last executing test programs: 1m43.074233629s ago: executing program 3 (id=8): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xf5a, 0x2000) mount$9p_fd(0x0, 0x0, 0x0, 0x80080, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000003c0)="b8040000000f23d80f21f835400000100f23f8b9800000c00f3235000800000f30360f01d1b9800000c00f3235010000000f30f3818700980000ca260000f3640f07c4c235af223e0f79872b5fd97a0fc7bcb80070000066ba4300b8ffa50000ef", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m42.44908606s ago: executing program 3 (id=11): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 1m41.820858523s ago: executing program 3 (id=16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200800, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, 0x0, 0x3) 1m40.790066152s ago: executing program 3 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000240)='./file1\x00', 0x24) mkdir(0x0, 0x100) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file1\x00') 1m40.649569896s ago: executing program 3 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, 0x0, 0x0, 0xffffffff, 0x10, 0x24, 0x60, 0x8}) 1m40.183925675s ago: executing program 3 (id=37): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200800, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, 0x0, 0x3) 1m40.053826137s ago: executing program 32 (id=37): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200800, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, 0x0, 0x3) 5.13894296s ago: executing program 4 (id=533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x4}, 0x0, 0x34ff, 0x2, 0x1, 0xfe}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x80, "6fc3070b4f8f7330202b93875f2d67a6a77871db"}}]}, 0x150}}, 0x804) 4.653544889s ago: executing program 0 (id=541): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.905140204s ago: executing program 4 (id=544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe0, 0xb}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 3.785328376s ago: executing program 1 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x31, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000004e00)=""/4109, 0x100d}], 0x3}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000080)=""/222, 0xde}, {&(0x7f0000001a00)=""/4106, 0x100a}, {&(0x7f0000002e00)=""/4093, 0xffd}, {&(0x7f0000000000)=""/85, 0x59}], 0x5}, 0xb1}, {{0x0, 0x0, 0x0}, 0x4a}], 0x8, 0x40000000, 0x0) 2.660464618s ago: executing program 1 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0xff, 0x3}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="b003846833bdd790c2", 0x9}}, 0xee) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="00c7662fcf1f6e36b7", 0x9}], 0x1}, 0x4c815) 2.60525716s ago: executing program 4 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b7}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 2.604710949s ago: executing program 0 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10014}, 0x80) 2.460595712s ago: executing program 0 (id=550): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(r0) 2.460376972s ago: executing program 4 (id=551): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) 2.182670827s ago: executing program 2 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002c00128008000100687372002000028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 1.984424062s ago: executing program 5 (id=558): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) 1.979825302s ago: executing program 2 (id=559): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) ioctl$TCSETSF(r3, 0x5404, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.908465893s ago: executing program 4 (id=560): syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000403a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000006009000000001100fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000050000000000"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.815105945s ago: executing program 5 (id=561): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000030a01010000000000000000010000000900010073797a300000000068000000060a010400000000000000000104000008000b40000000004c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000140001800c000100626974776973650004000280140000001100010000000000000000000700000a39467fa9feb2effae3adce2e0db4e69879a993"], 0xd0}}, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 1.724792557s ago: executing program 5 (id=562): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffffff9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x0, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r5, &(0x7f0000000000)=""/42, 0x2a) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a0108000000000000000005000006080002400000000308000240000000"], 0x4c}}, 0xc050) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) 1.644506068s ago: executing program 4 (id=563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffffff9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x0, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) getdents64(r4, &(0x7f0000000080)=""/147, 0x93) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a0108000000000000000005000006080002400000000308000240000000"], 0x4c}}, 0xc050) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) 1.635082398s ago: executing program 0 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) close(0x3) 1.085955559s ago: executing program 1 (id=565): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x1a, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) 1.03076736s ago: executing program 5 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4, @ANYRES16], 0x4c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 788.735815ms ago: executing program 2 (id=567): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 664.583347ms ago: executing program 0 (id=568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in6=@loopback, 0x4c21, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x37f, 0xfffffffffffffffd, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 664.446687ms ago: executing program 1 (id=569): socket(0x1, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 541.13526ms ago: executing program 2 (id=570): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) 398.234342ms ago: executing program 1 (id=571): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000108000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 220.618806ms ago: executing program 2 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000001480)={0xffffffffffffffff, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004014) 196.297936ms ago: executing program 0 (id=573): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 84.565439ms ago: executing program 5 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x106}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001f40)=""/185, 0xb9}, {&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000740)=""/251, 0xfb}], 0x7}, 0x7ffffffd}], 0x4, 0x400060a2, 0x0) 12.46035ms ago: executing program 2 (id=575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000740)="8bf9c333442d145a6a694ddaf5187a9516cf6edf46a03edb22e9", 0x1a}], 0x2) 7.41579ms ago: executing program 5 (id=576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffffff9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x0, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r5, &(0x7f0000000000)=""/42, 0x2a) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a0108000000000000000005000006080002400000000308000240000000"], 0x4c}}, 0xc050) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) 0s ago: executing program 1 (id=577): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) ioctl$TCSETSF(r3, 0x5404, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. [ 54.300981][ T4172] cgroup: Unknown subsys name 'net' [ 54.432339][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.925036][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.409728][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.420532][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.477339][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 57.501937][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 57.556250][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 57.624748][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.632585][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.641423][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.669468][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.676830][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.684696][ T4185] device bridge_slave_0 entered promiscuous mode [ 57.692407][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.699870][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.707823][ T4184] device bridge_slave_1 entered promiscuous mode [ 57.715724][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.723207][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.731091][ T4190] device bridge_slave_0 entered promiscuous mode [ 57.744024][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.751913][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.759847][ T4185] device bridge_slave_1 entered promiscuous mode [ 57.774899][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.782027][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.790526][ T4190] device bridge_slave_1 entered promiscuous mode [ 57.855175][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.873588][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.881535][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.890202][ T4182] device bridge_slave_0 entered promiscuous mode [ 57.905215][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.916353][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.935974][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.945826][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.953260][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.961128][ T4182] device bridge_slave_1 entered promiscuous mode [ 57.968251][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.975483][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.983484][ T4183] device bridge_slave_0 entered promiscuous mode [ 57.992340][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.012072][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.034665][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.042079][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.050096][ T4183] device bridge_slave_1 entered promiscuous mode [ 58.068075][ T4184] team0: Port device team_slave_0 added [ 58.103037][ T4184] team0: Port device team_slave_1 added [ 58.111155][ T4190] team0: Port device team_slave_0 added [ 58.119331][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.137173][ T4185] team0: Port device team_slave_0 added [ 58.150689][ T4190] team0: Port device team_slave_1 added [ 58.165483][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.176817][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.195440][ T4185] team0: Port device team_slave_1 added [ 58.208630][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.215681][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.242389][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.255424][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.293937][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.301469][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.327884][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.353858][ T4182] team0: Port device team_slave_0 added [ 58.368632][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.375603][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.402134][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.419864][ T4183] team0: Port device team_slave_0 added [ 58.427285][ T4182] team0: Port device team_slave_1 added [ 58.433917][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.441171][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.467543][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.479496][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.486462][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.512887][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.536276][ T4183] team0: Port device team_slave_1 added [ 58.557638][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.564621][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.596482][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.652284][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.659423][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.666559][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.674279][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.700656][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.712363][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.719686][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.745736][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.758072][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.765253][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.791812][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.813982][ T4190] device hsr_slave_0 entered promiscuous mode [ 58.821624][ T4190] device hsr_slave_1 entered promiscuous mode [ 58.828779][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.836924][ T4190] Cannot create hsr debugfs directory [ 58.843241][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.850685][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.876921][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.922604][ T4185] device hsr_slave_0 entered promiscuous mode [ 58.929385][ T4185] device hsr_slave_1 entered promiscuous mode [ 58.936006][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.943643][ T4185] Cannot create hsr debugfs directory [ 59.025146][ T4182] device hsr_slave_0 entered promiscuous mode [ 59.032746][ T4182] device hsr_slave_1 entered promiscuous mode [ 59.039658][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.047564][ T4182] Cannot create hsr debugfs directory [ 59.057555][ T4189] Bluetooth: hci2: command 0x0409 tx timeout [ 59.058228][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 59.064172][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 59.070744][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 59.070854][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 59.111399][ T4183] device hsr_slave_0 entered promiscuous mode [ 59.118171][ T4183] device hsr_slave_1 entered promiscuous mode [ 59.125028][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.133153][ T4183] Cannot create hsr debugfs directory [ 59.396291][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.408014][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.422163][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.431493][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.473048][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.491480][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.502013][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.512996][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.587499][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.599553][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.628458][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.641484][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.715721][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.729652][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.756271][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.767849][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.781167][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.797364][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.810524][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.817828][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.828556][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.836518][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.853954][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.864510][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.874990][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.882289][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.893054][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.901986][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.911756][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.923531][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.933938][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.942896][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.950191][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.981565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.994060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.003404][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.010597][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.021432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.030483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.053942][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.069754][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.080726][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.093326][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.102437][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.111836][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.119246][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.129589][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.140716][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.157892][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.177242][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.187165][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.194942][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.203285][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.212455][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.221344][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.231274][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.240943][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.252380][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.261441][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.270390][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.297546][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.305533][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.315399][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.324365][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.333597][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.342706][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.351795][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.358922][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.374496][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.385948][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.422066][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.431551][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.440510][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.449909][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.459022][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.468208][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.476509][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.486123][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.495251][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.504834][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.511988][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.545872][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.565613][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.585164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.597579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.606538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.617906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.626446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.635070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.645462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.654724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.664744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.696374][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.726726][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.754767][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.767539][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.805012][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.818956][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.831173][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.861958][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.870570][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.888287][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.904725][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.933081][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.975640][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.994586][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.003948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.017437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.025921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.035689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.043863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.053264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.069498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.077502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.086036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.095617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.104571][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.112073][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.121790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.130395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.139008][ T4248] Bluetooth: hci3: command 0x041b tx timeout [ 61.145321][ T4248] Bluetooth: hci0: command 0x041b tx timeout [ 61.146093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.151668][ T4248] Bluetooth: hci4: command 0x041b tx timeout [ 61.151701][ T4248] Bluetooth: hci1: command 0x041b tx timeout [ 61.151729][ T4248] Bluetooth: hci2: command 0x041b tx timeout [ 61.179433][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.186509][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.200874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.219789][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.232451][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.242951][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.251900][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.259136][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.273483][ T4184] device veth0_vlan entered promiscuous mode [ 61.288870][ T4184] device veth1_vlan entered promiscuous mode [ 61.302184][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.311048][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.320560][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.329651][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.339626][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.349127][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.356531][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.366680][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.374922][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.383780][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.392038][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.405591][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.415005][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.436124][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.443989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.460505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.518649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.531850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.541238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.551673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.560690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.570932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.579689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.618870][ T4184] device veth0_macvtap entered promiscuous mode [ 61.636103][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.648015][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.664560][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.673916][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.684427][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.692752][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.703052][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.711844][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.722655][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.731479][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.740411][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.749925][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.760319][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.769555][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.781520][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.790490][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.803510][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.814686][ T4184] device veth1_macvtap entered promiscuous mode [ 61.824513][ T4190] device veth0_vlan entered promiscuous mode [ 61.845518][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.864191][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.877987][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.885977][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.894658][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.903908][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.912564][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.921279][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.942835][ T4190] device veth1_vlan entered promiscuous mode [ 61.975155][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.994676][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.004733][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.022667][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.032394][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.041729][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.051934][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.082819][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.110955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.126101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.150777][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.162060][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.171568][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.180683][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.198742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.208265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.226427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.235282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.249285][ T4182] device veth0_vlan entered promiscuous mode [ 62.255974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.266151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.275633][ T4190] device veth0_macvtap entered promiscuous mode [ 62.304911][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.313276][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.322267][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.333227][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.347158][ T4182] device veth1_vlan entered promiscuous mode [ 62.360311][ T4190] device veth1_macvtap entered promiscuous mode [ 62.382560][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.391606][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.400806][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.409680][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.433450][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.444604][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.460417][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.475581][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.488765][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.498495][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.508549][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.525017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.537136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.546029][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.558533][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.570184][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.610712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.621517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.631983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.641750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.650707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.659098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.671739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.681082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.692296][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.701424][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.710268][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.719894][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.744032][ T4185] device veth0_vlan entered promiscuous mode [ 62.758755][ T4182] device veth0_macvtap entered promiscuous mode [ 62.770188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.780239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.789293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.825720][ T4182] device veth1_macvtap entered promiscuous mode [ 62.834797][ T4185] device veth1_vlan entered promiscuous mode [ 62.894459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.904524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.913393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.923519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.931922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.940717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.948860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.962596][ T4183] device veth0_vlan entered promiscuous mode [ 62.971584][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.983711][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.993884][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.004742][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.015946][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.040620][ T4183] device veth1_vlan entered promiscuous mode [ 63.048552][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.062743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.063403][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.075168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.088633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.097628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.107318][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.118047][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.128235][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.141233][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.153213][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.177134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.185790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.195192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.203924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.217012][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 63.226971][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.227337][ T1336] Bluetooth: hci3: command 0x040f tx timeout [ 63.235183][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.250646][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 63.253205][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.260993][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 63.272406][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 63.274315][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.289659][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.298800][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.317785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.329653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.349512][ T4185] device veth0_macvtap entered promiscuous mode [ 63.367175][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.374311][ T4183] device veth0_macvtap entered promiscuous mode [ 63.385554][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.403968][ T4185] device veth1_macvtap entered promiscuous mode [ 63.411732][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.422178][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.434004][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.443835][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.452698][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.462697][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.472993][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.474198][ T4183] device veth1_macvtap entered promiscuous mode [ 63.487172][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.498395][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.509380][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.577978][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.604886][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.625914][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.648452][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.664818][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.677845][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.708174][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.724675][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.743655][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.760901][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.779451][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.803042][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.813764][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.825574][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.847766][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.865464][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.884042][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.893451][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.933564][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.946584][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.955911][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.965816][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.995895][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.011619][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.011710][ T4295] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 64.022981][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.031490][ T4295] netlink: 201344 bytes leftover after parsing attributes in process `syz.3.4'. [ 64.046133][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.066416][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.083495][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.093765][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.113357][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.125471][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.150870][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.160881][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.170592][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.171069][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.190576][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.214349][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.225232][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.242535][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.255356][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.271882][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.282561][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.299610][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.321429][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.341454][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.356494][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.374127][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.407435][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.416300][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.424284][ T4303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.432661][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.544802][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.606438][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.641449][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.695684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.716347][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.731464][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.766289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.916729][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.924781][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.943381][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.965501][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.989779][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.047838][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.111575][ T4311] netlink: 'syz.3.11': attribute type 27 has an invalid length. [ 65.188045][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.196076][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.215899][ T4311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.311561][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 65.323343][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 65.330165][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 65.332883][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.336491][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 65.406252][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.447078][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 65.499023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.669968][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 67.096935][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.356738][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 67.532713][ T21] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.553880][ T21] usb 2-1: config 0 has no interface number 0 [ 67.577837][ T21] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.615072][ T21] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.639885][ T21] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 67.675133][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.717606][ T21] usb 2-1: config 0 descriptor?? [ 68.266735][ T4401] chnl_net:caif_netlink_parms(): no params data found [ 68.357180][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.364580][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.381492][ T4401] device bridge_slave_0 entered promiscuous mode [ 68.395132][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.409125][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.423533][ T21] uclogic 0003:28BD:0071.0001: failed retrieving string descriptor #100: -71 [ 68.437102][ T4401] device bridge_slave_1 entered promiscuous mode [ 68.444281][ T21] uclogic 0003:28BD:0071.0001: failed retrieving pen parameters: -71 [ 68.470297][ T21] uclogic 0003:28BD:0071.0001: pen probing failed: -71 [ 68.486361][ T21] uclogic 0003:28BD:0071.0001: failed probing parameters: -71 [ 68.496931][ T21] uclogic: probe of 0003:28BD:0071.0001 failed with error -71 [ 68.534094][ T21] usb 2-1: USB disconnect, device number 2 [ 68.666390][ T4401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.686504][ T4401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.778152][ T4401] team0: Port device team_slave_0 added [ 68.800860][ T4401] team0: Port device team_slave_1 added [ 68.873725][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.882244][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.910076][ T4401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.961135][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.016713][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.092452][ T4401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.271198][ T4401] device hsr_slave_0 entered promiscuous mode [ 69.312596][ T4401] device hsr_slave_1 entered promiscuous mode [ 69.360186][ T4401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.387678][ T4401] Cannot create hsr debugfs directory [ 69.777023][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 69.815915][ T4401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.858182][ T4401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.859702][ T4453] input: syz1 as /devices/virtual/input/input5 [ 69.889752][ T4401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.939922][ T4401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.071396][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.178278][ T4255] Bluetooth: hci5: command 0x1003 tx timeout [ 70.195520][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 70.282462][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.400792][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.507396][ T4401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.552885][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.602043][ T4469] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 70.616410][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.626393][ T4469] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 70.642785][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.658067][ T4401] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.722991][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.764115][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.786009][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.793380][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.854320][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.905505][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.950954][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.984063][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.991248][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.048375][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.091761][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.149001][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.172071][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.208029][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.271349][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.301324][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.356894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.365418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.381307][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388002][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.422692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.445843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.529998][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.910850][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 72.256932][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 72.375664][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 72.662905][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.675746][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.679897][ T4517] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 72.703515][ T4517] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 72.722918][ T4401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.155335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.166129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.220598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.256515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.275194][ T4401] device veth0_vlan entered promiscuous mode [ 73.301617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.311933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.350160][ T4401] device veth1_vlan entered promiscuous mode [ 73.379975][ T154] device hsr_slave_0 left promiscuous mode [ 73.412330][ T154] device hsr_slave_1 left promiscuous mode [ 73.451034][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.466886][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.496942][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.504442][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.531029][ T154] device bridge_slave_1 left promiscuous mode [ 73.544116][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.590711][ T154] device bridge_slave_0 left promiscuous mode [ 73.600941][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 73.618263][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.662356][ T154] device veth1_macvtap left promiscuous mode [ 73.669480][ T154] device veth0_macvtap left promiscuous mode [ 73.675885][ T154] device veth1_vlan left promiscuous mode [ 73.682134][ T154] device veth0_vlan left promiscuous mode [ 73.948191][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 73.957294][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.966646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.975538][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 73.984628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 73.993857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 74.002853][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 74.011834][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.021016][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.030014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.069512][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 74.788807][ T1110] Bluetooth: hci5: command 0x1009 tx timeout [ 74.973392][ T154] team0 (unregistering): Port device team_slave_1 removed [ 75.054516][ T154] team0 (unregistering): Port device team_slave_0 removed [ 75.189893][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.219840][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.943652][ T4248] Bluetooth: hci6: command 0x1003 tx timeout [ 75.960504][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 76.073706][ T154] bond0 (unregistering): Released all slaves [ 76.098221][ T4248] Bluetooth: hci4: command 0x0419 tx timeout [ 76.186041][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.557501][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.696367][ T4401] device veth0_macvtap entered promiscuous mode [ 76.719693][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.750203][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.775162][ T4401] device veth1_macvtap entered promiscuous mode [ 76.795900][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.832589][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.897958][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.943697][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.969966][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.006951][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.023189][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.044273][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.078982][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.104995][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.116922][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.135900][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.154208][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.173361][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.199404][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.224205][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.238761][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.254337][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.288553][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.306645][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.331327][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.396810][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.407163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.432593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.477782][ T4401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.496358][ T4401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.514442][ T4401] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.542692][ T4401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.738463][ T4511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.766943][ T4511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.792150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.870662][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.882421][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.924586][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.017002][ T4255] Bluetooth: hci6: command 0x1001 tx timeout [ 78.023344][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 78.528130][ T4619] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 78.557824][ T4619] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 80.096914][ T4255] Bluetooth: hci6: command 0x1009 tx timeout [ 80.706727][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.161508][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.476576][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 81.486276][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.574091][ T13] usb 3-1: config 0 descriptor?? [ 81.622437][ T23] cfg80211: failed to load regulatory.db [ 82.085929][ T13] hid-generic 0003:05AC:027A.0002: hidraw0: USB HID v5.01 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 82.307422][ T23] usb 3-1: USB disconnect, device number 2 [ 84.433355][ T4746] usb usb8: usbfs: process 4746 (syz.0.111) did not claim interface 0 before use [ 85.941043][ T4255] Bluetooth: hci5: command 0x1003 tx timeout [ 85.947437][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 85.958698][ T4772] Zero length message leads to an empty skb [ 86.135416][ T4777] kvm [4776]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000008 data 0x0 [ 88.017364][ T4240] Bluetooth: hci5: command 0x1001 tx timeout [ 88.156514][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 89.948731][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.450631][ T4240] Bluetooth: hci5: command 0x1009 tx timeout [ 90.578918][ T13] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 90.610127][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.664787][ T13] usb 1-1: Product: syz [ 90.711511][ T13] usb 1-1: Manufacturer: syz [ 90.716197][ T13] usb 1-1: SerialNumber: syz [ 92.064674][ T13] rtl8150 1-1:1.0: eth5: rtl8150 is detected [ 92.297686][ T13] usb 1-1: USB disconnect, device number 2 [ 92.346767][ T1336] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 94.306856][ T1336] usb 3-1: not running at top speed; connect to a high speed hub [ 94.465273][ T1336] usb 3-1: config 5 has an invalid interface number: 125 but max is 1 [ 94.491629][ T1336] usb 3-1: config 5 has an invalid interface number: 43 but max is 1 [ 94.532527][ T1336] usb 3-1: config 5 has an invalid descriptor of length 36, skipping remainder of the config [ 94.612330][ T1336] usb 3-1: config 5 has no interface number 0 [ 94.655083][ T1336] usb 3-1: config 5 has no interface number 1 [ 94.704534][ T1336] usb 3-1: config 5 interface 125 has no altsetting 0 [ 94.745589][ T1336] usb 3-1: config 5 interface 43 has no altsetting 0 [ 94.816770][ T1336] usb 3-1: string descriptor 0 read error: -71 [ 94.823104][ T1336] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=91.20 [ 94.887062][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.986792][ T1336] usb 3-1: can't set config #5, error -71 [ 95.074992][ T1336] usb 3-1: USB disconnect, device number 3 [ 95.203491][ T4898] capability: warning: `syz.1.142' uses deprecated v2 capabilities in a way that may be insecure [ 100.668607][ T4247] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 100.956854][ T4247] usb 6-1: Using ep0 maxpacket: 32 [ 101.862642][ T4247] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 101.902097][ T4247] usb 6-1: config 0 has no interface number 0 [ 102.117618][ T4247] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 102.147926][ T4247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.196735][ T4247] usb 6-1: Product: syz [ 102.203728][ T4247] usb 6-1: Manufacturer: syz [ 102.218747][ T4247] usb 6-1: SerialNumber: syz [ 102.257754][ T4999] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 102.262123][ T4247] usb 6-1: config 0 descriptor?? [ 102.294295][ T4999] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 102.331753][ T4247] smsc95xx v2.0.0 [ 102.756935][ T4247] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 102.779615][ T4247] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 103.086843][ T4189] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.286817][ T4247] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 103.307407][ T4247] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 103.465127][ T4247] usb 6-1: USB disconnect, device number 2 [ 103.677062][ T4189] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 103.763465][ T4189] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 104.115071][ T4189] usb 2-1: config 220 has no interface number 2 [ 104.125219][ T4189] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 104.156919][ T4189] usb 2-1: config 220 interface 0 has no altsetting 0 [ 104.174228][ T4189] usb 2-1: config 220 interface 76 has no altsetting 0 [ 104.184517][ T4189] usb 2-1: config 220 interface 1 has no altsetting 0 [ 104.427194][ T4189] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 104.436344][ T4189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.474941][ T4189] usb 2-1: Product: syz [ 104.486723][ T4189] usb 2-1: Manufacturer: syz [ 104.505340][ T4189] usb 2-1: SerialNumber: syz [ 105.001227][ T4189] usb 2-1: selecting invalid altsetting 0 [ 105.152650][ T4189] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 105.323826][ T4189] usb 2-1: No valid video chain found. [ 105.490205][ T4189] usb 2-1: selecting invalid altsetting 0 [ 105.496010][ T4189] usbtest: probe of 2-1:220.1 failed with error -22 [ 105.596983][ T4189] usb 2-1: USB disconnect, device number 3 [ 107.484894][ T5090] netlink: 'syz.0.177': attribute type 4 has an invalid length. [ 107.716837][ T4255] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.068440][ T4255] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 109.259378][ T4255] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.273164][ T4255] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.283401][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.315558][ T4255] usb 5-1: config 0 descriptor?? [ 110.116992][ T4255] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 111.394599][ T23] usb 5-1: USB disconnect, device number 2 [ 113.715339][ T5190] input: syz1 as /devices/virtual/input/input6 [ 114.161140][ T5202] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 114.190408][ T5202] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 115.706745][ T4255] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.846744][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 116.866909][ T4505] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 116.984915][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.029348][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.135223][ T4255] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 117.297481][ T4505] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.410039][ T4505] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.467530][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.669279][ T4505] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.772135][ T4255] usb 1-1: config 0 descriptor?? [ 117.827309][ T4505] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.992787][ T4505] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.020466][ T4505] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.163433][ T4505] usb 3-1: Product: syz [ 118.188058][ T4505] usb 3-1: Manufacturer: syz [ 118.518682][ T4255] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 118.627889][ T4505] cdc_wdm 3-1:1.0: skipping garbage [ 118.633158][ T4505] cdc_wdm 3-1:1.0: skipping garbage [ 118.655558][ T4505] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 118.726836][ T4505] usb 1-1: USB disconnect, device number 3 [ 118.790619][ T5285] fido_id[5285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 118.849800][ T4255] usb 3-1: USB disconnect, device number 4 [ 119.162111][ T5297] binder: 5295:5297 ioctl 400c620e 0 returned -14 [ 119.966903][ T1336] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 120.367653][ T1336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.409327][ T1336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.618811][ T1336] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 120.628898][ T1336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.644318][ T1336] usb 1-1: config 0 descriptor?? [ 121.786913][ T1336] usbhid 1-1:0.0: can't add hid device: -71 [ 121.793222][ T1336] usbhid: probe of 1-1:0.0 failed with error -71 [ 121.856236][ T1336] usb 1-1: USB disconnect, device number 4 [ 121.866753][ T4189] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.038439][ T5358] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 122.058082][ T5358] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 122.266828][ T4189] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.447919][ T4189] usb 3-1: config 204 has an invalid interface number: 223 but max is 0 [ 122.456362][ T4189] usb 3-1: config 204 has no interface number 0 [ 122.486685][ T4189] usb 3-1: config 204 interface 223 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.519801][ T4189] usb 3-1: config 204 interface 223 has no altsetting 0 [ 122.555899][ T26] audit: type=1326 audit(1756946733.806:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.0.243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea7f5ebe9 code=0x0 [ 122.777031][ T4189] usb 3-1: New USB device found, idVendor=0b57, idProduct=5942, bcdDevice=38.7a [ 122.796478][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.123265][ T4189] usb 3-1: Product: syz [ 123.129580][ T4189] usb 3-1: Manufacturer: syz [ 123.134216][ T4189] usb 3-1: SerialNumber: syz [ 123.508948][ T4189] usbhid 3-1:204.223: couldn't find an input interrupt endpoint [ 124.006658][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.052915][ T4189] usb 3-1: USB disconnect, device number 5 [ 124.296736][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 124.536509][ T13] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 124.553704][ T13] usb 5-1: config 0 has no interface number 0 [ 124.563159][ T13] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 124.580066][ T13] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 124.889089][ T4189] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 124.889179][ T13] usb 5-1: config 0 interface 41 has no altsetting 0 [ 124.987591][ T1336] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.032015][ T5441] binder: 5440:5441 unknown command 1074553619 [ 125.051215][ T5441] binder: 5440:5441 ioctl c0306201 200000000780 returned -22 [ 125.117118][ T13] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 125.135421][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.148754][ T13] usb 5-1: Product: syz [ 125.152968][ T13] usb 5-1: Manufacturer: syz [ 125.165286][ T13] usb 5-1: SerialNumber: syz [ 125.205206][ T13] usb 5-1: config 0 descriptor?? [ 125.247229][ T5414] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.254624][ T5414] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.256918][ T1336] usb 1-1: Using ep0 maxpacket: 16 [ 125.336907][ T4189] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 125.349653][ T4189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.363601][ T4189] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.387082][ T1336] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.402545][ T5458] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.410817][ T1336] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 125.430178][ T1336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.476827][ T1336] usb 1-1: config 0 descriptor?? [ 125.527116][ T4189] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.544347][ T5414] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.546479][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.560176][ T5414] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.587815][ T4189] usb 3-1: Product: syz [ 125.616164][ T4189] usb 3-1: Manufacturer: syz [ 125.627487][ T4189] usb 3-1: SerialNumber: syz [ 125.828730][ T13] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 125.849148][ T13] CoreChips: probe of 5-1:0.41 failed with error -71 [ 125.884384][ T13] usb 5-1: USB disconnect, device number 3 [ 126.421315][ T1336] usb 1-1: USB disconnect, device number 5 [ 126.447299][ T4189] usb 3-1: 0:2 : does not exist [ 126.482975][ T5490] kvm [5489]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x0 [ 127.927735][ T4189] usb 3-1: USB disconnect, device number 6 [ 128.279706][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.516993][ T5537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.416942][ T1336] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.916906][ T1336] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.097077][ T1336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.126754][ T1336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.152662][ T1336] usb 1-1: Product: syz [ 130.162254][ T1336] usb 1-1: Manufacturer: syz [ 130.168838][ T1336] usb 1-1: SerialNumber: syz [ 131.537379][ T1336] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 131.544075][ T1336] cdc_ncm 1-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 131.564240][ T1336] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 131.564589][ T5601] mmap: syz.5.298 (5601) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 131.858563][ T1336] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 131.886015][ T1336] usb 1-1: USB disconnect, device number 6 [ 131.892635][ T1336] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 132.830256][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.837774][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.091428][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 135.127864][ T4240] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.546963][ T4240] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.576645][ T4240] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.676921][ T4240] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.696553][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.725305][ T4240] usb 3-1: SerialNumber: syz [ 136.021073][ T4240] usb 3-1: 0:2 : does not exist [ 136.471729][ T5727] KVM: debugfs: duplicate directory 5727-5 [ 136.978648][ T4240] usb 3-1: unit 5: unexpected type 0x09 [ 136.991384][ T4240] usb 3-1: USB disconnect, device number 7 [ 137.006853][ T4505] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 137.286755][ T4505] usb 6-1: Using ep0 maxpacket: 32 [ 137.392314][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.497092][ T4505] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.515503][ T4505] usb 6-1: config 0 has no interface number 0 [ 137.526992][ T4255] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.542680][ T4505] usb 6-1: config 0 interface 184 has no altsetting 0 [ 137.717098][ T4505] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.727863][ T4505] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.736337][ T4505] usb 6-1: Product: syz [ 137.741575][ T4505] usb 6-1: Manufacturer: syz [ 137.746404][ T4505] usb 6-1: SerialNumber: syz [ 137.765801][ T4505] usb 6-1: config 0 descriptor?? [ 137.776801][ T4255] usb 2-1: Using ep0 maxpacket: 32 [ 137.808716][ T4505] smsc75xx v1.0.0 [ 137.896829][ T4255] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.912728][ T4255] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.927235][ T4255] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.938613][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.954194][ T4255] usb 2-1: config 0 descriptor?? [ 138.202066][ T4240] usb 2-1: USB disconnect, device number 4 [ 138.526772][ T4505] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 138.537941][ T4505] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 139.121125][ T5812] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.838725][ T5832] KVM: debugfs: duplicate directory 5832-5 [ 140.487159][ T4505] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 140.577277][ T4505] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 140.651040][ T4505] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 140.698953][ T4505] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 140.866154][ T4505] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 140.937874][ T4505] usb 6-1: USB disconnect, device number 3 [ 141.846704][ T4255] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 143.145440][ T4255] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 143.226697][ T4255] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 143.293685][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.344150][ T4255] usb 2-1: config 0 descriptor?? [ 143.861200][ T4365] tipc: Subscription rejected, illegal request [ 143.998546][ T4255] saitek 0003:06A3:0CD0.0005: hidraw0: USB HID v10.01 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input0 [ 144.159871][ T4248] usb 2-1: USB disconnect, device number 5 [ 144.246669][ T4505] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.357910][ T5904] fido_id[5904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 144.496783][ T4505] usb 5-1: Using ep0 maxpacket: 8 [ 144.836773][ T4505] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.875557][ T4505] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.894768][ T4505] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.005330][ T5921] KVM: debugfs: duplicate directory 5921-5 [ 145.013507][ T5925] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.106927][ T4505] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.125429][ T4505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.134445][ T4505] usb 5-1: Product: syz [ 145.146351][ T4505] usb 5-1: Manufacturer: syz [ 145.153545][ T4505] usb 5-1: SerialNumber: syz [ 145.319443][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'. [ 145.535691][ T4505] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 145.564471][ T4505] cdc_ncm 5-1:1.0: bind() failure [ 145.702377][ T4505] usb 5-1: USB disconnect, device number 4 [ 145.715609][ T5937] netlink: 'syz.0.398': attribute type 29 has an invalid length. [ 145.727209][ T5937] netlink: 'syz.0.398': attribute type 29 has an invalid length. [ 146.058667][ T5942] netlink: 'syz.0.398': attribute type 29 has an invalid length. [ 146.295582][ T5957] KVM: debugfs: duplicate directory 5957-5 [ 147.940613][ T5999] device bridge1 entered promiscuous mode [ 147.961032][ T5996] device syzkaller0 entered promiscuous mode [ 148.058336][ T6004] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 149.887904][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.434'. [ 150.631326][ T6061] netlink: 'syz.5.439': attribute type 1 has an invalid length. [ 151.166388][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.175942][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.188132][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.112414][ T6100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.453'. [ 153.025067][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 155.240381][ T6162] team0 (unregistering): Port device team_slave_0 removed [ 155.303487][ T6162] team0 (unregistering): Port device team_slave_1 removed [ 155.561972][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 155.686853][ T6178] tipc: Started in network mode [ 155.703181][ T6178] tipc: Node identity fffeffff, cluster identity 4711 [ 155.714939][ T6178] tipc: Node number set to 4294901759 [ 155.873428][ T6186] tipc: Started in network mode [ 155.879689][ T6186] tipc: Node identity b2c0f1d7cfa7, cluster identity 4711 [ 155.887615][ T6186] tipc: Enabled bearer , priority 0 [ 155.896087][ T6190] device syzkaller0 entered promiscuous mode [ 155.919298][ T6186] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 156.388941][ T6186] tipc: Resetting bearer [ 156.439811][ T6185] tipc: Resetting bearer [ 156.493913][ T6185] tipc: Disabling bearer [ 156.752163][ T6201] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.759224][ T6201] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.662683][ T6219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.496'. [ 157.744725][ T6226] netlink: 84 bytes leftover after parsing attributes in process `syz.4.499'. [ 158.514210][ T6249] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 158.778966][ T4792] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 158.792415][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 159.349837][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 159.759988][ T6268] syz.1.514 uses obsolete (PF_INET,SOCK_PACKET) [ 159.765182][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 159.806083][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 162.213695][ T6312] netlink: 292 bytes leftover after parsing attributes in process `syz.0.529'. [ 162.496844][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 162.632999][ T6333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.640957][ T6333] IPv6: NLM_F_CREATE should be set when creating new route [ 164.692679][ T4255] Bluetooth: hci4: command 0x0405 tx timeout [ 165.211278][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 165.253298][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e641400: rx timeout, send abort [ 165.295521][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 165.319482][ T6388] device bond0 entered promiscuous mode [ 165.325543][ T6388] device bond_slave_0 entered promiscuous mode [ 165.336811][ T6388] device bond_slave_1 entered promiscuous mode [ 165.345515][ T6388] device bond0 left promiscuous mode [ 165.351285][ T6388] device bond_slave_0 left promiscuous mode [ 165.357645][ T6388] device bond_slave_1 left promiscuous mode [ 165.569829][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 165.585942][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.603893][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.614113][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.753380][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ecb3c00: rx timeout, send abort [ 165.763801][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e641400: abort rx timeout. Force session deactivation [ 166.038763][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fea3000: rx timeout, send abort [ 166.317082][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fea3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 166.332217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ecb3c00: abort rx timeout. Force session deactivation [ 166.847330][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.567'. [ 166.878515][ T6426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.897831][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.569'. [ 167.456126][ T6441] [ 167.458740][ T6441] ====================================================== [ 167.465759][ T6441] WARNING: possible circular locking dependency detected [ 167.472784][ T6441] syzkaller #0 Not tainted [ 167.477194][ T6441] ------------------------------------------------------ [ 167.484207][ T6441] syz.0.573/6441 is trying to acquire lock: [ 167.490096][ T6441] ffff88807a078120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 167.499665][ T6441] [ 167.499665][ T6441] but task is already holding lock: [ 167.507298][ T6441] ffffc9000185aaa8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 167.516891][ T6441] [ 167.516891][ T6441] which lock already depends on the new lock. [ 167.516891][ T6441] [ 167.527285][ T6441] [ 167.527285][ T6441] the existing dependency chain (in reverse order) is: [ 167.536292][ T6441] [ 167.536292][ T6441] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 167.544195][ T6441] _raw_spin_lock+0x2a/0x40 [ 167.549491][ T6441] __inet_hash+0xe3/0x960 [ 167.554345][ T6441] inet_csk_listen_start+0x22f/0x320 [ 167.560507][ T6441] inet_listen+0x2e1/0x590 [ 167.565489][ T6441] __sys_listen+0x19d/0x220 [ 167.570629][ T6441] __x64_sys_listen+0x56/0x60 [ 167.575968][ T6441] do_syscall_64+0x4c/0xa0 [ 167.580999][ T6441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.587541][ T6441] [ 167.587541][ T6441] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 167.595390][ T6441] __lock_acquire+0x2c33/0x7c60 [ 167.604797][ T6441] lock_acquire+0x197/0x3f0 [ 167.610012][ T6441] mptcp_diag_get_info+0x1db/0x990 [ 167.615660][ T6441] inet_sk_diag_fill+0xef6/0x1b50 [ 167.621203][ T6441] mptcp_diag_dump+0xcca/0x1290 [ 167.626630][ T6441] __inet_diag_dump+0x1f6/0x380 [ 167.632178][ T6441] netlink_dump+0x676/0xcd0 [ 167.637328][ T6441] __netlink_dump_start+0x523/0x700 [ 167.643143][ T6441] inet_diag_handler_cmd+0x1be/0x290 [ 167.649056][ T6441] sock_diag_rcv_msg+0x164/0x3e0 [ 167.654889][ T6441] netlink_rcv_skb+0x1e0/0x430 [ 167.660182][ T6441] sock_diag_rcv+0x26/0x40 [ 167.665146][ T6441] netlink_unicast+0x774/0x920 [ 167.670441][ T6441] netlink_sendmsg+0x8ab/0xbc0 [ 167.675751][ T6441] sock_write_iter+0x29c/0x380 [ 167.681071][ T6441] do_iter_readv_writev+0x497/0x600 [ 167.686825][ T6441] do_iter_write+0x205/0x7b0 [ 167.691938][ T6441] do_writev+0x254/0x410 [ 167.696878][ T6441] do_syscall_64+0x4c/0xa0 [ 167.701826][ T6441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.708330][ T6441] [ 167.708330][ T6441] other info that might help us debug this: [ 167.708330][ T6441] [ 167.718556][ T6441] Possible unsafe locking scenario: [ 167.718556][ T6441] [ 167.726259][ T6441] CPU0 CPU1 [ 167.731627][ T6441] ---- ---- [ 167.736995][ T6441] lock(&h->lhash2[i].lock); [ 167.741764][ T6441] lock(sk_lock-AF_INET6); [ 167.748857][ T6441] lock(&h->lhash2[i].lock); [ 167.756147][ T6441] lock(sk_lock-AF_INET6); [ 167.760659][ T6441] [ 167.760659][ T6441] *** DEADLOCK *** [ 167.760659][ T6441] [ 167.768786][ T6441] 6 locks held by syz.0.573/6441: [ 167.773800][ T6441] #0: ffffffff8d241668 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 167.783291][ T6441] #1: ffffffff8d241528 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 167.793658][ T6441] #2: ffff88801eb67690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 167.804626][ T6441] #3: ffffffff8d31b988 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 167.814888][ T6441] #4: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 167.824199][ T6441] #5: ffffc9000185aaa8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 167.834268][ T6441] [ 167.834268][ T6441] stack backtrace: [ 167.840151][ T6441] CPU: 0 PID: 6441 Comm: syz.0.573 Not tainted syzkaller #0 [ 167.847517][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.857568][ T6441] Call Trace: [ 167.860837][ T6441] [ 167.863764][ T6441] dump_stack_lvl+0x168/0x230 [ 167.868435][ T6441] ? load_image+0x3b0/0x3b0 [ 167.872930][ T6441] ? show_regs_print_info+0x20/0x20 [ 167.878116][ T6441] ? print_circular_bug+0x12b/0x1a0 [ 167.883389][ T6441] check_noncircular+0x274/0x310 [ 167.888409][ T6441] ? add_chain_block+0x940/0x940 [ 167.893347][ T6441] ? lockdep_lock+0xdc/0x1e0 [ 167.897939][ T6441] ? mark_lock+0x94/0x320 [ 167.902361][ T6441] __lock_acquire+0x2c33/0x7c60 [ 167.907213][ T6441] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 167.913198][ T6441] ? verify_lock_unused+0x140/0x140 [ 167.918388][ T6441] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 167.924380][ T6441] ? verify_lock_unused+0x140/0x140 [ 167.929668][ T6441] ? __local_bh_enable_ip+0xcb/0x1b0 [ 167.934954][ T6441] ? __local_bh_enable_ip+0x12a/0x1b0 [ 167.940409][ T6441] ? lockdep_hardirqs_on+0x94/0x140 [ 167.945695][ T6441] ? __local_bh_enable_ip+0x12a/0x1b0 [ 167.951072][ T6441] ? _local_bh_enable+0xa0/0xa0 [ 167.955908][ T6441] ? skb_put+0x117/0x210 [ 167.960146][ T6441] lock_acquire+0x197/0x3f0 [ 167.964640][ T6441] ? inet_sk_diag_fill+0xef6/0x1b50 [ 167.969841][ T6441] ? read_lock_is_recursive+0x10/0x10 [ 167.975284][ T6441] ? rcu_lock_release+0x5/0x20 [ 167.980037][ T6441] ? __lock_acquire+0x7c60/0x7c60 [ 167.985047][ T6441] ? inet_sk_diag_fill+0xef6/0x1b50 [ 167.990491][ T6441] mptcp_diag_get_info+0x1db/0x990 [ 167.995587][ T6441] ? inet_sk_diag_fill+0xef6/0x1b50 [ 168.000774][ T6441] inet_sk_diag_fill+0xef6/0x1b50 [ 168.005786][ T6441] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 168.011641][ T6441] ? do_raw_spin_lock+0x11d/0x280 [ 168.016663][ T6441] ? inet_diag_bc_sk+0x187/0x10c0 [ 168.021757][ T6441] ? security_capable+0x85/0xb0 [ 168.026658][ T6441] mptcp_diag_dump+0xcca/0x1290 [ 168.031718][ T6441] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 168.038322][ T6441] __inet_diag_dump+0x1f6/0x380 [ 168.043180][ T6441] netlink_dump+0x676/0xcd0 [ 168.047815][ T6441] ? netlink_lookup+0x1d0/0x1d0 [ 168.052660][ T6441] ? __inet_diag_dump_start+0x805/0x970 [ 168.058209][ T6441] __netlink_dump_start+0x523/0x700 [ 168.063399][ T6441] inet_diag_handler_cmd+0x1be/0x290 [ 168.068672][ T6441] ? rcu_lock_release+0x20/0x20 [ 168.073519][ T6441] ? inet_diag_handler_get_info+0xb80/0xb80 [ 168.079527][ T6441] ? inet_diag_dump_start+0x20/0x20 [ 168.084713][ T6441] ? inet_diag_dump+0x50/0x50 [ 168.089377][ T6441] ? dev_queue_xmit+0x20/0x20 [ 168.094041][ T6441] ? memcpy+0x3c/0x60 [ 168.098035][ T6441] ? sock_diag_rcv+0x17/0x40 [ 168.102655][ T6441] ? sock_diag_rcv+0x17/0x40 [ 168.107246][ T6441] ? rcu_lock_release+0x20/0x20 [ 168.112189][ T6441] sock_diag_rcv_msg+0x164/0x3e0 [ 168.117115][ T6441] netlink_rcv_skb+0x1e0/0x430 [ 168.121948][ T6441] ? sock_diag_bind+0xa0/0xa0 [ 168.126648][ T6441] ? netlink_ack+0xb60/0xb60 [ 168.131272][ T6441] ? __lock_acquire+0x7c60/0x7c60 [ 168.136303][ T6441] sock_diag_rcv+0x26/0x40 [ 168.140725][ T6441] netlink_unicast+0x774/0x920 [ 168.145588][ T6441] netlink_sendmsg+0x8ab/0xbc0 [ 168.150371][ T6441] ? netlink_getsockopt+0x560/0x560 [ 168.155579][ T6441] ? aa_sock_msg_perm+0x94/0x150 [ 168.160728][ T6441] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 168.166010][ T6441] ? security_socket_sendmsg+0x7c/0xa0 [ 168.171549][ T6441] sock_write_iter+0x29c/0x380 [ 168.176311][ T6441] ? sock_read_iter+0x340/0x340 [ 168.181154][ T6441] do_iter_readv_writev+0x497/0x600 [ 168.186446][ T6441] ? generic_file_rw_checks+0x280/0x280 [ 168.191991][ T6441] ? common_file_perm+0x171/0x1c0 [ 168.197023][ T6441] ? fsnotify_perm+0x5d/0x560 [ 168.201697][ T6441] ? security_file_permission+0x75/0xa0 [ 168.207333][ T6441] do_iter_write+0x205/0x7b0 [ 168.211922][ T6441] ? import_iovec+0x6f/0xa0 [ 168.216424][ T6441] do_writev+0x254/0x410 [ 168.220654][ T6441] ? do_readv+0x3e0/0x3e0 [ 168.224979][ T6441] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 168.231034][ T6441] ? lock_chain_count+0x20/0x20 [ 168.235870][ T6441] ? vtime_user_exit+0x2dc/0x400 [ 168.240792][ T6441] ? lockdep_hardirqs_on+0x94/0x140 [ 168.245976][ T6441] do_syscall_64+0x4c/0xa0 [ 168.250377][ T6441] ? clear_bhb_loop+0x30/0x80 [ 168.255039][ T6441] ? clear_bhb_loop+0x30/0x80 [ 168.259702][ T6441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.265583][ T6441] RIP: 0033:0x7f2ea7f5ebe9 [ 168.270005][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.289611][ T6441] RSP: 002b:00007f2ea61c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 168.298022][ T6441] RAX: ffffffffffffffda RBX: 00007f2ea8195fa0 RCX: 00007f2ea7f5ebe9 [ 168.305990][ T6441] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 168.314937][ T6441] RBP: 00007f2ea7fe1e19 R08: 0000000000000000 R09: 0000000000000000 [ 168.322920][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.330997][ T6441] R13: 00007f2ea8196038 R14: 00007f2ea8195fa0 R15: 00007fff16f3b0b8 [ 168.338978][ T6441] [ 168.342711][ T6441] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 168.351935][ T6441] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6441, name: syz.0.573 [ 168.361089][ T6441] INFO: lockdep is turned off. [ 168.365841][ T6441] Preemption disabled at: [ 168.365847][ T6441] [<0000000000000000>] 0x0 [ 168.374637][ T6441] CPU: 0 PID: 6441 Comm: syz.0.573 Not tainted syzkaller #0 [ 168.381916][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.392054][ T6441] Call Trace: [ 168.395342][ T6441] [ 168.398270][ T6441] dump_stack_lvl+0x168/0x230 [ 168.402941][ T6441] ? show_regs_print_info+0x20/0x20 [ 168.408141][ T6441] ? load_image+0x3b0/0x3b0 [ 168.412636][ T6441] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 168.418802][ T6441] ___might_sleep+0x47c/0x600 [ 168.423482][ T6441] ? __might_sleep+0xf0/0xf0 [ 168.428189][ T6441] ? read_lock_is_recursive+0x10/0x10 [ 168.433738][ T6441] ? rcu_lock_release+0x5/0x20 [ 168.438527][ T6441] __lock_sock_fast+0x2f/0xe0 [ 168.443213][ T6441] ? inet_sk_diag_fill+0xef6/0x1b50 [ 168.448435][ T6441] mptcp_diag_get_info+0x1e7/0x990 [ 168.453571][ T6441] inet_sk_diag_fill+0xef6/0x1b50 [ 168.458592][ T6441] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 168.464301][ T6441] ? do_raw_spin_lock+0x11d/0x280 [ 168.469327][ T6441] ? inet_diag_bc_sk+0x187/0x10c0 [ 168.474336][ T6441] ? security_capable+0x85/0xb0 [ 168.479264][ T6441] mptcp_diag_dump+0xcca/0x1290 [ 168.484132][ T6441] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 168.490808][ T6441] __inet_diag_dump+0x1f6/0x380 [ 168.495773][ T6441] netlink_dump+0x676/0xcd0 [ 168.500278][ T6441] ? netlink_lookup+0x1d0/0x1d0 [ 168.506001][ T6441] ? __inet_diag_dump_start+0x805/0x970 [ 168.511533][ T6441] __netlink_dump_start+0x523/0x700 [ 168.516722][ T6441] inet_diag_handler_cmd+0x1be/0x290 [ 168.521992][ T6441] ? rcu_lock_release+0x20/0x20 [ 168.526834][ T6441] ? inet_diag_handler_get_info+0xb80/0xb80 [ 168.532733][ T6441] ? inet_diag_dump_start+0x20/0x20 [ 168.538000][ T6441] ? inet_diag_dump+0x50/0x50 [ 168.542776][ T6441] ? dev_queue_xmit+0x20/0x20 [ 168.547451][ T6441] ? memcpy+0x3c/0x60 [ 168.551458][ T6441] ? sock_diag_rcv+0x17/0x40 [ 168.556054][ T6441] ? sock_diag_rcv+0x17/0x40 [ 168.560640][ T6441] ? rcu_lock_release+0x20/0x20 [ 168.565494][ T6441] sock_diag_rcv_msg+0x164/0x3e0 [ 168.570440][ T6441] netlink_rcv_skb+0x1e0/0x430 [ 168.575288][ T6441] ? sock_diag_bind+0xa0/0xa0 [ 168.580051][ T6441] ? netlink_ack+0xb60/0xb60 [ 168.584641][ T6441] ? __lock_acquire+0x7c60/0x7c60 [ 168.589676][ T6441] sock_diag_rcv+0x26/0x40 [ 168.594084][ T6441] netlink_unicast+0x774/0x920 [ 168.598855][ T6441] netlink_sendmsg+0x8ab/0xbc0 [ 168.603608][ T6441] ? netlink_getsockopt+0x560/0x560 [ 168.608810][ T6441] ? aa_sock_msg_perm+0x94/0x150 [ 168.613734][ T6441] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 168.619118][ T6441] ? security_socket_sendmsg+0x7c/0xa0 [ 168.624583][ T6441] sock_write_iter+0x29c/0x380 [ 168.629377][ T6441] ? sock_read_iter+0x340/0x340 [ 168.634227][ T6441] do_iter_readv_writev+0x497/0x600 [ 168.639423][ T6441] ? generic_file_rw_checks+0x280/0x280 [ 168.645095][ T6441] ? common_file_perm+0x171/0x1c0 [ 168.650116][ T6441] ? fsnotify_perm+0x5d/0x560 [ 168.654792][ T6441] ? security_file_permission+0x75/0xa0 [ 168.660332][ T6441] do_iter_write+0x205/0x7b0 [ 168.665055][ T6441] ? import_iovec+0x6f/0xa0 [ 168.669566][ T6441] do_writev+0x254/0x410 [ 168.673817][ T6441] ? do_readv+0x3e0/0x3e0 [ 168.678140][ T6441] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 168.684112][ T6441] ? lock_chain_count+0x20/0x20 [ 168.688964][ T6441] ? vtime_user_exit+0x2dc/0x400 [ 168.693889][ T6441] ? lockdep_hardirqs_on+0x94/0x140 [ 168.699104][ T6441] do_syscall_64+0x4c/0xa0 [ 168.703782][ T6441] ? clear_bhb_loop+0x30/0x80 [ 168.708454][ T6441] ? clear_bhb_loop+0x30/0x80 [ 168.713117][ T6441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.719081][ T6441] RIP: 0033:0x7f2ea7f5ebe9 [ 168.723527][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.743132][ T6441] RSP: 002b:00007f2ea61c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 168.751631][ T6441] RAX: ffffffffffffffda RBX: 00007f2ea8195fa0 RCX: 00007f2ea7f5ebe9 [ 168.759590][ T6441] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 168.767550][ T6441] RBP: 00007f2ea7fe1e19 R08: 0000000000000000 R09: 0000000000000000 [ 168.775690][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.783735][ T6441] R13: 00007f2ea8196038 R14: 00007f2ea8195fa0 R15: 00007fff16f3b0b8 [ 168.791701][ T6441] [ 169.309192][ T6442] device syzkaller0 entered promiscuous mode [ 169.325161][ T6440] tipc: Started in network mode [ 169.330451][ T6440] tipc: Node identity 3687a363f66f, cluster identity 4711 [ 169.341780][ T6440] tipc: Enabled bearer , priority 0 [ 169.348734][ T6439] tipc: Resetting bearer [ 169.375056][ T6439] tipc: Disabling bearer