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.758273][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.767113][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.775487][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.784138][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.793231][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.802839][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.812435][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.820805][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.831460][ T4185] device veth0_vlan entered promiscuous mode [ 71.848465][ T4196] device veth0_vlan entered promiscuous mode [ 71.863376][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.872290][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.885006][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.894429][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.908363][ T4183] device veth0_vlan entered promiscuous mode [ 71.915730][ T4182] device veth1_macvtap entered promiscuous mode [ 71.927719][ T4196] device veth1_vlan entered promiscuous mode [ 71.945270][ T4185] device veth1_vlan entered promiscuous mode [ 71.962920][ T4183] device veth1_vlan entered promiscuous mode [ 71.982228][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.993643][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.005361][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.023389][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.034743][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.054020][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.071106][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.080280][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.091977][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.100989][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.111742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.120650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.130183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.139339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.183284][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.184327][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.194223][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.211261][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.221373][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.232595][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.241358][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.275378][ T4183] device veth0_macvtap entered promiscuous mode [ 72.288439][ T4183] device veth1_macvtap entered promiscuous mode [ 72.304930][ T4185] device veth0_macvtap entered promiscuous mode [ 72.314658][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.324241][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.332878][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.341723][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.350524][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.386565][ T4196] device veth0_macvtap entered promiscuous mode [ 72.401678][ T4185] device veth1_macvtap entered promiscuous mode [ 72.414744][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.414767][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.435047][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.435058][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.453624][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.464639][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.476115][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.485306][ T4196] device veth1_macvtap entered promiscuous mode [ 72.498459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.509723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.517124][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 72.520411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.524524][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 72.532095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.545529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.548963][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 72.554966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.563909][ T4240] Bluetooth: hci3: command 0x040f tx timeout [ 72.577472][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.589135][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.597160][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 72.605027][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.615550][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.627634][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.657231][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.678187][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.695120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.704097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.713258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.724114][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.740789][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.749599][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.759025][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.788018][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.796023][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.814107][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.827938][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.843201][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.854239][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.864656][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.875448][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.888574][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.914350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.924067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.934368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.948676][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.959716][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.971046][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.982717][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.993151][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.005244][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.015674][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.028664][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.042573][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.171343][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.198711][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.210281][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.220993][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.301260][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.403918][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.526243][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.593354][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.683263][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.808646][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.820397][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.840271][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.858937][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.872959][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.886248][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.903168][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.914135][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.925790][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.937190][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.948752][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.979758][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.010685][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.021518][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.030557][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.046007][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.074144][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.089098][ T4303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.126275][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141326][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.155054][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.176173][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.219571][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.257260][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.286947][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.313626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.321326][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.372830][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.561310][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.578281][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.594480][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.598665][ T4240] Bluetooth: hci3: command 0x0419 tx timeout [ 74.616987][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.636988][ T4240] Bluetooth: hci0: command 0x0419 tx timeout [ 74.795843][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.815321][ T4240] Bluetooth: hci2: command 0x0419 tx timeout [ 74.822803][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.431085][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.440486][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.450103][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.459357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.468605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.477824][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.487156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.496698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.505927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.515439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 76.726018][ T4240] Bluetooth: hci1: command 0x0419 tx timeout [ 76.740609][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.764551][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.919387][ T4240] Bluetooth: hci4: command 0x0419 tx timeout [ 77.697055][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.743748][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.787364][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.908486][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.507647][ T4334] binder: BINDER_SET_CONTEXT_MGR already set [ 78.513775][ T4334] binder: 4333:4334 ioctl 4018620d 2000000002c0 returned -16 [ 78.593798][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 80.218614][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 80.334738][ T4261] libceph: connect (1)[b::]:6789 error -101 [ 80.359412][ T4261] libceph: mon0 (1)[b::]:6789 connect error [ 80.488992][ T4240] libceph: connect (1)[c::]:6789 error -101 [ 80.495100][ T4240] libceph: mon0 (1)[c::]:6789 connect error [ 80.730336][ T4339] ceph: No mds server is up or the cluster is laggy [ 80.730336][ T4332] ceph: No mds server is up or the cluster is laggy [ 80.976902][ T4233] libceph: connect (1)[b::]:6789 error -101 [ 80.983412][ T4233] libceph: mon0 (1)[b::]:6789 connect error [ 81.708365][ T4356] serio: Serial port ptm0 [ 81.980865][ T4364] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.145518][ T4396] capability: warning: `syz.1.28' uses deprecated v2 capabilities in a way that may be insecure [ 85.284026][ T4397] ======================================================= [ 85.284026][ T4397] WARNING: The mand mount option has been deprecated and [ 85.284026][ T4397] and is ignored by this kernel. Remove the mand [ 85.284026][ T4397] option from the mount to silence this warning. [ 85.284026][ T4397] ======================================================= [ 86.602100][ T21] cfg80211: failed to load regulatory.db [ 91.009386][ T4419] orangefs_mount: mount request failed with -4 [ 92.997862][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.005994][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.401614][ T4450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.373228][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.306547][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 105.446747][ T4233] usb 2-1: unable to read config index 0 descriptor/all [ 105.454099][ T4233] usb 2-1: can't read configurations, error -71 [ 109.946430][ C1] sched: RT throttling activated [ 110.394821][ T4622] Zero length message leads to an empty skb [ 110.697642][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 113.624472][ T4240] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.866750][ T4240] usb 3-1: Using ep0 maxpacket: 8 [ 115.588970][ T4240] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 115.597113][ T4240] usb 3-1: can't read configurations, error -71 [ 129.466055][ T4826] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 4, id = 0 [ 133.129631][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.135968][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.843547][ T4895] ODEBUG: Out of memory. ODEBUG disabled [ 137.726487][ T4910] netlink: 277 bytes leftover after parsing attributes in process `syz.0.179'. [ 145.861540][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 151.747976][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 152.597731][ T4240] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.676550][ T4240] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.321159][ T4240] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.706685][ T4240] usb 4-1: string descriptor 0 read error: -71 [ 154.713031][ T4240] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.744384][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.786633][ T4240] usb 4-1: can't set config #1, error -71 [ 154.812000][ T4240] usb 4-1: USB disconnect, device number 2 [ 155.122929][ T4233] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 155.174749][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 155.446515][ T4240] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.557070][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.589507][ T4233] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.686506][ T4240] usb 4-1: Using ep0 maxpacket: 8 [ 156.507000][ T4233] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.535754][ T4233] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.556729][ T4233] usb 1-1: Manufacturer: syz [ 156.568208][ T4233] usb 1-1: config 0 descriptor?? [ 156.589731][ T4240] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 158.867138][ T4240] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 158.998741][ T4240] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.140455][ T4240] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.157070][ T4233] usb 1-1: can't set config #0, error -71 [ 159.222947][ T4233] usb 1-1: USB disconnect, device number 2 [ 159.402460][ T4240] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.524194][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.846631][ T4240] usb 4-1: can't set config #16, error -71 [ 160.331069][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 160.406574][ T4240] usb 4-1: USB disconnect, device number 3 [ 160.936934][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.957645][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.076826][ T23] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.179589][ T5123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.240'. [ 161.180851][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.208205][ T23] usb 5-1: SerialNumber: syz [ 161.227069][ T5123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.240'. [ 161.587443][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 162.302056][ T23] usb 5-1: 0:2 : does not exist [ 162.336901][ T23] usb 5-1: unit 5 not found! [ 162.435117][ T23] usb 5-1: USB disconnect, device number 2 [ 162.483324][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 162.888560][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.382760][ T5182] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.925045][ T5196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.258'. [ 167.960178][ T5196] process 'syz.1.258' launched './file0' with NULL argv: empty string added [ 168.368095][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 169.901284][ T5209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.264'. [ 170.052225][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 176.006528][ T4233] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.676909][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.771792][ T4233] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.078398][ T4233] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.258232][ T4233] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 178.276606][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.285239][ T4233] usb 2-1: Product: syz [ 178.294596][ T4233] usb 2-1: Manufacturer: syz [ 178.299620][ T4233] usb 2-1: SerialNumber: syz [ 179.900850][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 180.194503][ T4233] usb 2-1: can't set config #1, error -71 [ 181.005895][ T4233] usb 2-1: USB disconnect, device number 4 [ 181.965590][ T5285] chnl_net:caif_netlink_parms(): no params data found [ 182.036545][ T4233] Bluetooth: hci5: command 0x0409 tx timeout [ 182.172017][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.222528][ T5285] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.253941][ T5285] device bridge_slave_0 entered promiscuous mode [ 182.611583][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.635010][ T5285] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.992730][ T5285] device bridge_slave_1 entered promiscuous mode [ 183.271859][ T4730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.269671][ T4261] Bluetooth: hci5: command 0x041b tx timeout [ 185.356227][ T4730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.733913][ T5285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.768322][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 185.799357][ T5338] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.808557][ T5338] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.817428][ T5338] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.826137][ T5338] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.858180][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 185.931778][ T5285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.101211][ T4730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.280100][ T4730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.384297][ T5285] team0: Port device team_slave_0 added [ 186.427146][ T5285] team0: Port device team_slave_1 added [ 186.520485][ T5285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.539494][ T5285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.565793][ T5285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.583256][ T5285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.590601][ T5285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.619181][ T5285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.808111][ T5285] device hsr_slave_0 entered promiscuous mode [ 186.825065][ T5285] device hsr_slave_1 entered promiscuous mode [ 186.836921][ T5285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.849219][ T5285] Cannot create hsr debugfs directory [ 187.170167][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 187.322436][ T4240] Bluetooth: hci5: command 0x040f tx timeout [ 189.703880][ T5285] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.028716][ T5282] Bluetooth: hci5: command 0x0419 tx timeout [ 190.136516][ T5285] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.306640][ T5285] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.331824][ T5285] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.271538][ T4248] Bluetooth: hci3: command 0x0406 tx timeout [ 191.289291][ T4248] Bluetooth: hci2: command 0x0406 tx timeout [ 191.355927][ T4248] Bluetooth: hci4: command 0x0406 tx timeout [ 191.397665][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 191.475735][ T5406] netlink: 'syz.2.315': attribute type 12 has an invalid length. [ 191.502442][ T5406] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 191.531038][ T5406] netlink: 148 bytes leftover after parsing attributes in process `syz.2.315'. [ 193.285672][ T5417] [U] t [ 194.410428][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.417060][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.689269][ T5285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.034035][ T5285] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.768814][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.799988][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.024989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.087500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.117629][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.124711][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.274107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.291970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.322578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.381476][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.388585][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.553983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.603708][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.101762][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.109353][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.133721][ T5467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.227087][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.274301][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.347044][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.459485][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.484551][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.734647][ T4730] device hsr_slave_0 left promiscuous mode [ 198.109154][ T4730] device hsr_slave_1 left promiscuous mode [ 198.138784][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.146301][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.195271][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.166917][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.176015][ T4730] device bridge_slave_1 left promiscuous mode [ 199.205954][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.282231][ T4730] device bridge_slave_0 left promiscuous mode [ 199.300453][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.390109][ T4730] device veth1_macvtap left promiscuous mode [ 199.407937][ T4730] device veth0_macvtap left promiscuous mode [ 199.573351][ T4730] device veth1_vlan left promiscuous mode [ 199.581066][ T4730] device veth0_vlan left promiscuous mode [ 200.463150][ T4730] team0 (unregistering): Port device team_slave_1 removed [ 200.503173][ T4730] team0 (unregistering): Port device team_slave_0 removed [ 200.510733][ T4304] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 200.665428][ T4730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.776618][ T4304] usb 3-1: Using ep0 maxpacket: 8 [ 200.849544][ T4730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.897157][ T4304] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 200.927690][ T4304] usb 3-1: config 2 has no interface number 0 [ 200.999458][ T4304] usb 3-1: config 2 interface 31 has no altsetting 0 [ 201.202618][ T4730] bond0 (unregistering): Released all slaves [ 201.226663][ T4304] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 201.240427][ T4304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.250198][ T4304] usb 3-1: Product: syz [ 201.254940][ T4304] usb 3-1: Manufacturer: syz [ 201.260501][ T4304] usb 3-1: SerialNumber: syz [ 201.282395][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.295903][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.304801][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.313482][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.563523][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.591644][ T5538] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 203.732417][ T4304] ch9200: probe of 3-1:2.31 failed with error -22 [ 204.159928][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.184624][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.453913][ T5285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.299450][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.327222][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.330090][ T4240] usb 3-1: USB disconnect, device number 4 [ 207.411879][ T5285] device veth0_vlan entered promiscuous mode [ 207.447433][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.455987][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.520434][ T5285] device veth1_vlan entered promiscuous mode [ 207.745744][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.827319][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.877834][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.056595][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.064834][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.162830][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.198458][ T5285] device veth0_macvtap entered promiscuous mode [ 208.300267][ T5285] device veth1_macvtap entered promiscuous mode [ 208.367462][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.408729][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.445410][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.526491][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.569874][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.776523][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.796459][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.564292][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.632465][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.657073][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.088203][ T5285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.159013][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.230626][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.309369][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.323654][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.333606][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.344108][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.366432][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.386435][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.407233][ T5285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.437957][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.528647][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.583074][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.750353][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.766638][ T5649] overlayfs: missing 'lowerdir' [ 211.698081][ T5285] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.711035][ T5285] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.887801][ T5285] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.917801][ T5285] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.244213][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.282753][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.383310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.391467][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.507404][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.694018][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.739234][ T5682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.747006][ T5682] IPv6: NLM_F_CREATE should be set when creating new route [ 216.542659][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.551131][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.168298][ T5740] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.668682][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.737559][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.286771][ T5682] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.295891][ T5682] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.331282][ T5682] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.342366][ T5682] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.495899][ T5682] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.505110][ T5682] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.514034][ T5682] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.522962][ T5682] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.254263][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 222.639972][ T5818] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.456460][ T5874] mkiss: ax0: crc mode is auto. [ 229.033944][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 235.704922][ T4304] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 236.867358][ T4304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.943564][ T4304] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.726741][ T4304] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.741764][ T4304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.750385][ T4304] usb 3-1: SerialNumber: syz [ 238.039325][ T4304] usb 3-1: invalid UAC_HEADER (v1) [ 238.111297][ T4304] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 238.141443][ T4304] usb 3-1: USB disconnect, device number 5 [ 239.307020][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.704302][ T6114] mkiss: ax0: crc mode is auto. [ 244.285628][ T4240] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 244.646790][ T4240] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.663587][ T4240] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.969622][ T4240] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.979338][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.988232][ T4240] usb 4-1: SerialNumber: syz [ 245.369208][ T4240] usb 4-1: 0:2 : does not exist [ 245.746781][ T4240] usb 4-1: USB disconnect, device number 4 [ 245.997009][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.504634][ T6214] mkiss: ax0: crc mode is auto. [ 250.557454][ T6275] mkiss: ax0: crc mode is auto. [ 253.840131][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 254.228733][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.336548][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.466687][ T13] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 254.498183][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 254.506327][ T13] usb 3-1: SerialNumber: syz [ 254.839596][ T13] usb 3-1: 0:2 : does not exist [ 254.929040][ T13] usb 3-1: USB disconnect, device number 6 [ 255.764462][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.770906][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.591618][ T6395] mkiss: ax0: crc mode is auto. [ 261.276473][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 261.672234][ T23] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 261.696412][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.729143][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 261.772136][ T23] usb 3-1: config 1 has no interface number 1 [ 261.789059][ T23] usb 3-1: config 1 interface 5 has no altsetting 0 [ 261.901483][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.915515][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.954655][ T23] usb 3-1: SerialNumber: syz [ 262.330371][ T23] usb 3-1: 0:2 : does not exist [ 262.481114][ T23] usb 3-1: USB disconnect, device number 7 [ 264.622879][ T6536] mkiss: ax0: crc mode is auto. [ 266.776603][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 267.176729][ T23] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 267.222545][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.262198][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 267.302022][ T23] usb 3-1: config 1 has no interface number 1 [ 267.322335][ T23] usb 3-1: config 1 interface 5 has no altsetting 0 [ 267.581614][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.591342][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.600310][ T23] usb 3-1: SerialNumber: syz [ 268.058193][ T23] usb 3-1: 0:2 : does not exist [ 268.485066][ T23] usb 3-1: USB disconnect, device number 8 [ 270.090986][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.892890][ T6640] mkiss: ax0: crc mode is auto. [ 275.156569][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 275.792940][ T6677] mkiss: ax0: crc mode is auto. [ 275.956603][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.976304][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.126531][ T21] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 276.213956][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.356554][ T21] usb 3-1: SerialNumber: syz [ 276.760124][ T21] usb 3-1: 0:2 : does not exist [ 276.771164][ T21] usb 3-1: unit 5 not found! [ 277.014561][ T21] usb 3-1: USB disconnect, device number 9 [ 277.745858][ T6718] mkiss: ax0: crc mode is auto. [ 278.219816][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.496523][ T4304] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 281.866727][ T4304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.905199][ T4304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.028552][ T4304] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 282.076542][ T4304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 282.897346][ T4304] usb 4-1: SerialNumber: syz [ 283.209257][ T4304] usb 4-1: 0:2 : does not exist [ 283.214206][ T4304] usb 4-1: unit 5 not found! [ 283.382602][ T4304] usb 4-1: USB disconnect, device number 5 [ 283.432075][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.132451][ T6831] mkiss: ax0: crc mode is auto. [ 293.501340][ T5282] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 293.896634][ T5282] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 294.086612][ T5282] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.438051][ T5282] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 294.449382][ T5282] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 294.546641][ T5282] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.674987][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 295.498752][ T5282] usb 4-1: SerialNumber: syz [ 295.566783][ T5282] usb 4-1: can't set config #1, error -71 [ 295.624115][ T5282] usb 4-1: USB disconnect, device number 6 [ 297.097482][ T6994] mkiss: ax0: crc mode is auto. [ 300.387804][ T7043] mkiss: ax0: crc mode is auto. [ 304.046503][ T4304] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 304.467046][ T4304] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 304.512076][ T4304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.715638][ T4304] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 304.766037][ T4304] usb 3-1: config 1 has no interface number 1 [ 304.786493][ T4304] usb 3-1: config 1 interface 5 has no altsetting 0 [ 304.886687][ T4304] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.916301][ T4304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 305.050940][ T4304] usb 3-1: SerialNumber: syz [ 305.379194][ T4304] usb 3-1: 0:2 : does not exist [ 305.401388][ T4304] usb 3-1: unit 5 not found! [ 305.470099][ T4304] usb 3-1: USB disconnect, device number 10 [ 306.277516][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.700588][ T7187] mkiss: ax0: crc mode is auto. [ 307.836452][ T4304] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 311.300914][ T4304] usb 3-1: unable to read config index 0 descriptor/all [ 311.319300][ T4304] usb 3-1: can't read configurations, error -71 [ 311.854932][ T7242] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 317.498463][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.504892][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.050123][ T7462] mkiss: ax0: crc mode is auto. [ 330.206291][ T5282] Bluetooth: hci5: command 0x0406 tx timeout [ 331.559378][ T7474] binder: 7473:7474 ioctl c00c620f 200000000180 returned -22 [ 334.969602][ T7520] overlayfs: failed to clone lowerpath [ 341.680591][ T7598] syz.1.1027 uses obsolete (PF_INET,SOCK_PACKET) [ 351.839764][ T7717] device ip6erspan0 entered promiscuous mode [ 353.482314][ T7738] tipc: Started in network mode [ 353.489427][ T7738] tipc: Node identity 4, cluster identity 4711 [ 353.495714][ T7738] tipc: Node number set to 4 [ 353.513999][ T5055] libceph: connect (1)[c::]:6789 error -101 [ 353.521440][ T5055] libceph: mon0 (1)[c::]:6789 connect error [ 353.548829][ T7739] ceph: No mds server is up or the cluster is laggy [ 354.216800][ T4186] libceph: connect (1)[c::]:6789 error -101 [ 354.222784][ T4186] libceph: mon0 (1)[c::]:6789 connect error [ 363.636922][ T7877] overlayfs: failed to clone upperpath [ 364.553525][ T4194] Bluetooth: Wrong link type (-22) [ 365.259769][ T5282] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 365.546826][ T5282] usb 3-1: Using ep0 maxpacket: 16 [ 365.846924][ T5282] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 365.928309][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 365.950181][ T5282] usb 3-1: Product: syz [ 365.954398][ T5282] usb 3-1: Manufacturer: syz [ 365.969562][ T5282] usb 3-1: SerialNumber: syz [ 365.996769][ T5282] usb 3-1: config 0 descriptor?? [ 366.235578][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 367.453549][ T7948] overlayfs: failed to clone upperpath [ 367.463655][ T7949] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1141'. [ 368.066826][ T5282] usb 3-1: USB disconnect, device number 13 [ 368.345105][ T7961] overlayfs: failed to clone upperpath [ 369.075851][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 369.112485][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1145'. [ 371.364473][ T8001] tmpfs: Unknown parameter 'usrquota' [ 371.413066][ T8003] binder: 8002:8003 ioctl 4018620d 0 returned -22 [ 373.177482][ T8019] syz.5.1163 sent an empty control message without MSG_MORE. [ 376.178092][ T8052] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1174'. [ 378.438379][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.444830][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.157198][ T5055] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 381.696503][ T5055] usb 3-1: unable to read config index 0 descriptor/all [ 381.715156][ T5055] usb 3-1: can't read configurations, error -71 [ 384.660607][ T8118] 9pnet: Insufficient options for proto=fd [ 385.046403][ T5282] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 385.496594][ T5282] usb 3-1: config 0 has no interfaces? [ 385.502120][ T5282] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 385.566441][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.637339][ T5282] usb 3-1: config 0 descriptor?? [ 386.291067][ T8149] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 386.353965][ T4186] usb 3-1: USB disconnect, device number 16 [ 386.408789][ T8149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.995671][ T8161] mkiss: ax0: crc mode is auto. [ 388.094084][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1213'. [ 389.236237][ T4193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 389.247914][ T4193] CPU: 1 PID: 4193 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 389.255487][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.265545][ T4193] Workqueue: hci3 hci_rx_work [ 389.270263][ T4193] Call Trace: [ 389.273561][ T4193] [ 389.276505][ T4193] dump_stack_lvl+0x168/0x230 [ 389.281219][ T4193] ? show_regs_print_info+0x20/0x20 [ 389.286446][ T4193] ? load_image+0x3b0/0x3b0 [ 389.290983][ T4193] sysfs_create_dir_ns+0x252/0x280 [ 389.296122][ T4193] ? __lock_acquire+0x7c60/0x7c60 [ 389.301176][ T4193] ? sysfs_warn_dup+0xa0/0xa0 [ 389.305876][ T4193] ? le_conn_complete_evt+0xcbc/0x1590 [ 389.311359][ T4193] ? hci_event_packet+0xe05/0x12f0 [ 389.316499][ T4193] ? process_one_work+0x863/0x1000 [ 389.321637][ T4193] ? do_raw_spin_unlock+0x11d/0x230 [ 389.326867][ T4193] kobject_add_internal+0x662/0xd00 [ 389.332093][ T4193] kobject_add+0x152/0x210 [ 389.336535][ T4193] ? kobject_init+0x1d0/0x1d0 [ 389.341243][ T4193] ? klist_children_get+0x50/0x50 [ 389.346285][ T4193] ? get_device_parent+0x121/0x3f0 [ 389.351423][ T4193] device_add+0x483/0xfb0 [ 389.355792][ T4193] hci_conn_add_sysfs+0xd1/0x1e0 [ 389.360758][ T4193] le_conn_complete_evt+0xcbc/0x1590 [ 389.366079][ T4193] ? cs_le_create_conn+0x5e0/0x5e0 [ 389.371216][ T4193] ? __mutex_trylock_common+0x14f/0x250 [ 389.376789][ T4193] hci_le_meta_evt+0x289/0x3b80 [ 389.381666][ T4193] ? hci_event_packet+0x36d/0x12f0 [ 389.386811][ T4193] ? hci_event_packet+0x2e2/0x12f0 [ 389.391945][ T4193] ? __lock_acquire+0x7c60/0x7c60 [ 389.397001][ T4193] ? hci_remote_host_features_evt+0x280/0x280 [ 389.403092][ T4193] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 389.408749][ T4193] ? mark_lock+0x94/0x320 [ 389.413102][ T4193] ? mutex_unlock+0x10/0x10 [ 389.417626][ T4193] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 389.423646][ T4193] ? lock_chain_count+0x20/0x20 [ 389.428527][ T4193] ? __rwlock_init+0x140/0x140 [ 389.433321][ T4193] hci_event_packet+0xe05/0x12f0 [ 389.438282][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 389.443510][ T4193] ? rcu_lock_release+0x20/0x20 [ 389.448391][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 389.453623][ T4193] hci_rx_work+0x255/0xa10 [ 389.458079][ T4193] process_one_work+0x863/0x1000 [ 389.463063][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 389.468710][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 389.473998][ T4193] ? _raw_spin_lock_irq+0xab/0xe0 [ 389.479029][ T4193] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 389.484401][ T4193] ? wq_worker_running+0x97/0x170 [ 389.489446][ T4193] worker_thread+0xaa8/0x12a0 [ 389.494139][ T4193] kthread+0x436/0x520 [ 389.498203][ T4193] ? rcu_lock_release+0x20/0x20 [ 389.503050][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 389.507640][ T4193] ret_from_fork+0x1f/0x30 [ 389.512065][ T4193] [ 389.519522][ T4193] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 389.532896][ T4193] Bluetooth: hci3: failed to register connection device [ 390.266361][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1220'. [ 390.365425][ T8214] fuse: Bad value for 'fd' [ 390.389762][ T8209] device bridge_slave_1 left promiscuous mode [ 390.446726][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.526104][ T8209] device bridge_slave_0 left promiscuous mode [ 390.538957][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.778964][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 390.843816][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 391.919611][ T8242] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1231'. [ 392.844007][ T8248] mkiss: ax0: crc mode is auto. [ 393.124610][ T8247] fuse: Bad value for 'fd' [ 395.926611][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'. [ 396.575551][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 398.297835][ T8298] overlayfs: failed to clone lowerpath [ 398.308936][ T8298] overlayfs: failed to clone upperpath [ 401.145967][ T4186] libceph: connect (1)[c::]:6789 error -101 [ 401.152323][ T4186] libceph: mon0 (1)[c::]:6789 connect error [ 401.158694][ T8321] ceph: No mds server is up or the cluster is laggy [ 401.265634][ T8327] mkiss: ax0: crc mode is auto. [ 402.329744][ T4186] libceph: connect (1)[c::]:6789 error -101 [ 402.335774][ T4186] libceph: mon0 (1)[c::]:6789 connect error [ 404.746737][ T5282] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 406.369504][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 406.636680][ T5282] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 406.644812][ T5282] usb 3-1: config 0 has no interface number 0 [ 406.651840][ T5282] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 406.663269][ T5282] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 406.676453][ T5282] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.690185][ T5282] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 406.699848][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.721262][ T5282] usb 3-1: config 0 descriptor?? [ 406.888210][ T5282] ldusb 3-1:0.55: Interrupt in endpoint not found [ 407.040657][ T8384] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 407.074280][ T5282] usb 3-1: USB disconnect, device number 17 [ 411.950729][ T4248] libceph: connect (1)[c::]:6789 error -101 [ 411.963983][ T4248] libceph: mon0 (1)[c::]:6789 connect error [ 412.734703][ T8431] ceph: No mds server is up or the cluster is laggy [ 413.068292][ T5055] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 413.327389][ T5055] Bluetooth: hci1: Injecting HCI hardware error event [ 413.336109][ T4193] Bluetooth: hci1: hardware error 0x00 [ 413.388303][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 413.718364][ T8452] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 415.030530][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 416.126607][ T1335] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 416.165682][ T1335] Bluetooth: hci4: Injecting HCI hardware error event [ 416.177632][ T4194] Bluetooth: hci4: hardware error 0x00 [ 416.830651][ T4304] libceph: connect (1)[c::]:6789 error -101 [ 416.842151][ T4304] libceph: mon0 (1)[c::]:6789 connect error [ 417.250651][ T4304] libceph: connect (1)[c::]:6789 error -101 [ 417.257263][ T4304] libceph: mon0 (1)[c::]:6789 connect error [ 417.621805][ T8483] ceph: No mds server is up or the cluster is laggy [ 417.788662][ T4304] libceph: connect (1)[c::]:6789 error -101 [ 417.858568][ T4304] libceph: mon0 (1)[c::]:6789 connect error [ 418.071961][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 418.118917][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 420.710416][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 423.511345][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 426.850910][ T8640] program syz.2.1354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.198799][ T8655] overlayfs: failed to clone lowerpath [ 431.379505][ T8692] overlayfs: failed to clone lowerpath [ 431.734743][ T8694] mkiss: ax0: crc mode is auto. [ 434.701977][ T4261] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 435.108306][ T4261] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 435.140108][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.656389][ T4261] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 435.684466][ T4261] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 435.721634][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.753822][ T4261] usb 3-1: config 0 descriptor?? [ 437.067620][ T8741] overlayfs: failed to clone lowerpath [ 437.577717][ T4261] usbhid 3-1:0.0: can't add hid device: -71 [ 437.584292][ T4261] usbhid: probe of 3-1:0.0 failed with error -71 [ 437.761276][ T4261] usb 3-1: USB disconnect, device number 18 [ 438.331397][ T8772] sg_write: process 701 (syz.2.1393) changed security contexts after opening file descriptor, this is not allowed. [ 439.936828][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.943195][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.728196][ T8659] Set syz1 is full, maxelem 65536 reached [ 443.209160][ T8813] fuse: Bad value for 'fd' [ 443.652796][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 447.927953][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 456.187126][ T8954] overlayfs: failed to clone lowerpath [ 458.775059][ T8968] fuse: Bad value for 'fd' [ 461.521985][ T9006] fuse: Bad value for 'fd' [ 467.372171][ T4240] libceph: connect (1)[c::]:6789 error -101 [ 467.632201][ T4240] libceph: mon0 (1)[c::]:6789 connect error [ 467.662368][ T9096] ceph: No mds server is up or the cluster is laggy [ 469.517605][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 469.921813][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 469.932559][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 469.955144][ T9147] ceph: No mds server is up or the cluster is laggy [ 471.989868][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1523'. [ 472.014545][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1523'. [ 472.313609][ T9193] netlink: 'syz.1.1528': attribute type 2 has an invalid length. [ 472.329002][ T9193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1528'. [ 475.498859][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 475.506700][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 475.577137][ T9236] ceph: No mds server is up or the cluster is laggy [ 475.910594][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 475.923617][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 477.469096][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 477.708425][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 478.444338][ T9291] ceph: No mds server is up or the cluster is laggy [ 478.454773][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 478.467481][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 480.202031][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 489.525283][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1605'. [ 494.895173][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 495.193265][ T9532] ceph: No mds server is up or the cluster is laggy [ 495.200243][ T5282] libceph: connect (1)[c::]:6789 error -101 [ 495.220316][ T5282] libceph: mon0 (1)[c::]:6789 connect error [ 496.123605][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 496.137231][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 501.318496][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.324788][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.365766][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 513.677488][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 515.279181][ T9704] overlayfs: failed to clone lowerpath [ 515.287267][ T9704] overlayfs: failed to clone upperpath [ 515.471387][ T9706] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1684'. [ 517.439843][ T5282] libceph: connect (1)[c::]:6789 error -101 [ 517.445867][ T5282] libceph: mon0 (1)[c::]:6789 connect error [ 517.612912][ T9718] ceph: No mds server is up or the cluster is laggy [ 518.306317][ T4240] libceph: connect (1)[c::]:6789 error -101 [ 518.323601][ T4240] libceph: mon0 (1)[c::]:6789 connect error [ 521.759627][ T9756] overlayfs: failed to clone lowerpath [ 521.811391][ T9758] overlayfs: failed to clone upperpath [ 523.211393][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 524.406725][ T9804] overlayfs: failed to clone lowerpath [ 524.458774][ T9805] overlayfs: failed to clone upperpath [ 525.658413][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1714'. [ 525.670313][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1714'. [ 527.039750][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1721'. [ 527.191903][ T9832] overlayfs: failed to clone lowerpath [ 527.210051][ T9832] overlayfs: failed to clone upperpath [ 529.950518][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1730'. [ 531.110684][ T9875] overlayfs: failed to clone lowerpath [ 531.136214][ T9875] overlayfs: failed to clone upperpath [ 532.952679][ T9911] overlayfs: failed to clone lowerpath [ 532.966920][ T9911] overlayfs: failed to clone upperpath [ 534.193210][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 534.456842][ T9933] netlink: 'syz.4.1760': attribute type 5 has an invalid length. [ 534.473193][ T9933] device ip6erspan0 entered promiscuous mode [ 535.697529][ T9948] overlayfs: failed to clone lowerpath [ 535.749647][ T9949] overlayfs: failed to clone upperpath [ 536.215224][ T9956] tipc: Started in network mode [ 536.236561][ T9956] tipc: Node identity 4, cluster identity 4711 [ 536.599429][ T9956] tipc: Node number set to 4 [ 539.842224][ T9996] overlayfs: failed to clone lowerpath [ 539.895835][ T9997] overlayfs: failed to clone upperpath [ 540.260572][T10004] netlink: 'syz.4.1784': attribute type 10 has an invalid length. [ 540.277308][T10004] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 543.739536][T10044] overlayfs: failed to clone lowerpath [ 543.748858][T10044] overlayfs: failed to clone upperpath [ 544.147341][T10049] fuse: Bad value for 'fd' [ 547.574786][ T5055] libceph: connect (1)[c::]:6789 error -101 [ 547.580910][ T5055] libceph: mon0 (1)[c::]:6789 connect error [ 547.622481][T10091] ceph: No mds server is up or the cluster is laggy [ 547.664596][T10099] tipc: Enabled bearer , priority 10 [ 547.680478][T10103] overlayfs: failed to clone lowerpath [ 547.875640][T10108] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1814'. [ 550.632338][T10146] fuse: Bad value for 'fd' [ 554.917821][ T5055] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 554.960318][ T5055] Bluetooth: hci2: Injecting HCI hardware error event [ 555.091918][ T4194] Bluetooth: hci2: hardware error 0x00 [ 559.931993][ T4193] Bluetooth: hci2: unexpected event for opcode 0x080f [ 563.327998][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.334320][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.550774][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 566.857301][T10324] overlayfs: failed to clone lowerpath [ 566.883789][T10324] overlayfs: failed to clone upperpath [ 572.408095][T10409] overlayfs: failed to clone lowerpath [ 575.675706][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 579.630169][ T5282] libceph: connect (1)[c::]:6789 error -101 [ 579.641761][ T5282] libceph: mon0 (1)[c::]:6789 connect error [ 579.679436][T10473] ceph: No mds server is up or the cluster is laggy [ 581.359928][T10506] overlayfs: failed to clone lowerpath [ 583.856376][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1933'. [ 585.092915][T10553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1941'. [ 587.706829][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 588.785329][T10600] overlayfs: failed to clone lowerpath [ 588.816094][T10600] overlayfs: failed to clone upperpath [ 589.449170][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 592.574529][ T5282] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 592.595405][ T5282] Bluetooth: hci5: Injecting HCI hardware error event [ 592.603129][ T4193] Bluetooth: hci5: hardware error 0x00 [ 593.911994][T10690] overlayfs: failed to clone lowerpath [ 593.923215][T10690] overlayfs: failed to clone upperpath [ 595.660133][ T5055] libceph: connect (1)[c::]:6789 error -101 [ 595.670878][ T5055] libceph: mon0 (1)[c::]:6789 connect error [ 596.515804][T10710] ceph: No mds server is up or the cluster is laggy [ 599.871788][T10756] overlayfs: failed to clone lowerpath [ 599.916130][T10756] overlayfs: failed to clone upperpath [ 609.340517][T10850] overlayfs: failed to clone lowerpath [ 610.763592][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.770899][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.747275][T10839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.830110][T10839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.299592][T10839] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.408680][T10839] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.417747][T10839] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.428002][T10839] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.961009][T10933] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2053'. [ 619.407082][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'. [ 623.422162][ T26] audit: type=1326 audit(1760732311.223:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.4.2082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f456645afc9 code=0x0 [ 623.552117][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 624.276911][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.283457][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.230961][T11063] fuse: Bad value for 'fd' [ 626.677178][T11081] netlink: 'syz.2.2100': attribute type 20 has an invalid length. [ 628.304131][T11108] fuse: Bad value for 'fd' [ 631.154490][T11145] fuse: Bad value for 'fd' [ 632.190061][T11149] ceph: No mds server is up or the cluster is laggy [ 632.208005][ T4248] libceph: connect (1)[c::]:6789 error -101 [ 632.214030][ T4248] libceph: mon0 (1)[c::]:6789 connect error [ 633.451109][T11196] fuse: Bad value for 'fd' [ 633.871342][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'. [ 636.108888][T11233] fuse: Unknown parameter 'group_i00000000000000000000' [ 636.466958][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 639.306666][T11268] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 639.370598][T11273] fuse: Bad value for 'fd' [ 639.906502][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2159'. [ 641.612633][T11326] fuse: Bad value for 'fd' [ 642.340185][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 643.515036][T11363] fuse: Bad value for 'fd' [ 643.990395][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2187'. [ 644.871672][T11395] fuse: Bad value for 'fd' [ 644.970126][T11398] fuse: Bad value for 'fd' [ 645.379345][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2200'. [ 647.584099][T11437] fuse: Bad value for 'fd' [ 648.432908][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2215'. [ 650.022033][ T4240] libceph: connect (1)[c::]:6789 error -101 [ 650.033244][ T4240] libceph: mon0 (1)[c::]:6789 connect error [ 650.050098][T11476] ceph: No mds server is up or the cluster is laggy [ 652.706507][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 655.735519][T10856] libceph: connect (1)[c::]:6789 error -101 [ 655.747419][T10856] libceph: mon0 (1)[c::]:6789 connect error [ 655.775509][T11532] ceph: No mds server is up or the cluster is laggy [ 655.800189][T11542] netlink: 'syz.1.2242': attribute type 20 has an invalid length. [ 656.027669][T10856] libceph: connect (1)[c::]:6789 error -101 [ 656.706766][T10856] libceph: mon0 (1)[c::]:6789 connect error [ 659.548577][ T4304] libceph: connect (1)[c::]:6789 error -101 [ 659.555814][ T4304] libceph: mon0 (1)[c::]:6789 connect error [ 659.564129][T11597] ceph: No mds server is up or the cluster is laggy [ 660.648997][T11630] tipc: Started in network mode [ 660.653999][T11630] tipc: Node identity 4, cluster identity 4711 [ 660.966505][T11630] tipc: Node number set to 4 [ 661.530912][T11641] libceph: resolve '0.' (ret=-3): failed [ 661.537892][ T26] audit: type=1326 audit(1760732349.343:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 661.652285][ T26] audit: type=1326 audit(1760732349.343:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 661.696542][ T26] audit: type=1326 audit(1760732349.483:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 661.752770][ T26] audit: type=1326 audit(1760732349.483:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 661.775155][ T26] audit: type=1326 audit(1760732349.483:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 661.816436][ T26] audit: type=1326 audit(1760732349.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 661.884591][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2273'. [ 662.597173][ T4240] libceph: connect (1)[c::]:6789 error -101 [ 662.603315][ T4240] libceph: mon0 (1)[c::]:6789 connect error [ 662.629428][T11648] ceph: No mds server is up or the cluster is laggy [ 662.639201][ T26] audit: type=1326 audit(1760732349.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 662.662237][ T26] audit: type=1326 audit(1760732349.483:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 662.684855][ T26] audit: type=1326 audit(1760732349.483:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 662.708653][ T26] audit: type=1326 audit(1760732349.483:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3ec54fc9 code=0x7ffc0000 [ 665.697740][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 669.210905][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 671.060236][T11763] ceph: No mds server is up or the cluster is laggy [ 671.068262][ T5055] libceph: connect (1)[c::]:6789 error -101 [ 671.074267][ T5055] libceph: mon0 (1)[c::]:6789 connect error [ 677.918810][T11887] tipc: Started in network mode [ 677.923716][T11887] tipc: Node identity 4, cluster identity 4711 [ 677.951810][T11887] tipc: Node number set to 4 [ 679.056880][T11885] overlayfs: failed to clone lowerpath [ 679.083562][T11885] overlayfs: failed to clone upperpath [ 683.516556][T11961] overlayfs: failed to clone lowerpath [ 683.550666][T11961] overlayfs: failed to clone upperpath [ 685.170337][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 686.007435][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.013791][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.394592][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2385'. [ 688.794777][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 688.794792][ T26] audit: type=1326 audit(1760732376.593:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 688.925690][T12055] IPVS: Scheduler module ip_vs_ not found [ 688.972068][ T26] audit: type=1326 audit(1760732376.623:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 689.046503][ T26] audit: type=1326 audit(1760732376.623:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 689.108328][ T26] audit: type=1326 audit(1760732376.623:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 689.175272][ T26] audit: type=1326 audit(1760732376.633:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 689.259745][ T26] audit: type=1326 audit(1760732376.633:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 689.284283][ T26] audit: type=1326 audit(1760732376.633:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 690.167164][ T26] audit: type=1326 audit(1760732376.633:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 690.196150][ T26] audit: type=1326 audit(1760732376.633:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 690.561952][ T26] audit: type=1326 audit(1760732376.743:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456645afc9 code=0x7ffc0000 [ 691.192773][T12108] netlink: 'syz.5.2406': attribute type 1 has an invalid length. [ 691.324608][T12110] overlayfs: failed to clone lowerpath [ 691.356568][T12110] overlayfs: failed to clone upperpath [ 692.068816][T12108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.160002][T12112] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 692.237056][T12117] bond1: (slave vlan2): making interface the new active one [ 692.247385][T12117] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 692.256718][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 694.558033][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2413'. [ 697.329566][T12177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 697.355744][T12177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 697.374538][T12177] device bridge_slave_0 left promiscuous mode [ 697.527034][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.894909][T12177] device bridge_slave_1 left promiscuous mode [ 698.919443][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.104182][T12177] bond0: (slave bond_slave_0): Releasing backup interface [ 699.903107][T12177] bond0: (slave bond_slave_1): Releasing backup interface [ 700.020859][T12177] team0: Port device team_slave_0 removed [ 700.068939][T12177] team0: Port device team_slave_1 removed [ 700.121062][T12177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.134240][T12177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.303802][T12177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.314150][T12177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.272328][T12205] netlink: 'syz.5.2429': attribute type 4 has an invalid length. [ 702.479065][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2438'. [ 703.611814][T12259] overlayfs: failed to clone lowerpath [ 703.621312][T12259] overlayfs: failed to clone upperpath [ 704.738775][T12273] fuse: Unknown parameter 'use00000000000000000000' [ 708.785214][T12318] fuse: Unknown parameter 'use00000000000000000000' [ 708.936117][T12323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2459'. [ 711.478763][T12357] fuse: Bad value for 'fd' [ 714.320753][T12396] fuse: Unknown parameter 'user_i00000000000000000000' [ 718.538417][T12444] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 720.046971][T12459] fuse: Bad value for 'fd' [ 724.700619][T12502] fuse: Bad value for 'fd' [ 727.038508][T12564] fuse: Unknown parameter 'user_id00000000000000000000' [ 730.613056][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 735.449464][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 737.966050][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2555'. [ 738.429122][T12678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2553'. [ 741.455316][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 742.596709][T12739] [ 742.599094][T12739] ====================================================== [ 742.606201][T12739] WARNING: possible circular locking dependency detected [ 742.613253][T12739] syzkaller #0 Not tainted [ 742.617703][T12739] ------------------------------------------------------ [ 742.624734][T12739] syz.5.2571/12739 is trying to acquire lock: [ 742.630835][T12739] ffff88807df18d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 742.640532][T12739] [ 742.640532][T12739] but task is already holding lock: [ 742.647910][T12739] ffffc90001871c58 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 742.657528][T12739] [ 742.657528][T12739] which lock already depends on the new lock. [ 742.657528][T12739] [ 742.667946][T12739] [ 742.667946][T12739] the existing dependency chain (in reverse order) is: [ 742.676972][T12739] [ 742.676972][T12739] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 742.684909][T12739] _raw_spin_lock+0x2a/0x40 [ 742.689953][T12739] __inet_hash+0xe3/0x960 [ 742.694827][T12739] inet_csk_listen_start+0x22f/0x320 [ 742.700654][T12739] inet_listen+0x2e1/0x590 [ 742.705611][T12739] __sys_listen+0x19d/0x220 [ 742.710655][T12739] __x64_sys_listen+0x56/0x60 [ 742.715882][T12739] do_syscall_64+0x4c/0xa0 [ 742.720902][T12739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 742.727337][T12739] [ 742.727337][T12739] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 742.735060][T12739] __lock_acquire+0x2c33/0x7c60 [ 742.740435][T12739] lock_acquire+0x197/0x3f0 [ 742.745457][T12739] mptcp_diag_get_info+0x1db/0x990 [ 742.751094][T12739] inet_sk_diag_fill+0xef6/0x1b50 [ 742.756648][T12739] mptcp_diag_dump+0xcca/0x1290 [ 742.762124][T12739] __inet_diag_dump+0x1f6/0x380 [ 742.767562][T12739] netlink_dump+0x676/0xcd0 [ 742.772586][T12739] __netlink_dump_start+0x523/0x700 [ 742.778304][T12739] inet_diag_handler_cmd+0x1be/0x290 [ 742.784109][T12739] sock_diag_rcv_msg+0x164/0x3e0 [ 742.789656][T12739] netlink_rcv_skb+0x1e0/0x430 [ 742.794935][T12739] sock_diag_rcv+0x26/0x40 [ 742.799951][T12739] netlink_unicast+0x774/0x920 [ 742.805227][T12739] netlink_sendmsg+0x8ab/0xbc0 [ 742.810511][T12739] sock_write_iter+0x29c/0x380 [ 742.815798][T12739] do_iter_readv_writev+0x497/0x600 [ 742.821514][T12739] do_iter_write+0x205/0x7b0 [ 742.826621][T12739] do_writev+0x254/0x410 [ 742.831426][T12739] do_syscall_64+0x4c/0xa0 [ 742.836393][T12739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 742.842822][T12739] [ 742.842822][T12739] other info that might help us debug this: [ 742.842822][T12739] [ 742.853037][T12739] Possible unsafe locking scenario: [ 742.853037][T12739] [ 742.860480][T12739] CPU0 CPU1 [ 742.865838][T12739] ---- ---- [ 742.871193][T12739] lock(&h->lhash2[i].lock); [ 742.875866][T12739] lock(sk_lock-AF_INET6); [ 742.882969][T12739] lock(&h->lhash2[i].lock); [ 742.890158][T12739] lock(sk_lock-AF_INET6); [ 742.894654][T12739] [ 742.894654][T12739] *** DEADLOCK *** [ 742.894654][T12739] [ 742.902790][T12739] 6 locks held by syz.5.2571/12739: [ 742.907984][T12739] #0: ffffffff8d241de8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 742.917292][T12739] #1: ffffffff8d241ca8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 742.927639][T12739] #2: ffff88807d22d698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 742.938337][T12739] #3: ffffffff8d31c188 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 742.948602][T12739] #4: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 742.957906][T12739] #5: ffffc90001871c58 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 742.967908][T12739] [ 742.967908][T12739] stack backtrace: [ 742.973788][T12739] CPU: 0 PID: 12739 Comm: syz.5.2571 Not tainted syzkaller #0 [ 742.981234][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 742.991284][T12739] Call Trace: [ 742.994560][T12739] [ 742.997491][T12739] dump_stack_lvl+0x168/0x230 [ 743.002169][T12739] ? load_image+0x3b0/0x3b0 [ 743.006676][T12739] ? show_regs_print_info+0x20/0x20 [ 743.011893][T12739] ? print_circular_bug+0x12b/0x1a0 [ 743.017103][T12739] check_noncircular+0x274/0x310 [ 743.022077][T12739] ? add_chain_block+0x940/0x940 [ 743.027020][T12739] ? lockdep_lock+0xdc/0x1e0 [ 743.031612][T12739] ? mark_lock+0x94/0x320 [ 743.035938][T12739] __lock_acquire+0x2c33/0x7c60 [ 743.040790][T12739] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 743.046770][T12739] ? verify_lock_unused+0x140/0x140 [ 743.051964][T12739] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 743.057942][T12739] ? verify_lock_unused+0x140/0x140 [ 743.063185][T12739] ? __local_bh_enable_ip+0xcb/0x1b0 [ 743.068481][T12739] ? __local_bh_enable_ip+0x12a/0x1b0 [ 743.073849][T12739] ? lockdep_hardirqs_on+0x94/0x140 [ 743.079048][T12739] ? __local_bh_enable_ip+0x12a/0x1b0 [ 743.084440][T12739] ? _local_bh_enable+0xa0/0xa0 [ 743.089308][T12739] ? skb_put+0x117/0x210 [ 743.093549][T12739] lock_acquire+0x197/0x3f0 [ 743.098049][T12739] ? inet_sk_diag_fill+0xef6/0x1b50 [ 743.103245][T12739] ? read_lock_is_recursive+0x10/0x10 [ 743.108615][T12739] ? rcu_lock_release+0x5/0x20 [ 743.113375][T12739] ? __lock_acquire+0x7c60/0x7c60 [ 743.118394][T12739] ? inet_sk_diag_fill+0xef6/0x1b50 [ 743.123611][T12739] mptcp_diag_get_info+0x1db/0x990 [ 743.128731][T12739] ? inet_sk_diag_fill+0xef6/0x1b50 [ 743.133940][T12739] inet_sk_diag_fill+0xef6/0x1b50 [ 743.139135][T12739] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 743.144855][T12739] ? do_raw_spin_lock+0x11d/0x280 [ 743.149889][T12739] ? inet_diag_bc_sk+0x187/0x10c0 [ 743.154920][T12739] mptcp_diag_dump+0xcca/0x1290 [ 743.159781][T12739] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 743.166378][T12739] __inet_diag_dump+0x1f6/0x380 [ 743.171227][T12739] netlink_dump+0x676/0xcd0 [ 743.175733][T12739] ? netlink_lookup+0x1d0/0x1d0 [ 743.180588][T12739] ? __inet_diag_dump_start+0x805/0x970 [ 743.186134][T12739] __netlink_dump_start+0x523/0x700 [ 743.191346][T12739] inet_diag_handler_cmd+0x1be/0x290 [ 743.196626][T12739] ? rcu_lock_release+0x20/0x20 [ 743.201471][T12739] ? inet_diag_handler_get_info+0xb80/0xb80 [ 743.207359][T12739] ? inet_diag_dump_start+0x20/0x20 [ 743.212553][T12739] ? inet_diag_dump+0x50/0x50 [ 743.217222][T12739] ? dev_queue_xmit+0x20/0x20 [ 743.221891][T12739] ? memcpy+0x3c/0x60 [ 743.225870][T12739] ? sock_diag_rcv+0x17/0x40 [ 743.230457][T12739] ? sock_diag_rcv+0x17/0x40 [ 743.235043][T12739] ? rcu_lock_release+0x20/0x20 [ 743.239890][T12739] sock_diag_rcv_msg+0x164/0x3e0 [ 743.244824][T12739] netlink_rcv_skb+0x1e0/0x430 [ 743.249588][T12739] ? sock_diag_bind+0xa0/0xa0 [ 743.254270][T12739] ? netlink_ack+0xb60/0xb60 [ 743.258944][T12739] ? __lock_acquire+0x7c60/0x7c60 [ 743.263967][T12739] sock_diag_rcv+0x26/0x40 [ 743.268384][T12739] netlink_unicast+0x774/0x920 [ 743.273144][T12739] netlink_sendmsg+0x8ab/0xbc0 [ 743.277901][T12739] ? netlink_getsockopt+0x560/0x560 [ 743.283095][T12739] ? aa_sock_msg_perm+0x94/0x150 [ 743.288033][T12739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 743.293314][T12739] ? security_socket_sendmsg+0x7c/0xa0 [ 743.298764][T12739] sock_write_iter+0x29c/0x380 [ 743.303523][T12739] ? sock_read_iter+0x340/0x340 [ 743.308389][T12739] do_iter_readv_writev+0x497/0x600 [ 743.313606][T12739] ? generic_file_rw_checks+0x280/0x280 [ 743.319146][T12739] ? common_file_perm+0x171/0x1c0 [ 743.324165][T12739] ? fsnotify_perm+0x5d/0x560 [ 743.328839][T12739] ? security_file_permission+0x75/0xa0 [ 743.334380][T12739] do_iter_write+0x205/0x7b0 [ 743.338964][T12739] ? import_iovec+0x6f/0xa0 [ 743.343462][T12739] do_writev+0x254/0x410 [ 743.347700][T12739] ? do_readv+0x3e0/0x3e0 [ 743.352028][T12739] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 743.358012][T12739] ? lock_chain_count+0x20/0x20 [ 743.362860][T12739] ? vtime_user_exit+0x2dc/0x400 [ 743.367790][T12739] ? lockdep_hardirqs_on+0x94/0x140 [ 743.372988][T12739] do_syscall_64+0x4c/0xa0 [ 743.377408][T12739] ? clear_bhb_loop+0x30/0x80 [ 743.382523][T12739] ? clear_bhb_loop+0x30/0x80 [ 743.387216][T12739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 743.393116][T12739] RIP: 0033:0x7fd69c3cdfc9 [ 743.397524][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.417125][T12739] RSP: 002b:00007fd69a635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 743.425563][T12739] RAX: ffffffffffffffda RBX: 00007fd69c624fa0 RCX: 00007fd69c3cdfc9 [ 743.433548][T12739] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 743.441520][T12739] RBP: 00007fd69c450f91 R08: 0000000000000000 R09: 0000000000000000 [ 743.449491][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.457457][T12739] R13: 00007fd69c625038 R14: 00007fd69c624fa0 R15: 00007ffd1b7f7518 [ 743.465880][T12739] [ 743.469369][T12739] BUG: sleeping function called from invalid context at net/core/sock.c:3288 [ 743.478790][T12739] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12739, name: syz.5.2571 [ 743.487973][T12739] INFO: lockdep is turned off. [ 743.492742][T12739] Preemption disabled at: [ 743.492752][T12739] [<0000000000000000>] 0x0 [ 743.501544][T12739] CPU: 0 PID: 12739 Comm: syz.5.2571 Not tainted syzkaller #0 [ 743.509016][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 743.519097][T12739] Call Trace: [ 743.522390][T12739] [ 743.525333][T12739] dump_stack_lvl+0x168/0x230 [ 743.530033][T12739] ? show_regs_print_info+0x20/0x20 [ 743.535267][T12739] ? load_image+0x3b0/0x3b0 [ 743.539806][T12739] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 743.545979][T12739] ___might_sleep+0x47c/0x600 [ 743.550705][T12739] ? __might_sleep+0xf0/0xf0 [ 743.555313][T12739] ? read_lock_is_recursive+0x10/0x10 [ 743.560706][T12739] ? rcu_lock_release+0x5/0x20 [ 743.565494][T12739] __lock_sock_fast+0x2f/0xe0 [ 743.570198][T12739] ? inet_sk_diag_fill+0xef6/0x1b50 [ 743.575417][T12739] mptcp_diag_get_info+0x1e7/0x990 [ 743.580549][T12739] inet_sk_diag_fill+0xef6/0x1b50 [ 743.585604][T12739] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 743.591368][T12739] ? do_raw_spin_lock+0x11d/0x280 [ 743.596391][T12739] ? inet_diag_bc_sk+0x187/0x10c0 [ 743.601418][T12739] mptcp_diag_dump+0xcca/0x1290 [ 743.606278][T12739] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 743.612881][T12739] __inet_diag_dump+0x1f6/0x380 [ 743.617731][T12739] netlink_dump+0x676/0xcd0 [ 743.622236][T12739] ? netlink_lookup+0x1d0/0x1d0 [ 743.627094][T12739] ? __inet_diag_dump_start+0x805/0x970 [ 743.632639][T12739] __netlink_dump_start+0x523/0x700 [ 743.637835][T12739] inet_diag_handler_cmd+0x1be/0x290 [ 743.643118][T12739] ? rcu_lock_release+0x20/0x20 [ 743.647966][T12739] ? inet_diag_handler_get_info+0xb80/0xb80 [ 743.653873][T12739] ? inet_diag_dump_start+0x20/0x20 [ 743.659067][T12739] ? inet_diag_dump+0x50/0x50 [ 743.663749][T12739] ? dev_queue_xmit+0x20/0x20 [ 743.668417][T12739] ? memcpy+0x3c/0x60 [ 743.672401][T12739] ? sock_diag_rcv+0x17/0x40 [ 743.677014][T12739] ? sock_diag_rcv+0x17/0x40 [ 743.681626][T12739] ? rcu_lock_release+0x20/0x20 [ 743.686468][T12739] sock_diag_rcv_msg+0x164/0x3e0 [ 743.691408][T12739] netlink_rcv_skb+0x1e0/0x430 [ 743.696175][T12739] ? sock_diag_bind+0xa0/0xa0 [ 743.700862][T12739] ? netlink_ack+0xb60/0xb60 [ 743.705457][T12739] ? __lock_acquire+0x7c60/0x7c60 [ 743.710482][T12739] sock_diag_rcv+0x26/0x40 [ 743.714890][T12739] netlink_unicast+0x774/0x920 [ 743.719659][T12739] netlink_sendmsg+0x8ab/0xbc0 [ 743.724416][T12739] ? netlink_getsockopt+0x560/0x560 [ 743.729604][T12739] ? aa_sock_msg_perm+0x94/0x150 [ 743.734536][T12739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 743.739815][T12739] ? security_socket_sendmsg+0x7c/0xa0 [ 743.745267][T12739] sock_write_iter+0x29c/0x380 [ 743.750027][T12739] ? sock_read_iter+0x340/0x340 [ 743.754878][T12739] do_iter_readv_writev+0x497/0x600 [ 743.760073][T12739] ? generic_file_rw_checks+0x280/0x280 [ 743.765610][T12739] ? common_file_perm+0x171/0x1c0 [ 743.770623][T12739] ? fsnotify_perm+0x5d/0x560 [ 743.775294][T12739] ? security_file_permission+0x75/0xa0 [ 743.780850][T12739] do_iter_write+0x205/0x7b0 [ 743.785449][T12739] ? import_iovec+0x6f/0xa0 [ 743.789945][T12739] do_writev+0x254/0x410 [ 743.794180][T12739] ? do_readv+0x3e0/0x3e0 [ 743.798506][T12739] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 743.804487][T12739] ? lock_chain_count+0x20/0x20 [ 743.809332][T12739] ? vtime_user_exit+0x2dc/0x400 [ 743.814263][T12739] ? lockdep_hardirqs_on+0x94/0x140 [ 743.819457][T12739] do_syscall_64+0x4c/0xa0 [ 743.823867][T12739] ? clear_bhb_loop+0x30/0x80 [ 743.828550][T12739] ? clear_bhb_loop+0x30/0x80 [ 743.833218][T12739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 743.839138][T12739] RIP: 0033:0x7fd69c3cdfc9 [ 743.843546][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.863141][T12739] RSP: 002b:00007fd69a635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 743.871545][T12739] RAX: ffffffffffffffda RBX: 00007fd69c624fa0 RCX: 00007fd69c3cdfc9 [ 743.879509][T12739] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 743.887470][T12739] RBP: 00007fd69c450f91 R08: 0000000000000000 R09: 0000000000000000 [ 743.895534][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.903499][T12739] R13: 00007fd69c625038 R14: 00007fd69c624fa0 R15: 00007ffd1b7f7518 [ 743.911483][T12739] [ 743.914537][T12739] BUG: scheduling while atomic: syz.5.2571/12739/0x00000002 [ 743.921821][T12739] INFO: lockdep is turned off. [ 743.926590][T12739] Modules linked in: [ 743.930482][T12739] Preemption disabled at: [ 743.930488][T12739] [<0000000000000000>] 0x0 [ 743.939234][T12739] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 743.947986][T12739] CPU: 0 PID: 12739 Comm: syz.5.2571 Tainted: G W syzkaller #0 [ 743.956920][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 743.966972][T12739] Call Trace: [ 743.970261][T12739] [ 743.973189][T12739] dump_stack_lvl+0x168/0x230 [ 743.977959][T12739] ? show_regs_print_info+0x20/0x20 [ 743.983159][T12739] ? load_image+0x3b0/0x3b0 [ 743.987665][T12739] panic+0x2c9/0x7f0 [ 743.991561][T12739] ? bpf_jit_dump+0xd0/0xd0 [ 743.996059][T12739] ? vprintk_emit+0xf9/0x150 [ 744.000643][T12739] ? _printk+0xcc/0x110 [ 744.004794][T12739] check_panic_on_warn+0x80/0xa0 [ 744.009726][T12739] __schedule_bug+0x184/0x1e0 [ 744.014393][T12739] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 744.019758][T12739] __schedule+0x12e7/0x4390 [ 744.024258][T12739] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 744.029983][T12739] ? prepare_to_wait_exclusive+0xc5/0x220 [ 744.035699][T12739] ? do_raw_spin_lock+0x11d/0x280 [ 744.040713][T12739] ? lock_chain_count+0x20/0x20 [ 744.045575][T12739] ? __kthread_should_park+0xa2/0xe0 [ 744.050904][T12739] ? lock_release+0xba/0x870 [ 744.055491][T12739] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 744.061468][T12739] ? __lock_sock+0x145/0x2a0 [ 744.066050][T12739] ? release_firmware_map_entry+0x190/0x190 [ 744.071933][T12739] ? __lock_sock+0x145/0x2a0 [ 744.076518][T12739] ? __local_bh_enable_ip+0x12a/0x1b0 [ 744.081889][T12739] ? _local_bh_enable+0xa0/0xa0 [ 744.086732][T12739] schedule+0x11b/0x1e0 [ 744.090916][T12739] __lock_sock+0x14a/0x2a0 [ 744.095327][T12739] ? sk_page_frag_refill+0x200/0x200 [ 744.100603][T12739] ? do_raw_spin_lock+0x11d/0x280 [ 744.105745][T12739] ? init_wait_entry+0xd0/0xd0 [ 744.110501][T12739] ? __rwlock_init+0x140/0x140 [ 744.115252][T12739] ? read_lock_is_recursive+0x10/0x10 [ 744.120614][T12739] ? rcu_lock_release+0x5/0x20 [ 744.125390][T12739] ? __lock_sock_fast+0x43/0xe0 [ 744.130247][T12739] __lock_sock_fast+0x78/0xe0 [ 744.134916][T12739] ? inet_sk_diag_fill+0xef6/0x1b50 [ 744.140110][T12739] mptcp_diag_get_info+0x1e7/0x990 [ 744.145221][T12739] inet_sk_diag_fill+0xef6/0x1b50 [ 744.150237][T12739] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 744.155950][T12739] ? do_raw_spin_lock+0x11d/0x280 [ 744.160993][T12739] ? inet_diag_bc_sk+0x187/0x10c0 [ 744.166014][T12739] mptcp_diag_dump+0xcca/0x1290 [ 744.170882][T12739] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 744.177473][T12739] __inet_diag_dump+0x1f6/0x380 [ 744.182325][T12739] netlink_dump+0x676/0xcd0 [ 744.186832][T12739] ? netlink_lookup+0x1d0/0x1d0 [ 744.191681][T12739] ? __inet_diag_dump_start+0x805/0x970 [ 744.197245][T12739] __netlink_dump_start+0x523/0x700 [ 744.202451][T12739] inet_diag_handler_cmd+0x1be/0x290 [ 744.207736][T12739] ? rcu_lock_release+0x20/0x20 [ 744.212582][T12739] ? inet_diag_handler_get_info+0xb80/0xb80 [ 744.218467][T12739] ? inet_diag_dump_start+0x20/0x20 [ 744.223667][T12739] ? inet_diag_dump+0x50/0x50 [ 744.228344][T12739] ? dev_queue_xmit+0x20/0x20 [ 744.233014][T12739] ? memcpy+0x3c/0x60 [ 744.236995][T12739] ? sock_diag_rcv+0x17/0x40 [ 744.241584][T12739] ? sock_diag_rcv+0x17/0x40 [ 744.246174][T12739] ? rcu_lock_release+0x20/0x20 [ 744.251030][T12739] sock_diag_rcv_msg+0x164/0x3e0 [ 744.255964][T12739] netlink_rcv_skb+0x1e0/0x430 [ 744.260724][T12739] ? sock_diag_bind+0xa0/0xa0 [ 744.265411][T12739] ? netlink_ack+0xb60/0xb60 [ 744.269999][T12739] ? __lock_acquire+0x7c60/0x7c60 [ 744.275025][T12739] sock_diag_rcv+0x26/0x40 [ 744.279442][T12739] netlink_unicast+0x774/0x920 [ 744.284214][T12739] netlink_sendmsg+0x8ab/0xbc0 [ 744.288991][T12739] ? netlink_getsockopt+0x560/0x560 [ 744.294189][T12739] ? aa_sock_msg_perm+0x94/0x150 [ 744.299212][T12739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 744.304489][T12739] ? security_socket_sendmsg+0x7c/0xa0 [ 744.309937][T12739] sock_write_iter+0x29c/0x380 [ 744.314694][T12739] ? sock_read_iter+0x340/0x340 [ 744.319542][T12739] do_iter_readv_writev+0x497/0x600 [ 744.324736][T12739] ? generic_file_rw_checks+0x280/0x280 [ 744.330276][T12739] ? common_file_perm+0x171/0x1c0 [ 744.335296][T12739] ? fsnotify_perm+0x5d/0x560 [ 744.339963][T12739] ? security_file_permission+0x75/0xa0 [ 744.345502][T12739] do_iter_write+0x205/0x7b0 [ 744.350082][T12739] ? import_iovec+0x6f/0xa0 [ 744.354585][T12739] do_writev+0x254/0x410 [ 744.358820][T12739] ? do_readv+0x3e0/0x3e0 [ 744.363144][T12739] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 744.369121][T12739] ? lock_chain_count+0x20/0x20 [ 744.373961][T12739] ? vtime_user_exit+0x2dc/0x400 [ 744.378887][T12739] ? lockdep_hardirqs_on+0x94/0x140 [ 744.384097][T12739] do_syscall_64+0x4c/0xa0 [ 744.388510][T12739] ? clear_bhb_loop+0x30/0x80 [ 744.393189][T12739] ? clear_bhb_loop+0x30/0x80 [ 744.397872][T12739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 744.403781][T12739] RIP: 0033:0x7fd69c3cdfc9 [ 744.408207][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.427817][T12739] RSP: 002b:00007fd69a635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 744.436238][T12739] RAX: ffffffffffffffda RBX: 00007fd69c624fa0 RCX: 00007fd69c3cdfc9 [ 744.444204][T12739] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 744.452163][T12739] RBP: 00007fd69c450f91 R08: 0000000000000000 R09: 0000000000000000 [ 744.460137][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.468102][T12739] R13: 00007fd69c625038 R14: 00007fd69c624fa0 R15: 00007ffd1b7f7518 [ 744.476077][T12739] [ 744.479376][T12739] Kernel Offset: disabled [ 744.492305][T12739] Rebooting in 86400 seconds..