last executing test programs: 8.924356811s ago: executing program 4 (id=84): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r4, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f0000001a40)=@rc={0x1f, @fixed}, 0x80, 0x0}, 0xffffff80}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x60, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7.53271761s ago: executing program 2 (id=88): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f00000005c0)) connect$bt_l2cap(r0, 0x0, 0x0) socket(0xa, 0x3, 0x87) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES16=r1, @ANYRES8=r3, @ANYBLOB="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", @ANYRESHEX=r7, @ANYRES16=r4, @ANYRESHEX=r6, @ANYRES8=r5, @ANYRESOCT, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYRES32], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) r9 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000011}) 7.5145658s ago: executing program 4 (id=89): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) 6.601215256s ago: executing program 2 (id=92): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0xd, 0x5, 0x8a1a}, 0x2c) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0xffffffff, "fa02c8098000"}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) 6.444659207s ago: executing program 4 (id=93): r0 = gettid() syz_open_dev$sndctrl(0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x8, 0x1, 0x7, 0x8}, {0x0, 0xc7, 0x2, 0x7}, {0x7, 0x0, 0x4, 0x1000}]}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) 5.491942944s ago: executing program 2 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)) futex(0x0, 0x3, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x401, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 5.463309644s ago: executing program 3 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010) 5.105323176s ago: executing program 0 (id=98): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) write$nbd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000010000000200ff82a8f5be00556b82b0cfc4337965941538be020000000000800000000074999b91793ba7f40000000000fdf70000000000000000100000"], 0x40) 4.868642068s ago: executing program 0 (id=99): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdir(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f0000001a40)=@rc={0x1f, @fixed}, 0x80, 0x0}, 0xffffff80}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x60, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 4.847289278s ago: executing program 4 (id=100): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) lseek(r0, 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 3.802593615s ago: executing program 0 (id=101): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$incfs(0xffffffffffffffff, 0x0, 0x444d00, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 3.790249265s ago: executing program 2 (id=103): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20441, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 3.787707305s ago: executing program 3 (id=104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$adsp1(0xffffffffffffff9c, 0x0, 0x1eb482, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) clock_gettime(0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x100, &(0x7f0000003bc0)) write(r0, &(0x7f0000000040)="3b000000010002", 0x7) fchmod(r0, 0x10c) 3.776155885s ago: executing program 4 (id=105): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x280449c, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[], 0x2a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.786784701s ago: executing program 1 (id=106): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) close(0x3) 2.609309703s ago: executing program 3 (id=107): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080), 0x4) 2.516671273s ago: executing program 3 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) keyctl$read(0xb, r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) 2.460894754s ago: executing program 1 (id=109): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x5d, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e21, @broadcast}}, 0x24) 2.255068695s ago: executing program 1 (id=110): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x14, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffff, 0x1, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0xe, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800081, 0x0, 0x0, 0x0, 0x4c6, 0x2, 0x0, 0x40476f], [0x0, 0x7c, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x4, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x90000000, 0x0, 0x0, 0x0, 0x5, 0xfffffff8, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 2.254492165s ago: executing program 4 (id=111): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0xe1, 0x7e, 0x7c, 0x40, 0x13d3, 0x3328, 0x3a9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0xf7, 0x40, 0x1, [{{0x9, 0x4, 0x7b, 0x65, 0x1, 0xce, 0xa, 0x22, 0x6, [], [{{0x9, 0x5, 0x3, 0x3, 0x200, 0x37, 0x8, 0x4}}]}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) 1.912714777s ago: executing program 2 (id=112): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdir(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f0000001a40)=@rc={0x1f, @fixed}, 0x80, 0x0}, 0xffffff80}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x60, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.52979877s ago: executing program 3 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)) futex(0x0, 0x3, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x401, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.4612616s ago: executing program 1 (id=114): r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getpeername$packet(r0, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002540)=0x14) 1.109363473s ago: executing program 0 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010) 920.784494ms ago: executing program 0 (id=116): socket$inet(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000340)=0x4) 727.264555ms ago: executing program 2 (id=117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x9, {[@global=@item_012={0x1, 0x1, 0x0, "e0"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0x5, "1f5fa67a"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)={0xbe, 0x0, 0x1}) 151.215709ms ago: executing program 1 (id=118): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) 150.570209ms ago: executing program 3 (id=119): wait4(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 61.143539ms ago: executing program 1 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) acct(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x23, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10000000040000000800000007ecff0000000000f936e5b26510b9b595ea879093a89206ace308d778933cf72dc3f516ef28f766c5095be5a79da217ad77cad84411e7e27fe76ca78b5baaaccc013b20c5331ae92885625e9207db6b8ea85bad3a31b4800b1267cb008255d7a4122d7c8e079397a37e53ad60c68eb8b190a72385681efe98170178be64211491baab9077ac8aba7a442e90b79bc3c3114d4a797ebbd911a254929d3aef186a45ec984edbd1a317dab4d2a662175bacef", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKROTATIONAL(r7, 0x127e, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001140)='O', 0x1}], 0x1}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r9, &(0x7f0000001b00)=""/4116, 0x1014) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a000000000000000000000014000500", @ANYRES32=r5], 0x3c}}, 0x8840) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010d50e1b40000", @ANYRES16=r11, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x8805) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c001880080001400000000006000240000000000800034000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}}, 0x0) 0s ago: executing program 0 (id=121): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. syzkaller login: [ 49.628732][ T4173] cgroup: Unknown subsys name 'net' [ 49.760529][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.994349][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.750564][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.871133][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.888059][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.970575][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.980739][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.988033][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.996959][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.031933][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.039264][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.047648][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.060052][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 53.128825][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.136348][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.144044][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.153445][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.171046][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.179567][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.187561][ T4192] device bridge_slave_0 entered promiscuous mode [ 53.194904][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.202654][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.210523][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.219067][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.228488][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.235727][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.243464][ T4189] device bridge_slave_0 entered promiscuous mode [ 53.253317][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.260438][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.269038][ T4192] device bridge_slave_1 entered promiscuous mode [ 53.298403][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.305785][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.313605][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.331430][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.343533][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.389702][ T4191] team0: Port device team_slave_0 added [ 53.410175][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.430652][ T4184] team0: Port device team_slave_0 added [ 53.438469][ T4191] team0: Port device team_slave_1 added [ 53.446207][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.457420][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.466652][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.473917][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.482174][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.490932][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.501295][ T4184] team0: Port device team_slave_1 added [ 53.519612][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.527377][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.535203][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.593447][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.600664][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.627134][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.641353][ T4189] team0: Port device team_slave_0 added [ 53.656703][ T4192] team0: Port device team_slave_0 added [ 53.664343][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.674010][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.681079][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.707412][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.719120][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.726513][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.753057][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.765151][ T4189] team0: Port device team_slave_1 added [ 53.772273][ T4192] team0: Port device team_slave_1 added [ 53.784374][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.794676][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.801723][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.828026][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.901155][ T4183] team0: Port device team_slave_0 added [ 53.913193][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.920790][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.951891][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.963471][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.970657][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.996685][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.016016][ T4183] team0: Port device team_slave_1 added [ 54.032464][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.039218][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.046386][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.053335][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.079557][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.091190][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.098608][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.124919][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.139536][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.146921][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.153963][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.161765][ T4184] Cannot create hsr debugfs directory [ 54.196624][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.203949][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.230166][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.242634][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.249784][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.276223][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.334418][ T4192] device hsr_slave_0 entered promiscuous mode [ 54.341283][ T4192] device hsr_slave_1 entered promiscuous mode [ 54.347971][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.355704][ T4192] Cannot create hsr debugfs directory [ 54.389885][ T4189] device hsr_slave_0 entered promiscuous mode [ 54.396598][ T4189] device hsr_slave_1 entered promiscuous mode [ 54.403200][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.411245][ T4189] Cannot create hsr debugfs directory [ 54.463069][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.469823][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.476601][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.484183][ T4183] Cannot create hsr debugfs directory [ 54.496245][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 54.505407][ T2393] Bluetooth: hci1: command 0x0409 tx timeout [ 54.508422][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 54.514291][ T2393] Bluetooth: hci0: command 0x0409 tx timeout [ 54.575713][ T2393] Bluetooth: hci3: command 0x0409 tx timeout [ 54.757223][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.769232][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.779014][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.789192][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.854123][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.867943][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.878227][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.891770][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.937746][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.947521][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.963485][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.993342][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.018411][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.058137][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.070742][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.088388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.098725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.117384][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.124550][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.149590][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.184451][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.193689][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.204323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.213558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.223368][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.230928][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.241290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.250698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.259780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.268406][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.275570][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.291425][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.308475][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.320910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.337023][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.372405][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.390789][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.400289][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.410944][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.420102][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.429801][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.438066][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.455932][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.489195][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.500114][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.513660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.523714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.532751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.542693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.551970][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.559527][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.568198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.579051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.588901][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.596512][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.605963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.614629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.623461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.632445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.641888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.650753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.668883][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.691036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.701443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.715115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.728948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.738180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.747918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.776478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.785029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.795090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.805098][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.812496][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.822765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.837406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.848989][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.856235][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.864519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.875156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.896164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.905938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.924620][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.942363][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.964154][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.986798][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.997618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.007332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.017882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.027908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.036607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.044764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.053863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.062296][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.070410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.079634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.088113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.100945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.109420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.132767][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.151689][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.171340][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.182664][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.191116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.201219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.211514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.220625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.229311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.238039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.246714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.254414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.262899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.292632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.302499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.313343][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.320634][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.334654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.344634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.353485][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.361269][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.369436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.378191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.386905][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.393967][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.401854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.411107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.419863][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.427187][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.435663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.444554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.452774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.462011][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.471512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.486559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.520403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.529734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.538131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.547516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.557462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.572734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.580686][ T1335] Bluetooth: hci0: command 0x041b tx timeout [ 56.585319][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 56.587001][ T1335] Bluetooth: hci2: command 0x041b tx timeout [ 56.605579][ T1335] Bluetooth: hci4: command 0x041b tx timeout [ 56.619393][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.633054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.649472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.657983][ T1335] Bluetooth: hci3: command 0x041b tx timeout [ 56.660061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.673822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.683376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.692716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.701868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.710961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.720208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.729246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.739627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.749240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.758704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.772392][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.783739][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.793511][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.807806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.817307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.825854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.834532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.853524][ T4191] device veth0_vlan entered promiscuous mode [ 56.884747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.901127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.914071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.927177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.936781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.944629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.957966][ T4191] device veth1_vlan entered promiscuous mode [ 56.968116][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.976695][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.988283][ T4184] device veth0_vlan entered promiscuous mode [ 57.029114][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.041893][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.055485][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.097310][ T4184] device veth1_vlan entered promiscuous mode [ 57.122922][ T4191] device veth0_macvtap entered promiscuous mode [ 57.131739][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.143317][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.152435][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.160760][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.170538][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.217391][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.230871][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.240109][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.253486][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.261143][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.268867][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.280359][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.288345][ T4191] device veth1_macvtap entered promiscuous mode [ 57.304327][ T4184] device veth0_macvtap entered promiscuous mode [ 57.315018][ T4184] device veth1_macvtap entered promiscuous mode [ 57.341132][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.354556][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.364420][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.373852][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.382588][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.394591][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.415188][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.428905][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.437637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.446734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.457059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.466481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.475655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.484414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.503306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.512804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.526875][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.538149][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.549850][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.561798][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.572200][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.581232][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.590120][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.627805][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.639210][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.650493][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.662026][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.671603][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.680820][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.689464][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.698851][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.707989][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.717542][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.726221][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.739052][ T4189] device veth0_vlan entered promiscuous mode [ 57.746143][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.754625][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.764234][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.772057][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.784042][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.794683][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.803507][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.812326][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.822644][ T4192] device veth0_vlan entered promiscuous mode [ 57.847271][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.857756][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.903923][ T4192] device veth1_vlan entered promiscuous mode [ 57.912148][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.945099][ T4183] device veth0_vlan entered promiscuous mode [ 57.977132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.985615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.994015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.002083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.021540][ T4189] device veth1_vlan entered promiscuous mode [ 58.046361][ T511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.047103][ T4183] device veth1_vlan entered promiscuous mode [ 58.054616][ T511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.090696][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.107740][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.116285][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.124719][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.143179][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.156516][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.164873][ T4192] device veth0_macvtap entered promiscuous mode [ 58.184597][ T4192] device veth1_macvtap entered promiscuous mode [ 58.201730][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.211456][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.220082][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.231608][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.240148][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.249586][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.261561][ T4189] device veth0_macvtap entered promiscuous mode [ 58.284281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.294601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.303626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.315947][ T4183] device veth0_macvtap entered promiscuous mode [ 58.325553][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.330816][ T4189] device veth1_macvtap entered promiscuous mode [ 58.333615][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.349554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.358226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.367002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.386695][ T4183] device veth1_macvtap entered promiscuous mode [ 58.394263][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.405566][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.417330][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.428375][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.439996][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.451517][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.462448][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.473226][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.483712][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.497049][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.516485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.526071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.536846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.546901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.562182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.577385][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.587449][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.590574][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.598403][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.605384][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.614180][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.660354][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 58.671992][ T1335] Bluetooth: hci0: command 0x040f tx timeout [ 58.673538][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 58.683578][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.684667][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 58.704588][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.715991][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.721533][ T4296] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.727886][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.735706][ T4296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.735768][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.735782][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.773014][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 58.773408][ T4298] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.789292][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.807557][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.822242][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.841479][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.850488][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.861436][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.872477][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.884431][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.898280][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.912614][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.940611][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.955474][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.965796][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.976975][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.990586][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.003983][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.014600][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.024976][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.035729][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.045875][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.057049][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.068465][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.108599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.118260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.127882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.141930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.152964][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.163856][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.174092][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.184813][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.195017][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.206741][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.217074][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.228316][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.239591][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.255465][ T4249] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 59.341278][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.380809][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.415551][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.424184][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.439585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.449120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.459027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.467261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.476938][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.486341][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.495143][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.504123][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.521406][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.530378][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.539974][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.549173][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.695862][ T4249] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 59.717510][ T4249] usb 4-1: can't read configurations, error -61 [ 59.721891][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.724161][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.778784][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.795454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.805457][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.815197][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 59.820710][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.962285][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 59.971454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 59.980635][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 59.989608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 59.998692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 60.385471][ T4249] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 60.395532][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.459896][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.480780][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.498000][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.512595][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.524461][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.541278][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.554880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.578334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.591458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.816363][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.881725][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 60.896088][ T4249] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 60.924190][ T4249] usb 4-1: can't read configurations, error -61 [ 60.934467][ T4249] usb usb4-port1: attempt power cycle [ 60.946010][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 60.946684][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 60.947567][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 60.971104][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 61.311500][ T7] usb 1-1: config index 0 descriptor too short (expected 38445, got 45) [ 61.345313][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.355379][ T4249] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 61.380324][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.384670][ T4326] binder: BINDER_SET_CONTEXT_MGR already set [ 61.392343][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.404840][ T7] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 61.418359][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.454096][ T4326] binder: 4320:4326 ioctl 4018620d 200000000040 returned -16 [ 61.464406][ T7] usb 1-1: config 0 descriptor?? [ 61.609512][ T4345] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12'. [ 61.615862][ T4249] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 61.637551][ T4249] usb 4-1: can't read configurations, error -61 [ 61.778502][ T4349] genirq: Flags mismatch irq 25. 00000000 (comedi_parport) vs. 00000000 (virtio3-input) [ 61.795530][ T4249] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 62.088080][ T7] hid-generic 0003:1044:7A4D.0001: hidraw0: USB HID v0.01 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 62.095566][ T4249] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 62.109283][ T4249] usb 4-1: can't read configurations, error -71 [ 62.133790][ T4249] usb usb4-port1: unable to enumerate USB device [ 62.248854][ T2393] usb 1-1: USB disconnect, device number 2 [ 63.635001][ T4371] ubi31: attaching mtd0 [ 63.651053][ T4371] ubi31: scanning is finished [ 63.655921][ T4371] ubi31: empty MTD device detected [ 64.148190][ T4371] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 64.179662][ T4371] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 64.220882][ T4371] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 64.229981][ T4371] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 64.238438][ T4371] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 64.248342][ T4371] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 64.260662][ T4371] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3606124621 [ 64.272753][ T4371] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 64.289243][ T4374] ubi31: background thread "ubi_bgt31d" started, PID 4374 [ 65.432338][ T4391] input: syz1 as /devices/virtual/input/input6 [ 65.675309][ T4310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 65.719921][ T2393] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 65.746301][ T2393] Bluetooth: hci4: Injecting HCI hardware error event [ 65.754282][ T4197] Bluetooth: hci4: hardware error 0x00 [ 66.115350][ T4310] usb 4-1: Using ep0 maxpacket: 8 [ 67.180541][ T4310] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 67.193237][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.202772][ T4310] usb 4-1: Product: syz [ 67.207621][ T4310] usb 4-1: Manufacturer: syz [ 67.212231][ T4310] usb 4-1: SerialNumber: syz [ 67.219378][ T4310] usb 4-1: config 0 descriptor?? [ 67.343348][ T4310] gspca_main: se401-2.14.0 probing 047d:5003 [ 68.760363][ T4310] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 68.824421][ T4427] Zero length message leads to an empty skb [ 69.294082][ T4422] loop6: detected capacity change from 0 to 390070272 [ 70.163995][ T4437] loop6: detected capacity change from 390070272 to 1 [ 70.198439][ T4310] gspca_se401: read req failed req 0x06 error -19 [ 70.230051][ T4310] usb 4-1: USB disconnect, device number 6 [ 71.465918][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473490][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.751118][ T4201] block nbd3: Receive control failed (result -32) [ 72.760051][ T4473] block nbd3: shutting down sockets [ 72.958284][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.965971][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.053553][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.061111][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.444707][ T4506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.58'. [ 74.198844][ T4201] Bluetooth: hci4: unexpected event for opcode 0x202d [ 74.691826][ T4519] MPTCP: kernel_bind error, err=-98 [ 76.417900][ T23] cfg80211: failed to load regulatory.db [ 77.115843][ T4547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.123670][ T4547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.154364][ T4547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.162095][ T4547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.566165][ T4566] binder: BINDER_SET_CONTEXT_MGR already set [ 78.688034][ T4566] binder: 4563:4566 ioctl 4018620d 200000000040 returned -16 [ 80.409721][ T4598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.648303][ T4604] ======================================================= [ 80.648303][ T4604] WARNING: The mand mount option has been deprecated and [ 80.648303][ T4604] and is ignored by this kernel. Remove the mand [ 80.648303][ T4604] option from the mount to silence this warning. [ 80.648303][ T4604] ======================================================= [ 82.080868][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 82.410296][ T23] usb 1-1: device descriptor read/64, error -71 [ 82.803552][ T4627] IPVS: rr: FWM 3 0x00000003 - no destination available [ 82.955536][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 83.185391][ T23] usb 1-1: device descriptor read/64, error -71 [ 83.605419][ T23] usb usb1-port1: attempt power cycle [ 83.793262][ T4641] dlm: dev_write: no op 2be 80000000 [ 83.825599][ T4639] device bridge1 entered promiscuous mode [ 87.578044][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.890329][ T4695] device bridge1 entered promiscuous mode [ 88.067165][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.165859][ T13] usb 5-1: config 8 has an invalid interface number: 123 but max is 0 [ 88.189203][ T13] usb 5-1: config 8 has no interface number 0 [ 88.689547][ T13] usb 5-1: config 8 interface 123 altsetting 101 endpoint 0x3 has an invalid bInterval 55, changing to 9 [ 88.701687][ T13] usb 5-1: config 8 interface 123 has no altsetting 0 [ 88.886871][ T4712] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 88.896560][ T4712] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 4712, name: syz.3.119 [ 88.905510][ T4712] 1 lock held by syz.3.119/4712: [ 88.910427][ T4712] #0: ffffffff8c142078 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 88.920160][ T4712] irq event stamp: 838 [ 88.924291][ T4712] hardirqs last enabled at (837): [] raw_spin_rq_unlock_irq+0x11/0x90 [ 88.934078][ T4712] hardirqs last disabled at (838): [] _raw_spin_lock_irq+0x7a/0xe0 [ 88.943517][ T4712] softirqs last enabled at (714): [] __irq_exit_rcu+0x12f/0x220 [ 88.952785][ T4712] softirqs last disabled at (695): [] __irq_exit_rcu+0x12f/0x220 [ 88.962050][ T4712] Preemption disabled at: [ 88.962056][ T4712] [<0000000000000000>] 0x0 [ 88.970745][ T4712] CPU: 0 PID: 4712 Comm: syz.3.119 Not tainted syzkaller #0 [ 88.978003][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.988077][ T4712] Call Trace: [ 88.991348][ T4712] [ 88.994267][ T4712] dump_stack_lvl+0x168/0x230 [ 88.998989][ T4712] ? __irq_exit_rcu+0x12f/0x220 [ 89.003994][ T4712] ? show_regs_print_info+0x20/0x20 [ 89.009191][ T4712] ? load_image+0x3b0/0x3b0 [ 89.013675][ T4712] ? __schedule+0x1464/0x4390 [ 89.018337][ T4712] ___might_sleep+0x47c/0x600 [ 89.023143][ T4712] ? __might_sleep+0xf0/0xf0 [ 89.027760][ T4712] down_read+0x20/0x2e0 [ 89.031902][ T4712] kernfs_walk_and_get_ns+0x81/0x2b0 [ 89.037168][ T4712] ? kernfs_find_ns+0x510/0x510 [ 89.041999][ T4712] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 89.048134][ T4712] cgroup_get_from_path+0x5f/0x2f0 [ 89.053222][ T4712] cgroup_mt_check_v1+0x1ae/0x2c0 [ 89.058225][ T4712] xt_check_match+0x3c6/0xaa0 [ 89.062881][ T4712] ? xt_check_proc_name+0x240/0x240 [ 89.068058][ T4712] ? xt_find_match+0x1e1/0x210 [ 89.072802][ T4712] translate_table+0x14f8/0x1fe0 [ 89.077849][ T4712] ? ipt_register_table+0x7e0/0x7e0 [ 89.083029][ T4712] ? __might_fault+0xb7/0x110 [ 89.087682][ T4712] ? __lock_acquire+0x7c60/0x7c60 [ 89.092695][ T4712] ? lockdep_hardirqs_on+0x94/0x140 [ 89.097882][ T4712] ? _copy_from_user+0x111/0x170 [ 89.102911][ T4712] do_ipt_set_ctl+0x96c/0xcf0 [ 89.107600][ T4712] ? nf_setsockopt+0x218/0x280 [ 89.112417][ T4712] ? ipt_unregister_table_exit+0x220/0x220 [ 89.118406][ T4712] ? __lock_acquire+0x7c60/0x7c60 [ 89.123416][ T4712] ? __mutex_lock_common+0x431/0x2390 [ 89.128776][ T4712] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 89.134389][ T4712] ? mutex_unlock+0x10/0x10 [ 89.138992][ T4712] ? __local_bh_enable_ip+0x12a/0x1b0 [ 89.144344][ T4712] ? lockdep_hardirqs_on+0x94/0x140 [ 89.149520][ T4712] ? __local_bh_enable_ip+0x12a/0x1b0 [ 89.154871][ T4712] nf_setsockopt+0x25f/0x280 [ 89.159447][ T4712] ip_setsockopt+0x2127/0x3070 [ 89.164227][ T4712] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 89.169595][ T4712] ? __might_sleep+0xf0/0xf0 [ 89.174191][ T4712] tcp_setsockopt+0x21a/0x1d70 [ 89.178950][ T4712] ? rcu_is_watching+0x11/0xa0 [ 89.183721][ T4712] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 89.189158][ T4712] ? asm_sysvec_call_function_single+0x16/0x20 [ 89.195294][ T4712] ? lockdep_hardirqs_on+0x94/0x140 [ 89.200487][ T4712] ? asm_sysvec_call_function_single+0x16/0x20 [ 89.206631][ T4712] ? sock_common_recvmsg+0x1b0/0x1b0 [ 89.211909][ T4712] ? __sys_setsockopt+0x2a8/0x3d0 [ 89.217030][ T4712] ? sock_common_setsockopt+0x32/0xb0 [ 89.222383][ T4712] ? sock_common_recvmsg+0x1b0/0x1b0 [ 89.227742][ T4712] __sys_setsockopt+0x2bf/0x3d0 [ 89.232596][ T4712] __x64_sys_setsockopt+0xb1/0xc0 [ 89.237619][ T4712] do_syscall_64+0x4c/0xa0 [ 89.242023][ T4712] ? clear_bhb_loop+0x30/0x80 [ 89.246683][ T4712] ? clear_bhb_loop+0x30/0x80 [ 89.251339][ T4712] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.257252][ T4712] RIP: 0033:0x7fb96a560fc9 [ 89.261764][ T4712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.281370][ T4712] RSP: 002b:00007fb9687a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.289766][ T4712] RAX: ffffffffffffffda RBX: 00007fb96a7b8090 RCX: 00007fb96a560fc9 [ 89.297716][ T4712] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 89.305666][ T4712] RBP: 00007fb96a5e3f91 R08: 00000000000022f8 R09: 0000000000000000 [ 89.313615][ T4712] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 89.321564][ T4712] R13: 00007fb96a7b8128 R14: 00007fb96a7b8090 R15: 00007ffd9459e7e8 [ 89.329630][ T4712] [ 89.332636][ T4712] [ 89.334934][ T4712] ============================= [ 89.339748][ T4712] [ BUG: Invalid wait context ] [ 89.344564][ T4712] syzkaller #0 Tainted: G W [ 89.350338][ T4712] ----------------------------- [ 89.355155][ T4712] syz.3.119/4712 is trying to lock: [ 89.360335][ T4712] ffffffff8c24d5b0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x81/0x2b0 [ 89.369783][ T4712] other info that might help us debug this: [ 89.375745][ T4712] context-{4:4} [ 89.379271][ T4712] 1 lock held by syz.3.119/4712: [ 89.384262][ T4712] #0: ffffffff8c142078 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 89.393969][ T4712] stack backtrace: [ 89.397662][ T4712] CPU: 0 PID: 4712 Comm: syz.3.119 Tainted: G W syzkaller #0 [ 89.406430][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.416486][ T4712] Call Trace: [ 89.419753][ T4712] [ 89.422665][ T4712] dump_stack_lvl+0x168/0x230 [ 89.427319][ T4712] ? show_regs_print_info+0x20/0x20 [ 89.432492][ T4712] ? load_image+0x3b0/0x3b0 [ 89.436981][ T4712] __lock_acquire+0x1be9/0x7c60 [ 89.441811][ T4712] ? verify_lock_unused+0x140/0x140 [ 89.446986][ T4712] ? __printk_cpu_unlock+0x5f/0x70 [ 89.452071][ T4712] ? dump_stack_lvl+0x1bf/0x230 [ 89.456897][ T4712] ? __irq_exit_rcu+0x12f/0x220 [ 89.461720][ T4712] ? show_regs_print_info+0x20/0x20 [ 89.466892][ T4712] ? load_image+0x3b0/0x3b0 [ 89.471371][ T4712] ? __schedule+0x1464/0x4390 [ 89.476041][ T4712] lock_acquire+0x197/0x3f0 [ 89.480519][ T4712] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 89.485960][ T4712] ? __might_sleep+0xf0/0xf0 [ 89.490652][ T4712] ? read_lock_is_recursive+0x10/0x10 [ 89.496003][ T4712] down_read+0x44/0x2e0 [ 89.500137][ T4712] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 89.505581][ T4712] kernfs_walk_and_get_ns+0x81/0x2b0 [ 89.510845][ T4712] ? kernfs_find_ns+0x510/0x510 [ 89.515673][ T4712] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 89.521805][ T4712] cgroup_get_from_path+0x5f/0x2f0 [ 89.526889][ T4712] cgroup_mt_check_v1+0x1ae/0x2c0 [ 89.531899][ T4712] xt_check_match+0x3c6/0xaa0 [ 89.536554][ T4712] ? xt_check_proc_name+0x240/0x240 [ 89.541730][ T4712] ? xt_find_match+0x1e1/0x210 [ 89.546470][ T4712] translate_table+0x14f8/0x1fe0 [ 89.551389][ T4712] ? ipt_register_table+0x7e0/0x7e0 [ 89.556584][ T4712] ? __might_fault+0xb7/0x110 [ 89.561233][ T4712] ? __lock_acquire+0x7c60/0x7c60 [ 89.566239][ T4712] ? lockdep_hardirqs_on+0x94/0x140 [ 89.571423][ T4712] ? _copy_from_user+0x111/0x170 [ 89.576341][ T4712] do_ipt_set_ctl+0x96c/0xcf0 [ 89.581012][ T4712] ? nf_setsockopt+0x218/0x280 [ 89.585749][ T4712] ? ipt_unregister_table_exit+0x220/0x220 [ 89.591546][ T4712] ? __lock_acquire+0x7c60/0x7c60 [ 89.596546][ T4712] ? __mutex_lock_common+0x431/0x2390 [ 89.601894][ T4712] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 89.607513][ T4712] ? mutex_unlock+0x10/0x10 [ 89.611999][ T4712] ? __local_bh_enable_ip+0x12a/0x1b0 [ 89.617442][ T4712] ? lockdep_hardirqs_on+0x94/0x140 [ 89.622617][ T4712] ? __local_bh_enable_ip+0x12a/0x1b0 [ 89.627964][ T4712] nf_setsockopt+0x25f/0x280 [ 89.632532][ T4712] ip_setsockopt+0x2127/0x3070 [ 89.637274][ T4712] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 89.642625][ T4712] ? __might_sleep+0xf0/0xf0 [ 89.647195][ T4712] tcp_setsockopt+0x21a/0x1d70 [ 89.652370][ T4712] ? rcu_is_watching+0x11/0xa0 [ 89.657130][ T4712] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 89.662482][ T4712] ? asm_sysvec_call_function_single+0x16/0x20 [ 89.668611][ T4712] ? lockdep_hardirqs_on+0x94/0x140 [ 89.673784][ T4712] ? asm_sysvec_call_function_single+0x16/0x20 [ 89.679914][ T4712] ? sock_common_recvmsg+0x1b0/0x1b0 [ 89.685171][ T4712] ? __sys_setsockopt+0x2a8/0x3d0 [ 89.690173][ T4712] ? sock_common_setsockopt+0x32/0xb0 [ 89.695528][ T4712] ? sock_common_recvmsg+0x1b0/0x1b0 [ 89.700875][ T4712] __sys_setsockopt+0x2bf/0x3d0 [ 89.705792][ T4712] __x64_sys_setsockopt+0xb1/0xc0 [ 89.710796][ T4712] do_syscall_64+0x4c/0xa0 [ 89.715232][ T4712] ? clear_bhb_loop+0x30/0x80 [ 89.719883][ T4712] ? clear_bhb_loop+0x30/0x80 [ 89.724619][ T4712] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.730488][ T4712] RIP: 0033:0x7fb96a560fc9 [ 89.734972][ T4712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.754642][ T4712] RSP: 002b:00007fb9687a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.763042][ T4712] RAX: ffffffffffffffda RBX: 00007fb96a7b8090 RCX: 00007fb96a560fc9 [ 89.770987][ T4712] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 89.778933][ T4712] RBP: 00007fb96a5e3f91 R08: 00000000000022f8 R09: 0000000000000000 [ 89.786895][ T4712] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 89.794945][ T4712] R13: 00007fb96a7b8128 R14: 00007fb96a7b8090 R15: 00007ffd9459e7e8 [ 89.803072][ T4712] [ 89.836989][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 89.840327][ T4712] xt_cgroup: invalid path, errno=-2 [ 89.875357][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.875962][ T13] usb 5-1: New USB device found, idVendor=13d3, idProduct=3328, bcdDevice=3a.9f [ 89.921508][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.957169][ T13] usb 5-1: Product: syz [ 89.964414][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 89.974830][ T4711] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 89.974849][ T13] usb 5-1: Manufacturer: syz [ 89.995378][ T13] usb 5-1: can't set config #8, error -71 [ 90.019593][ T13] usb 5-1: USB disconnect, device number 2 [ 90.285472][ T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.300242][ T21] usb 3-1: config 0 has no interface number 0 [ 90.315294][ T21] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.335332][ T21] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.353770][ T21] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 90.373980][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.400519][ T21] usb 3-1: config 0 descriptor?? [ 90.897134][ T21] prodikeys 0003:041E:2801.0002: item fetching failed at offset 3/7 [ 90.905885][ T21] prodikeys 0003:041E:2801.0002: hid parse failed [ 90.912360][ T21] prodikeys: probe of 0003:041E:2801.0002 failed with error -22 [ 91.099555][ T21] usb 3-1: USB disconnect, device number 2