last executing test programs: 15.750436832s ago: executing program 1 (id=33): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) 15.551741054s ago: executing program 1 (id=36): socket$nl_generic(0x11, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) readv(r2, &(0x7f0000001700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') syz_ublk_setup_io_uring(0x6548, &(0x7f0000000180)={0x0, 0x66b7, 0x1, 0x2, 0xd2}, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) getrlimit(0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000240)={0x4, 0x2, 0x1ff, 0x80007d, 0xffffffff, 0x8000000008000, 0x8, 0x1}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0xffffffff, 0x400000009, 0x10000000, 0xb, 0xffff}, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x14, 0x7d, 0x9, 0x4, 0x81, 0x81}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c8c0) 13.578656926s ago: executing program 1 (id=40): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f0000000140)=@phonet, 0x0, 0x800) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000000200)='immediate\x00', 0x40, 0x100, &(0x7f0000000340)={0x7ff, 0x101, 0x36e, 0xcb4}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d00", @ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000030601040000000000000000020100070000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12.995698763s ago: executing program 1 (id=42): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000"], 0x80}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}}}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.874043714s ago: executing program 3 (id=43): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x1, 0x50}, 0x8) 12.608747948s ago: executing program 3 (id=44): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delvlan={0x24, 0x70, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) inotify_init1(0x80c00) 12.37416976s ago: executing program 3 (id=47): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0xf73, &(0x7f0000000380)={0x0, 0x49f6, 0x800, 0x2}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000001980)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}, {&(0x7f00000005c0), 0x0, 0x2}, {&(0x7f0000000680)="0a20911cd3c0e72fb9beecf41d585e209b157d15e36f3f59b7757c38c0175c70368aab18d4c76beb1bb533e12c1f81ef155d112f7e9b2b731129f4ff8ad513a8b809e845f4711ce407e73843e054839cb06b7648c6bc9aa54252bcd2f092a78b5d27ee", 0x63, 0x2}, {&(0x7f0000000740)="c657cfbd7db57e113cd9783b0419b7c25dcb3c90cbffdb3d491206633e5fe594fac574913c9d3a7bc383640a2acef481d7ecaf3a127571f843691cfc2e6b2d5d5ca4ed666e30aeb69bf49bc73df2a29e0ae51d044d32b6152a0130c94f", 0x5d}, {&(0x7f00000007c0)="cbb4b968ec449ec840cc08a8dbb1cc2054a5e0a64aefb213827fdbc14e265428a1d162637be676c33e834039179f6a5643dedab1db145ce2bd", 0x39}, {&(0x7f0000000900)="3192daecd76186985a26a497882af9dd29a1f1edbfd779eaf18cdb5fa44264e1c5e69b536fcb2c1c6df0f525e0669545ac9a43c49a7e", 0x36, 0x3}, {&(0x7f0000000980)="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", 0x1000, 0x2}]}, 0x7, 0x1}, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 11.980936064s ago: executing program 4 (id=52): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) timer_create(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 10.132343005s ago: executing program 1 (id=53): socket$kcm(0x21, 0x2, 0xa) setresgid(0xee00, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 8.694103302s ago: executing program 1 (id=55): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x10) 8.027832709s ago: executing program 4 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) rename(&(0x7f0000002000)='./file0/file0\x00', &(0x7f00000021c0)='./file0/file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) renameat(0xffffffffffffffff, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) 7.907755921s ago: executing program 4 (id=59): r0 = openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0) syz_open_pts(r0, 0x81) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300617e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd", @ANYRES32=r0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x185001) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r7 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe", r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.583651674s ago: executing program 0 (id=60): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}}) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000016}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, 0x8000000}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41", 0x3}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 7.0426733s ago: executing program 4 (id=61): epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000600)={{&(0x7f00004d9000/0x3000)=nil, 0x3000}}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f00000005c0), 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) mount(0x0, 0x0, &(0x7f0000000340)='f2fs\x00', 0x8000, 0x0) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) 6.523031726s ago: executing program 0 (id=64): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0xac}}}, 0x7) 6.418176268s ago: executing program 0 (id=65): socket$kcm(0x21, 0x2, 0xa) setresgid(0xee00, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 6.15578297s ago: executing program 0 (id=66): ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000300)='/dev/dma_heap/system\x00\xcfLZ\xd1!\xe6\x16\xdb\xddF\xc29\x0ee\x89\x1f\x0f\xfb\x8e\f\xefrw\xb6\x99\xea\xfd\xb0\xda\xf0$\x11\x80C\xa3\xe4\xf2Yb\xc7\x0f\x02\x85b\xe0\x05\x87\x826\xc4\xec\xfc\xbe\x1e\xf3\x95\xe7_\x03\xa4\xd8\x85\xb7\x9d\xf5\x94\xebL>\xd2M?o\x84p\x10T\x9e9C\xd1$\x98\x8b\xf38\x84\xea}H\v>\xe8#\xee\xaaD\xbb!J(\xbe\x9c\x9b\x04\x9e\x15-\"\x8a\x87\x9f') r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x400, 0x7, 0x2e1, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) fchdir(0xffffffffffffffff) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) madvise(&(0x7f000042c000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.052212752s ago: executing program 0 (id=67): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 5.655461446s ago: executing program 4 (id=68): openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d30000000000000180016801400018010000600030000000300000005000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(0x0, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x1000009) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x2, 0xc9, 0x0, 0x7197}}}, 0x9) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000880)={{0x9, 0x3, 0xffffff81, 0xc9, 'syz1\x00', 0x33}, 0x2, 0x400, 0xea5, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000700)=['/dev/udmabuf\x00', ',\',.:\x00'], 0x13}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x46) 4.671505618s ago: executing program 4 (id=69): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="0c268a927f1f6588b96748a2f29a441241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x47, 0x20040804, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRESDEC=r1], 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0xa44, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902"], 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r4 = syz_io_uring_setup(0x3fa4, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2fb}, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r4, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0x0, 0xffff2d37, 0x1dd2, 0xfffffff8, 0x7, 0x4, 0x80000001, 0x5, 0x7, 0x3, 0x3c5b, 0x20000001, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x8, 0xe808, 0x3, 0x8001, 0x4c74, 0x1, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x2, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x95, 0x0, 0x80, 0xfffffffc, 0x5, 0x10005, 0x8, 0x0, 0x1, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0x7, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x400000, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0xfffffffe, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x80, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x2, 0x2, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x1, 0x7, 0x1, 0x51bc, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x3, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x4, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x1, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10003, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x6bc, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x5f4, 0x5f4, 0x5f4, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x224, 0x280, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0xf], 0x6, 0x10, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}], 0x4}}, @common=@hbh={{0x48}, {0x9, 0x5, 0x0, [0xfff, 0x4, 0x7, 0xff, 0x7fff, 0x3, 0x7, 0x5, 0x7f, 0x6, 0x1, 0x7fe, 0x8, 0x4a80, 0x4], 0x1}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0x0, 0xff, 0xffffff00], 0x4e24, 0x4e23, 0x4e24, 0x4e22, 0x4ca, 0x6, 0x8, 0x3, 0x957}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @empty, [0xffffffff, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xff], 'batadv_slave_1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2c, 0x38, 0x2, 0x60}, 0x0, 0x224, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x7, 0x1000], 0xfffffffe, 0x30, 0x6, [@loopback, @mcast1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @empty, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local], 0x8}}, @common=@hbh={{0x48}, {0x6, 0x5, 0x0, [0x7, 0xb5d, 0xa521, 0x8, 0x7, 0x4, 0x7, 0x80, 0x9, 0xfffd, 0x32, 0x3, 0x6, 0xd, 0x2, 0x4], 0xb}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x3, 0x1, 0x5}, {0xffffffffffffffff, 0x1, 0x6}, {0x4, 0x5, 0x4}, 0x4, 0x4}}}, {{@uncond, 0x0, 0xec, 0x11c, 0x0, {}, [@common=@mh={{0x24}, {"8a73", 0x1}}, @common=@icmp6={{0x24}, {0xf, "3cd0", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x4}, {0x4, 0x4, 0x6}, 0x1, 0x4}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x718) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000017c0)={"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"}) syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001bc0)={'security\x00', 0x0, [0x6, 0xd6, 0x6, 0x4, 0x10001]}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) 3.628195649s ago: executing program 3 (id=70): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x24) mount$binder(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000680), 0x8001, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES64=r1, @ANYRESOCT]) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000005200)=[{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000580)="bbca1044f88fd793c5bce86e0e23f9856519f8d590746d586868ecca574152e5e3b629732e9bbc9d7e42b4ce0941ada89f441d6ca26660f4076ea54b4966281ef0e60572729ba2814cae7b44e97a3b3d8a29e414b2e28f9c", 0x58}, {&(0x7f00000006c0)="ea743d3740af8d5dea75cbf7713ef18f31eb80eca01f29f2b3cdf6e04bff941c8fa2acc2d28ad0e3b48752211d59c913265472b36562993aad774afaade2d0cba768d5a1ef040d07d0153fae12", 0x4d}, {&(0x7f00000007c0)="02e15ada57bae61383d7a02086050725859f0ed39b649693a53a4001da504b40a04b9e30dfb956620139d4a9f3dc348de2dab7b53fa1", 0x36}, {&(0x7f0000000840)="1b11aadc9228448c8c8488d2eaccba81cd8f2115b9f766021c13d48be436344d34ba83b974234d17a05242e2dfed71ef507c57e0ee3a9b292c436bebca95dcebab18dcdf00627f8dc72c65270f2440a6d1920a24df51abcfcd54cfc535bfbea30821a268855300bf029a51ba016eb258690d70c8b81b", 0x76}, {&(0x7f0000000940)="b7b16e25816624cfbe8c492146286fd46f5a638b472987985c473481efbe", 0x1e}], 0x7, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000001280)=[{0x0}, {&(0x7f0000001040)="a16dc14cd0f525b25bbecc50f8961a91786dba68aeb2d9dda4aa52e0d23fb8fbb256d3b3feceb88ab17281", 0x2b}, {&(0x7f00000010c0)="bb82ad4bb180143f32661d1db9267af67bb807485e0f500a18454cf0a5cdfea21f270c1fb940beedc70245d557785c884f624586321811264d78aa470915519bc999b3b1938848529f14a18715e166f44ff61ccd7c0bfcd60efb420b44c2e29d0af6151139877f070d94ce76f24c15c513f47e2a", 0x74}, {0x0}], 0x4, &(0x7f00000012c0), 0x0, 0x4000051}, {0x0, 0x0, &(0x7f00000051c0), 0x0, 0x0, 0x0, 0x81}], 0x3, 0x20000090) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000016000000000100007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000000000000000000000000000000000000000000000008eb1c99d6b4fafb918935a262a6672d2717c176cfcefd53998db432ecd"], 0x50) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x20000400) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r7, 0x0, 0x6, 0xc) vmsplice(r5, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x2a020480) unshare(0x10010000) socket$inet6_sctp(0xa, 0x5, 0x84) 3.463124351s ago: executing program 2 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="55ee", 0x2}], 0x1}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000001c0)="87", 0x1, 0x81, &(0x7f0000000280)={0x11, 0xc, r6, 0x1, 0x5, 0x6, @broadcast}, 0x14) 3.327439462s ago: executing program 3 (id=72): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f0000001780)={0x0, 0x2, 0x0, 0x9}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0xfffffffffffffffb}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x70e3, 0x48}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="5b0aead080ebf3acf17d5b754ecc4f97f975bb8578dbf0ab77caea8400a560d0ea1737fb2b24dce8f733ef49a8bf37902681fe76995017526f726285c18755e4f288025e954c04a742feeb7e78a623b17776b54752665f0e3b4dde59a8f4f2567cb50f945bd9cd37c5cf57361d7b0170dacf32c43aabeaab0357d11c7915a22c455ac46760b7620ff8d6993bb9cd982216521d21350f2c881bca32e27b40867df9fc2822807368c4ff3a51e68e82c5c17c01649ca1af824bab733a58aad714f6746e"], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r12, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="55f7d2129b0fb030163626ea5185b8c2ee1d7644d0a9f0c2192741867a921981c589e4b6d628104fb99292eb9c6c7d48c549f2e51797d40731ad70f48b32d3b836324a1758c9d1c5d120ebb8d16ee767a815ed2497b853076b28b01429ef0db8ab551b029fcbeaaf5d000a865a706cbb8d49e390cb5554112e1cfbf32804ca2cce1421e20dd6658195b76ab4ea35d34940cc9e06f1e2"], 0x0) 3.327122782s ago: executing program 2 (id=73): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) readv(r2, &(0x7f0000001700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') syz_ublk_setup_io_uring(0x6548, &(0x7f0000000180)={0x0, 0x66b7, 0x1, 0x2, 0xd2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) getrlimit(0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x14, 0x7d, 0x9, 0x4, 0x81, 0x81}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c8c0) 3.309310473s ago: executing program 0 (id=74): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) socket$pppoe(0x18, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) r6 = syz_clone(0x4811000, &(0x7f0000000440)="0a2605b6c8a80b127bbeb5f64a44fd0149b417d571719ed89c88d0299a996dcd04a465f13edc", 0x26, &(0x7f00000004c0), &(0x7f0000000500), 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000580)=0x7ff) 2.209843845s ago: executing program 2 (id=75): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) 2.107615316s ago: executing program 2 (id=76): socket$kcm(0x21, 0x2, 0xa) setresgid(0xee00, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 2.094378636s ago: executing program 3 (id=77): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc044) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xffffff89, 0x6, 0x6, 0x3}, {0x80000008, 0x4, 0x0, 0x8, 0x0, 0x1, 0x8}, {0x0, 0x9, 0x0, 0x3ff, 0x7ffffdff, 0x8001, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0x0, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x6, 0x400003, 0x40000002, 0xe0000}, {0x80000001, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfffd, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="9a53754f9940507eb7", @TCF_META_TYPE_VAR="e6adc124e3", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ee7620e1941585"]}]}}]}]}]}}]}, 0xffffffa4}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448c4}, 0x4054) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', &(0x7f0000000240)=@ethtool_cmd={0x26, 0xfffffffc, 0x9, 0xf19, 0x5, 0xa, 0x5, 0x5, 0x7, 0x8, 0x3, 0xe00, 0xf4dd, 0xf7, 0x7, 0x0, [0x1ff, 0x4]}}) 1.132380547s ago: executing program 2 (id=78): socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r1}, 0x38) 0s ago: executing program 2 (id=79): socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002000010027bd7000000000000a00004000000000000000000500150003000000dcdbde6cfa3605339c8ebb4bc878c6ea2a6cb0e02581495fe91d5beb88c2bad4f0e55642017f21418b9c3135bbf9c42c6ea7d814574d03c053176ea257aec14006e1257a578700446f3bcfd7f40e35df049195ee8e1805cd2b8299939055725cedc7c3345e4e4a97a66046f8faedd71ddee421c3a5fc70c0ed3e762e19cc24ec13f979941d6257c6369b65c64e"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x5c}}, 0x40084) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0xf22) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 60.166882][ T4176] cgroup: Unknown subsys name 'net' [ 60.273035][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.782364][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.171955][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.243440][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 63.267937][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 63.324569][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.359674][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.367433][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.376261][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.388038][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.395330][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.403019][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.429840][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.472860][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.503536][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.510820][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.519252][ T4196] device bridge_slave_0 entered promiscuous mode [ 63.532613][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.539819][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.548454][ T4196] device bridge_slave_1 entered promiscuous mode [ 63.556736][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.586833][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.594047][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.602962][ T4199] device bridge_slave_0 entered promiscuous mode [ 63.639011][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.646370][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.654046][ T4199] device bridge_slave_1 entered promiscuous mode [ 63.669439][ T4189] team0: Port device team_slave_0 added [ 63.701211][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.712013][ T4189] team0: Port device team_slave_1 added [ 63.718394][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.725746][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.733427][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.747169][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.754255][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.762995][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.777757][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.801363][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.817189][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.824826][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.832772][ T4194] device bridge_slave_0 entered promiscuous mode [ 63.855668][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.877582][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.885104][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.893176][ T4194] device bridge_slave_1 entered promiscuous mode [ 63.902529][ T4196] team0: Port device team_slave_0 added [ 63.909513][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.916568][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.942867][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.957967][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.981067][ T4196] team0: Port device team_slave_1 added [ 63.987595][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.994951][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.021154][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.034052][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.051487][ T4199] team0: Port device team_slave_0 added [ 64.067185][ T4199] team0: Port device team_slave_1 added [ 64.089920][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.120809][ T4188] team0: Port device team_slave_0 added [ 64.128840][ T4188] team0: Port device team_slave_1 added [ 64.137112][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.160216][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.167417][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.193771][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.212219][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.219790][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.246230][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.263964][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.271909][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.298670][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.333807][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.341234][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.368141][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.381540][ T4194] team0: Port device team_slave_0 added [ 64.392945][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.399831][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.422133][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.429504][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.456248][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.472414][ T4194] team0: Port device team_slave_1 added [ 64.494090][ T4196] device hsr_slave_0 entered promiscuous mode [ 64.501432][ T4196] device hsr_slave_1 entered promiscuous mode [ 64.508545][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.516407][ T4196] Cannot create hsr debugfs directory [ 64.522496][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.529512][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.555945][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.602197][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.609659][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.636192][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.651778][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.658985][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.685410][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.712886][ T4199] device hsr_slave_0 entered promiscuous mode [ 64.720290][ T4199] device hsr_slave_1 entered promiscuous mode [ 64.727478][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.735502][ T4199] Cannot create hsr debugfs directory [ 64.777403][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.784120][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.791404][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.799275][ T4188] Cannot create hsr debugfs directory [ 64.886429][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.893470][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.902343][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.910913][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 64.912890][ T4194] Cannot create hsr debugfs directory [ 64.917991][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 64.926439][ T4192] Bluetooth: hci2: command 0x0409 tx timeout [ 64.929431][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 64.943558][ T4192] Bluetooth: hci3: command 0x0409 tx timeout [ 65.170518][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.185398][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.196018][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.212417][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.257976][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.270180][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.279789][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.289997][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.379970][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.397410][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.414251][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.427250][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.442924][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.472380][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.485946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.502885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.520019][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.530264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.539582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.549213][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.556683][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.585724][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.598274][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.612488][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.621667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.630361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.639927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.648834][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.656065][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.664137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.674244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.698087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.708324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.747202][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.754062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.763060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.772811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.781629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.791484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.808179][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.823067][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.836270][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.863176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.872707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.888308][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.925986][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.941945][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.949669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.957819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.972560][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.020484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.031315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.049311][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.056563][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.065640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.074412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.082764][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.090071][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.098312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.107963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.138025][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.147116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.175282][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.187634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.198232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.208339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.217763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.226794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.235334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.243584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.252669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.262490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.270856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.279962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.301538][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.312373][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.343713][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.366380][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.377183][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.389709][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.423075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.433026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.443190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.452627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.481286][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.497449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.513230][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.520488][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.536230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.545261][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.554014][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.561130][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.569472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.578625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.596582][ T4189] device veth0_vlan entered promiscuous mode [ 66.627346][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.634239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.642646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.651879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.660217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.669668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.679617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.688404][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.695802][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.703705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.712878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.722330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.731540][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.738949][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.746982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.757544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.766378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.776329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.785270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.815150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.826179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.842120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.851295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.860730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.869121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.876674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.885077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.893632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.912061][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.923588][ T4189] device veth1_vlan entered promiscuous mode [ 66.936824][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.947086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.957434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.967627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.976744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.985223][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 66.990427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.991378][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 66.999372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.005241][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 67.016340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.019213][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 67.032038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.040372][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 67.066057][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.082309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.092760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.108500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.117916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.127396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.146500][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.153606][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.162341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.171623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.180383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.190329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.199337][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.206548][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.216403][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.248373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.257788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.268067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.280167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.291107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.330521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.346720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.363740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.373533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.389479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.402420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.412379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.429518][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.439075][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.455810][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.487743][ T4196] device veth0_vlan entered promiscuous mode [ 67.503475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.514263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.524477][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.533310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.544243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.553904][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.566115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.573686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.586904][ T4189] device veth0_macvtap entered promiscuous mode [ 67.602458][ T4196] device veth1_vlan entered promiscuous mode [ 67.619503][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.639047][ T4189] device veth1_macvtap entered promiscuous mode [ 67.674502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.682777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.698145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.708210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.717724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.732913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.746494][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.765647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.784800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.810691][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.826176][ T4196] device veth0_macvtap entered promiscuous mode [ 67.846809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.860624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.871285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.886037][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.907825][ T4196] device veth1_macvtap entered promiscuous mode [ 67.921334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.930566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.940174][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.966930][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.984417][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.993277][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.009683][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.029884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.040951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.050277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.059118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.073981][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.085699][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.097165][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.124066][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.133716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.145883][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.156946][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.170091][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.182890][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.207488][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.216601][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.226033][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.235369][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.247195][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.256352][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.265784][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.275229][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.302308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.312370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.321839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.330193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.357390][ T4188] device veth0_vlan entered promiscuous mode [ 68.378943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.397137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.413500][ T4199] device veth0_vlan entered promiscuous mode [ 68.449786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.459083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.472899][ T4199] device veth1_vlan entered promiscuous mode [ 68.481803][ T4188] device veth1_vlan entered promiscuous mode [ 68.502394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.514961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.523303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.532176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.540908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.557034][ T4194] device veth0_vlan entered promiscuous mode [ 68.564092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.573214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.581323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.630305][ T4194] device veth1_vlan entered promiscuous mode [ 68.643944][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.652076][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.688567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.697738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.706944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.723213][ T4188] device veth0_macvtap entered promiscuous mode [ 68.750100][ T4199] device veth0_macvtap entered promiscuous mode [ 68.765279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.774031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.783213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.794147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.803617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.812682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.822917][ T4188] device veth1_macvtap entered promiscuous mode [ 68.840366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.849107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.859077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.872034][ T4199] device veth1_macvtap entered promiscuous mode [ 68.889080][ T4194] device veth0_macvtap entered promiscuous mode [ 68.916646][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.931415][ T4194] device veth1_macvtap entered promiscuous mode [ 68.932515][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.955985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.966519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.977248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.988293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.999829][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.011000][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.011284][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.021993][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.034690][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.040606][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.059729][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.065138][ T4238] Bluetooth: hci1: command 0x040f tx timeout [ 69.069849][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.078624][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 69.085518][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.089944][ T4238] Bluetooth: hci2: command 0x040f tx timeout [ 69.101729][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.111681][ T4238] Bluetooth: hci3: command 0x040f tx timeout [ 69.117699][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.123178][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 69.133320][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.151315][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.162847][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.185969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.193838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.203228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.212838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.222652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.235264][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.246266][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.256861][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.268060][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.280560][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.289130][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.300005][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.310565][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.321148][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.331325][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.342381][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.354157][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.369745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.379467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.391604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.403584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.428211][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.434416][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.442271][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.460002][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465940][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.470612][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.490508][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.500430][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.509820][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.518739][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.534081][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.548310][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.558299][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.571569][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.581737][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.592717][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.603081][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.614060][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.626355][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.637849][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.648609][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.659157][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.671554][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.705955][ T4268] QAT: Device 253 not found [ 69.712827][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.724642][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.734733][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.746007][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.757881][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.766812][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.783133][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.793794][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.811675][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.825547][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.853031][ T4270] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.868926][ T4270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.907859][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.921198][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.930123][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.942527][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.557844][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.564606][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.357973][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.368461][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.405549][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 72.422872][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.430856][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.431359][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 72.431439][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 72.431493][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 72.461603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.480629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.545141][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 72.608128][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.652027][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.715153][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.746766][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.786086][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.799164][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.821827][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.841299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.876026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.935123][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.972277][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.054137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.232862][ T4291] process 'syz.4.5' launched './file2' with NULL argv: empty string added [ 73.531518][ T4299] fuse: Bad value for 'rootmode' [ 74.278355][ T4307] netlink: 'syz.4.9': attribute type 1 has an invalid length. [ 74.495661][ T4309] ======================================================= [ 74.495661][ T4309] WARNING: The mand mount option has been deprecated and [ 74.495661][ T4309] and is ignored by this kernel. Remove the mand [ 74.495661][ T4309] option from the mount to silence this warning. [ 74.495661][ T4309] ======================================================= [ 74.588852][ T26] audit: type=1804 audit(1778220490.034:2): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.12" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 74.644388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.664379][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.674359][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.849801][ T4319] binder: 4315:4319 ioctl c0306201 200000000080 returned -14 [ 74.884350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.894381][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 74.904355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.914353][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.924350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.934348][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.944350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.094309][ C0] sched: RT throttling activated [ 76.127188][ T4319] binder: 4315:4319 ioctl c0306201 2000000003c0 returned -14 [ 76.380632][ T4327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.773626][ T4344] device syzkaller0 entered promiscuous mode [ 77.998117][ T4354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21'. [ 78.436066][ T4353] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 78.442941][ T4353] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.625475][ T4353] vhci_hcd vhci_hcd.0: Device attached [ 78.844867][ T4234] vhci_hcd: vhci_device speed not set [ 78.914433][ T4234] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 78.983883][ T4371] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 79.254667][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.278757][ T4361] vhci_hcd: connection reset by peer [ 79.338638][ T4335] vhci_hcd: stop threads [ 79.343549][ T4335] vhci_hcd: release socket [ 79.376134][ T4335] vhci_hcd: disconnect device [ 79.544445][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 79.725040][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.725148][ T1111] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 79.725175][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.735325][ T1111] usb 5-1: config 0 descriptor?? [ 81.031915][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.040308][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.591080][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.668912][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.823343][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 82.984590][ T4233] usb 5-1: USB disconnect, device number 2 [ 83.012256][ T4384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 84.229352][ T4234] vhci_hcd: vhci_device speed not set [ 85.927011][ T4365] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.938559][ T4365] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.948028][ T4365] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.959786][ T4365] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.104106][ T4365] syz.1.22 (4365) used greatest stack depth: 20304 bytes left [ 86.141331][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 86.916283][ T1334] cfg80211: failed to load regulatory.db [ 88.271505][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 88.587642][ T4428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.705052][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 88.783667][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 88.980375][ T4436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.062477][ T4436] bond1: (slave bond0): making interface the new active one [ 89.194532][ T4380] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.203753][ T4436] bond1: (slave bond0): Enslaving as an active interface with an up link [ 89.232462][ T4436] syz.0.39 (4436) used greatest stack depth: 19280 bytes left [ 89.233532][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 89.378855][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 89.457951][ T4380] usb 2-1: Using ep0 maxpacket: 16 [ 89.706505][ T4380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.717278][ T4380] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 89.731273][ T4380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.742579][ T4380] usb 2-1: config 0 descriptor?? [ 89.761080][ T4207] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 89.786690][ T4380] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 90.568256][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 90.752893][ T4235] usb 2-1: USB disconnect, device number 2 [ 93.630154][ T4474] Bluetooth: hci5: Frame reassembly failed (-90) [ 93.969417][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 94.106126][ T4484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.382582][ T4493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.527605][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 94.544453][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 94.917932][ T4489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.950344][ T4489] bond1: (slave bond0): making interface the new active one [ 94.999242][ T4489] bond1: (slave bond0): Enslaving as an active interface with an up link [ 95.026136][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 95.331634][ T4507] input: syz1 as /devices/virtual/input/input5 [ 95.704455][ T4237] Bluetooth: hci5: command 0x1003 tx timeout [ 95.710626][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 96.124451][ T4380] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.384465][ T4380] usb 1-1: Using ep0 maxpacket: 8 [ 97.214603][ T4380] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.233279][ T4380] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.243785][ T4380] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.254050][ T4380] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.264422][ T4380] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.277939][ T4380] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.294452][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.481488][ T4333] Bluetooth: hci2: command 0x0406 tx timeout [ 97.514622][ T1334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.574487][ T4380] usb 1-1: usb_control_msg returned -32 [ 97.580311][ T4380] usbtmc 1-1:16.0: can't read capabilities [ 97.793217][ T4380] usb 1-1: USB disconnect, device number 2 [ 97.793768][ T4333] Bluetooth: hci5: command 0x1001 tx timeout [ 97.806808][ T1334] usb 5-1: Using ep0 maxpacket: 8 [ 97.840315][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 97.924575][ T1334] usb 5-1: config 0 has no interfaces? [ 98.112470][ T1334] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 98.141155][ T1334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.149261][ T1334] usb 5-1: Product: syz [ 98.153447][ T1334] usb 5-1: Manufacturer: syz [ 98.180159][ T1334] usb 5-1: SerialNumber: syz [ 98.211376][ T1334] usb 5-1: config 0 descriptor?? [ 98.279110][ T4526] binder: Unknown parameter '' [ 98.440984][ T4529] device syzkaller0 entered promiscuous mode [ 98.575789][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 98.615689][ T4533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.639970][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 98.661066][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 99.039849][ T4533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.321427][ T4533] bond1: (slave bond0): making interface the new active one [ 99.572947][ T4533] bond1: (slave bond0): Enslaving as an active interface with an up link [ 99.622733][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 99.874475][ T1334] Bluetooth: hci5: command 0x1009 tx timeout [ 101.072346][ T4538] Zero length message leads to an empty skb [ 101.086754][ T4237] usb 5-1: USB disconnect, device number 3 [ 101.152752][ T4538] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.911489][ T4538] [ 101.914346][ T4538] ============================= [ 101.919240][ T4538] WARNING: suspicious RCU usage [ 101.924226][ T4538] syzkaller #0 Not tainted [ 101.928723][ T4538] ----------------------------- [ 101.933586][ T4538] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 101.942017][ T4538] [ 101.942017][ T4538] other info that might help us debug this: [ 101.942017][ T4538] [ 101.952273][ T4538] [ 101.952273][ T4538] rcu_scheduler_active = 2, debug_locks = 1 [ 101.960726][ T4538] 7 locks held by syz.0.74/4538: [ 101.965860][ T4538] #0: ffff88801b1a2e20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_setsockopt+0x1ec/0xf80 [ 101.975805][ T4538] #1: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 101.985307][ T4538] #2: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 101.994922][ T4538] #3: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 102.004588][ T4538] #4: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 102.014465][ T4538] #5: ffff88805ff2f908 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 102.024213][ T4538] #6: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 102.033771][ T4538] [ 102.033771][ T4538] stack backtrace: [ 102.039766][ T4538] CPU: 1 PID: 4538 Comm: syz.0.74 Not tainted syzkaller #0 [ 102.046961][ T4538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.057105][ T4538] Call Trace: [ 102.060483][ T4538] [ 102.063501][ T4538] dump_stack_lvl+0x188/0x250 [ 102.068180][ T4538] ? show_regs_print_info+0x20/0x20 [ 102.073481][ T4538] ? lockdep_rcu_suspicious+0x110/0x180 [ 102.079037][ T4538] qdisc_lookup+0xa6/0x650 [ 102.083453][ T4538] qdisc_tree_reduce_backlog+0x190/0x430 [ 102.089110][ T4538] cake_enqueue+0x3fe1/0x7fc0 [ 102.093888][ T4538] ? mark_lock+0x94/0x320 [ 102.098206][ T4538] ? INET_ECN_set_ce+0x950/0x950 [ 102.103312][ T4538] ? __lock_acquire+0x13bc/0x7d10 [ 102.108334][ T4538] ? mark_lock+0x94/0x320 [ 102.112670][ T4538] ? verify_lock_unused+0x140/0x140 [ 102.117861][ T4538] ? rcu_lock_release+0x5/0x20 [ 102.122643][ T4538] tbf_enqueue+0x224/0x6e0 [ 102.127087][ T4538] ? __rwlock_init+0x140/0x140 [ 102.131846][ T4538] dev_qdisc_enqueue+0x48/0x210 [ 102.136693][ T4538] __dev_queue_xmit+0xc25/0x2f80 [ 102.141870][ T4538] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 102.148038][ T4538] ? dev_queue_xmit+0x20/0x20 [ 102.152722][ T4538] ? mark_lock+0x94/0x320 [ 102.157067][ T4538] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 102.163317][ T4538] ? lock_chain_count+0x20/0x20 [ 102.168296][ T4538] ? rcu_lock_acquire+0x30/0x30 [ 102.173270][ T4538] ? ip_finish_output2+0x8f7/0x10a0 [ 102.178461][ T4538] ? ip_finish_output2+0xaba/0x10a0 [ 102.183743][ T4538] ip_finish_output2+0xc87/0x10a0 [ 102.188765][ T4538] ? __ip_local_out+0x5e0/0x5e0 [ 102.193607][ T4538] ? ip_fragment+0x210/0x210 [ 102.198194][ T4538] ? ip_mc_finish_output+0x250/0x250 [ 102.203568][ T4538] ? ip_skb_dst_mtu+0x584/0x9b0 [ 102.208506][ T4538] ? ip_finish_output+0x3e8/0x4b0 [ 102.213650][ T4538] ip_output+0x2c0/0x3e0 [ 102.217892][ T4538] __ip_queue_xmit+0x11c1/0x1c00 [ 102.222821][ T4538] ? sctp_v4_xmit+0x373/0xdf0 [ 102.227502][ T4538] sctp_packet_transmit+0x239c/0x2910 [ 102.232899][ T4538] sctp_outq_flush+0xe62/0x3100 [ 102.237740][ T4538] ? kmem_cache_alloc+0x133/0x290 [ 102.242754][ T4538] ? sctp_auth_send_cid+0x65/0x240 [ 102.247867][ T4538] ? memcpy+0x3c/0x60 [ 102.251842][ T4538] ? sctp_make_heartbeat+0x5ad/0x810 [ 102.257292][ T4538] ? sctp_outq_tail+0x8a0/0x8a0 [ 102.262143][ T4538] ? sctp_outq_tail+0x600/0x8a0 [ 102.267114][ T4538] ? sctp_do_8_2_transport_strike+0x43c/0x840 [ 102.273367][ T4538] ? sctp_outq_uncork+0x49/0xa0 [ 102.278420][ T4538] sctp_do_sm+0x4ee2/0x55f0 [ 102.282947][ T4538] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 102.288929][ T4538] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 102.294932][ T4538] ? __mod_timer+0x91e/0xd00 [ 102.299568][ T4538] sctp_primitive_REQUESTHEARTBEAT+0x94/0xc0 [ 102.305551][ T4538] sctp_apply_peer_addr_params+0xde/0x1870 [ 102.311357][ T4538] sctp_setsockopt_peer_addr_params+0x673/0x940 [ 102.317610][ T4538] sctp_setsockopt+0x4cd/0xf80 [ 102.322378][ T4538] ? sock_common_recvmsg+0x1c0/0x1c0 [ 102.327658][ T4538] __sys_setsockopt+0x2bf/0x3d0 [ 102.332509][ T4538] __x64_sys_setsockopt+0xb1/0xc0 [ 102.337537][ T4538] do_syscall_64+0x4c/0xa0 [ 102.341955][ T4538] ? clear_bhb_loop+0x30/0x80 [ 102.346636][ T4538] ? clear_bhb_loop+0x30/0x80 [ 102.351307][ T4538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.357249][ T4538] RIP: 0033:0x7f4998205dd9 [ 102.361669][ T4538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.381455][ T4538] RSP: 002b:00007f499645f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.389894][ T4538] RAX: ffffffffffffffda RBX: 00007f499847efa0 RCX: 00007f4998205dd9 [ 102.397861][ T4538] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 102.405919][ T4538] RBP: 00007f499829bd69 R08: 000000000000009c R09: 0000000000000000 [ 102.413889][ T4538] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000000 [ 102.421851][ T4538] R13: 00007f499847f038 R14: 00007f499847efa0 R15: 00007ffe37e519f8 [ 102.429827][ T4538]