last executing test programs: 3m30.356974521s ago: executing program 2 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x38}}, 0x44) 3m30.324643911s ago: executing program 2 (id=79): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90004c49b"], 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 3m29.11869107s ago: executing program 2 (id=90): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_io_uring_setup(0x4a3d, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x8, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000}) io_uring_enter(r9, 0x0, 0xcb, 0xf, 0x0, 0x0) 3m27.675109152s ago: executing program 2 (id=97): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m25.929849389s ago: executing program 2 (id=103): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc8c0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m24.797756397s ago: executing program 2 (id=108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m9.339468876s ago: executing program 32 (id=108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 37.662253117s ago: executing program 1 (id=637): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 35.885235904s ago: executing program 1 (id=644): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0xdd0f76e88c10240e, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r1, 0x0, 0x0, 'syz0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 35.50511281s ago: executing program 3 (id=647): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48c5) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc9, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x7, 0x5241, 0x0, 0x4, 0x5, 0x6, 0x0, 0x40000, 0x767e, 0x80, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0xff, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x100000001]}) 34.806093301s ago: executing program 1 (id=648): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 33.860066745s ago: executing program 1 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 33.848883445s ago: executing program 3 (id=653): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) ioctl(0xffffffffffffffff, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f00000035c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_procfs(0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, &(0x7f0000048000)=0x2000, 0x5000003) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 33.618039699s ago: executing program 3 (id=655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 33.58138511s ago: executing program 1 (id=656): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.847720171s ago: executing program 1 (id=659): syz_io_uring_setup(0x10b, 0x0, &(0x7f0000000100), &(0x7f0000000300)) r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000bc0), 0x1, 0x50e, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)=':', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) shutdown(r4, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@private2, @in6=@local}, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@loopback}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) 32.628617445s ago: executing program 33 (id=659): syz_io_uring_setup(0x10b, 0x0, &(0x7f0000000100), &(0x7f0000000300)) r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000bc0), 0x1, 0x50e, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)=':', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) shutdown(r4, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@private2, @in6=@local}, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@loopback}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) 30.424720979s ago: executing program 3 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 30.211013882s ago: executing program 3 (id=670): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 29.587951762s ago: executing program 3 (id=673): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 28.919210642s ago: executing program 34 (id=673): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 17.514517478s ago: executing program 0 (id=699): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) ioctl(0xffffffffffffffff, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f00000035c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_procfs(0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(0x0, 0x5, 0x1000000, 0x0, &(0x7f0000048000)=0x2000, 0x5000003) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 16.419925226s ago: executing program 0 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 15.392204642s ago: executing program 0 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) 13.438650302s ago: executing program 0 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 11.152927637s ago: executing program 5 (id=719): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 9.355643835s ago: executing program 4 (id=723): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) ioctl(0xffffffffffffffff, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f00000035c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_procfs(0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(0x0, 0x5, 0x1000000, 0x0, &(0x7f0000048000)=0x2000, 0x5000003) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 8.527839048s ago: executing program 4 (id=724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000740)="1cde94a0c669a3936f0b346530806b33fd9c37f34f204dbe19", 0x19}], 0x2) 6.796811535s ago: executing program 0 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 6.796573295s ago: executing program 4 (id=726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 6.777412885s ago: executing program 5 (id=727): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 5.82102082s ago: executing program 7 (id=674): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48c5) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc9, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x7, 0x5241, 0x0, 0x4, 0x5, 0x6, 0x0, 0x40000, 0x767e, 0x80, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0xff, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x100000001]}) 5.81978534s ago: executing program 4 (id=728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) 5.780273631s ago: executing program 0 (id=729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.757918446s ago: executing program 7 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9441, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$usbfs(0x0, 0x74, 0x101301) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000140)=@l={0x92, 0xe, 0xd0, 0x80, 0x0, 0x40}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x100}, 0x0, [0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x4, 0xe, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x88000101, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 4.466929241s ago: executing program 5 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 3.618006724s ago: executing program 6 (id=660): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x2b, 0x4, 0x7}, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r5, 0x89e2, 0x0) connect$can_bcm(r0, 0x0, 0x0) 3.403959107s ago: executing program 5 (id=732): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) ioctl(0xffffffffffffffff, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f00000035c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_procfs(0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, 0x0, 0x5000003) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 3.388508198s ago: executing program 7 (id=733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 3.187486151s ago: executing program 7 (id=734): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="92", 0x1}], 0x1) 3.047945333s ago: executing program 7 (id=735): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 2.62701726s ago: executing program 6 (id=736): ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) 2.512899721s ago: executing program 6 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x5c}}, 0x20050800) 2.435840203s ago: executing program 5 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 2.389370193s ago: executing program 6 (id=739): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48c5) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc9, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x7, 0x5241, 0x0, 0x4, 0x5, 0x6, 0x0, 0x40000, 0x767e, 0x80, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0xff, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x100000001]}) 2.340166904s ago: executing program 5 (id=740): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.455265357s ago: executing program 4 (id=741): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x0) fanotify_init(0x20, 0x1) recvmmsg(r5, &(0x7f0000000240), 0x0, 0x2, 0x0) r7 = socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, &(0x7f0000000000)) ioctl$IMGETDEVINFO(r7, 0x80044944, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003640), 0x2000000, &(0x7f0000003680)) 1.385062709s ago: executing program 6 (id=742): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x400000000200, 0x0, 0x0, 0x400000000230, 0x400000000260], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x8, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x0, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x1000, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1ef, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x1, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x1ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) close(0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x95, 0x7, 0x4, 0x7, 0x7, 0xa, 0x8, {0x0, @in6={{0xa, 0x4e24, 0x45, @private2, 0x7}}, 0xfffffffc, 0x6, 0x1ff, 0xfffffffa, 0xfff}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={r8, 0x9}, 0x8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) 1.3013609s ago: executing program 7 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 142.742778ms ago: executing program 6 (id=744): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0xf8, 0x31, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40d5}, 0x240481c1) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000004000000000000000040014000d000a000f0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x34, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 0s ago: executing program 4 (id=745): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb, "ff00f7000000000000000000af88008300"}) ioctl$TCSETSF(0xffffffffffffffff, 0x541d, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r3, r2, 0x0) kernel console output (not intermixed with test programs): 37.967997][ T4305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.007218][ T4318] Bluetooth: hci1: command 0x0409 tx timeout [ 38.007316][ T4317] Bluetooth: hci0: command 0x0409 tx timeout [ 38.009093][ T4318] Bluetooth: hci3: command 0x0409 tx timeout [ 38.010988][ T4317] Bluetooth: hci2: command 0x0409 tx timeout [ 38.020943][ T4305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.087201][ T4317] Bluetooth: hci4: command 0x0409 tx timeout [ 38.107934][ T4306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.202650][ T4306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.229677][ T4306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.291943][ T4319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.318777][ T4306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.398148][ T4319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.443076][ T4319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.482306][ T4319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.603997][ T4310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.629655][ T4310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.670463][ T4310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.716406][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.719487][ T4310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.789055][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.801493][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.803982][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.812656][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.820482][ T4313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.857807][ T4313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.898710][ T4313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.959583][ T4313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.998433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.001383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.004905][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.007008][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.010680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.023316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.026036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.030894][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.032826][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.035457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.039859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.042570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.045009][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.061335][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.077777][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.080536][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.083168][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.085166][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.088244][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.102819][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.105061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.110240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.114055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.117412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.119940][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.121947][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.124185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.134176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.137889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.140694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.143395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.145921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.149233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.151820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.164623][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.189003][ T4310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.192651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.195376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.201314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.206430][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.226509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.235127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.240055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.242987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.245733][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.247864][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.250498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.253155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.271096][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.273999][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.277091][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.279766][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.282364][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.285148][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.289877][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.291939][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.312512][ T4310] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.314884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.317698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.320373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.323326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.332096][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.335709][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.353370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.356269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.360276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.363584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.366494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.374897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.379353][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.381440][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.383829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.387151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.389660][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.391677][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.394027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.397321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.399988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.412416][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.415381][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.425022][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.429363][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.432081][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.435949][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.439592][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.442252][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.444870][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.473422][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.475940][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.479980][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.504168][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.507048][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.510923][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.513722][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.516564][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.520550][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.523462][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.529429][ T4310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.532833][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.547783][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.554988][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.558478][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.561053][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.594150][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.599682][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.602281][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.605374][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.608082][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.630574][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.647901][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.650697][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.654858][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.656814][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.660219][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.663031][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.672865][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.692651][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.695562][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.705536][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.707655][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.711332][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.727744][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.730597][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.737436][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.753764][ T4306] device veth0_vlan entered promiscuous mode [ 39.773289][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.776200][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.782139][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.785304][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.789178][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.791646][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.794383][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.797656][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.800117][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.803600][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.806103][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.821533][ T4305] device veth0_vlan entered promiscuous mode [ 39.823867][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.828535][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.838043][ T4306] device veth1_vlan entered promiscuous mode [ 39.841484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.844247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.846488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.849932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.852678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.858965][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.873210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.875901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.881780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.884393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.886532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.892896][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.897732][ T4305] device veth1_vlan entered promiscuous mode [ 39.905103][ T4310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.933385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.936019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.939700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.942803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.962622][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.965341][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.969160][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.971975][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.976217][ T4319] device veth0_vlan entered promiscuous mode [ 39.981294][ T4305] device veth0_macvtap entered promiscuous mode [ 39.985384][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.992369][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.994913][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.005295][ T4306] device veth0_macvtap entered promiscuous mode [ 40.014226][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.023230][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.026049][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.030706][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.040453][ T4305] device veth1_macvtap entered promiscuous mode [ 40.050598][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.054003][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.061286][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.064040][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.069102][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.071593][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.074728][ T4319] device veth1_vlan entered promiscuous mode [ 40.079259][ T4306] device veth1_macvtap entered promiscuous mode [ 40.083662][ T4310] device veth0_vlan entered promiscuous mode [ 40.087161][ T4317] Bluetooth: hci3: command 0x041b tx timeout [ 40.088792][ T4317] Bluetooth: hci0: command 0x041b tx timeout [ 40.090412][ T4317] Bluetooth: hci1: command 0x041b tx timeout [ 40.092072][ T4317] Bluetooth: hci2: command 0x041b tx timeout [ 40.100161][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.105230][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.109444][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.112299][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.114975][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.118016][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.127910][ T4310] device veth1_vlan entered promiscuous mode [ 40.148739][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.162288][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.165392][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.168394][ T4307] Bluetooth: hci4: command 0x041b tx timeout [ 40.172586][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.175422][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.179666][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.182237][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.185036][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.188729][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.191383][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.197634][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.202435][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.205143][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.211187][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.214006][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.227834][ T4310] device veth0_macvtap entered promiscuous mode [ 40.230861][ T4305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.233341][ T4305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.235688][ T4305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.239078][ T4305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.243894][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.249120][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.251982][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.256133][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.262709][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.268137][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.279570][ T4319] device veth0_macvtap entered promiscuous mode [ 40.283684][ T4319] device veth1_macvtap entered promiscuous mode [ 40.288892][ T4310] device veth1_macvtap entered promiscuous mode [ 40.291723][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.294475][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.298835][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.301513][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.304457][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.311916][ T4306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.314399][ T4306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.321538][ T4306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.323907][ T4306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.347479][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.350418][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.353081][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.355992][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.362021][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.389604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.392582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.399129][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.402107][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.404832][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.409230][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.413119][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.424919][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.428386][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.434715][ T4310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.438357][ T4310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.440782][ T4310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.443327][ T4310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.450520][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.457681][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.460524][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.464078][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.467006][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.469887][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.474340][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.476381][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.479772][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.516343][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.519567][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.522405][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.525354][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.528144][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.531109][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.535024][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.551703][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.554014][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.572907][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.575703][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.579235][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.587853][ T1598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.589928][ T1598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.601786][ T4319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.604251][ T4319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.606618][ T4319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.609707][ T4319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.616572][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.621963][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.625883][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.704283][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.706585][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.709141][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.711827][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.714598][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.717770][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.720222][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.724083][ T4313] device veth0_vlan entered promiscuous mode [ 40.739670][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.741989][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.749371][ T4313] device veth1_vlan entered promiscuous mode [ 40.752206][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.754965][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.793443][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.795645][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.803806][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.806417][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.820315][ T1598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.822480][ T1598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.825251][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.853524][ T1598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.855755][ T1598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.867163][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.936626][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.941140][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.954955][ T4313] device veth0_macvtap entered promiscuous mode [ 40.957038][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.959316][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.966312][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.982385][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.005091][ T4313] device veth1_macvtap entered promiscuous mode [ 41.015939][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.019389][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.022021][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.024863][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.028538][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.031425][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.034175][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.037568][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.041782][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.046206][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.052447][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.055183][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.403308][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.632297][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.744162][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.753942][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.778547][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.819041][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.827970][ T4313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.835258][ T4313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.840519][ T4313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.853210][ T4313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.949167][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.951994][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.954696][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.969064][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.978323][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.267069][ T4317] Bluetooth: hci2: command 0x040f tx timeout [ 42.269411][ T4317] Bluetooth: hci1: command 0x040f tx timeout [ 42.271820][ T4317] Bluetooth: hci0: command 0x040f tx timeout [ 42.274239][ T4317] Bluetooth: hci3: command 0x040f tx timeout [ 42.276526][ T4317] Bluetooth: hci4: command 0x040f tx timeout [ 43.753851][ T4435] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 43.761362][ T4435] team0: Device ipvlan1 failed to register rx_handler [ 43.806937][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.809252][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.822432][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.900272][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.902599][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.905613][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.981299][ T4307] Bluetooth: hci4: command 0x0419 tx timeout [ 45.983051][ T4307] Bluetooth: hci3: command 0x0419 tx timeout [ 45.984712][ T4307] Bluetooth: hci0: command 0x0419 tx timeout [ 45.986350][ T4307] Bluetooth: hci1: command 0x0419 tx timeout [ 45.988127][ T4317] Bluetooth: hci2: command 0x0419 tx timeout [ 46.117069][ T4444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.119723][ T4444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.891844][ T4463] netlink: 'syz.0.12': attribute type 21 has an invalid length. [ 47.219104][ T4460] binder: 4455:4460 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 48.259377][ T4307] Bluetooth: hci4: command 0x2016 tx timeout [ 50.549441][ T4489] device ip6erspan0 entered promiscuous mode [ 50.574214][ T4489] tipc: Started in network mode [ 50.575728][ T4489] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711 [ 51.904138][ T4502] block device autoloading is deprecated and will be removed. [ 52.764987][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.770565][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.928917][ T4509] atomic_op 0000000047d1dc47 conn xmit_atomic 0000000000000000 [ 53.673432][ T4498] Zero length message leads to an empty skb [ 54.658967][ T27] audit: type=1326 audit(54.340:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.1.23" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8955cc28 code=0x0 [ 54.666282][ T4307] Bluetooth: Unexpected continuation frame (len 16) [ 55.661909][ T3884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.807290][ T4307] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 55.810072][ T4307] CPU: 0 PID: 4307 Comm: kworker/u5:1 Not tainted 6.1.146-syzkaller #0 [ 55.812544][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.815485][ T4307] Workqueue: hci0 hci_rx_work [ 55.816818][ T4307] Call trace: [ 55.817777][ T4307] dump_backtrace+0x1c8/0x1f4 [ 55.819183][ T4307] show_stack+0x2c/0x3c [ 55.820580][ T4307] __dump_stack+0x30/0x40 [ 55.821841][ T4307] dump_stack_lvl+0xf8/0x160 [ 55.823292][ T4307] dump_stack+0x1c/0x5c [ 55.824438][ T4307] sysfs_create_dir_ns+0x22c/0x24c [ 55.825918][ T4307] kobject_add_internal+0x5a8/0xb30 [ 55.827472][ T4307] kobject_add+0x134/0x1f8 [ 55.828740][ T4307] device_add+0x3f0/0xf94 [ 55.829990][ T4307] hci_conn_add_sysfs+0xbc/0x1cc [ 55.831416][ T4307] le_conn_complete_evt+0xa24/0xf8c [ 55.832956][ T4307] hci_le_conn_complete_evt+0x114/0x3f8 [ 55.834632][ T4307] hci_le_meta_evt+0x2c0/0x4a4 [ 55.836028][ T4307] hci_event_packet+0x6ac/0xf08 [ 55.837458][ T4307] hci_rx_work+0x324/0xaa0 [ 55.838737][ T4307] process_one_work+0x7f4/0x13a8 [ 55.840133][ T4307] worker_thread+0x8c8/0xfbc [ 55.841446][ T4307] kthread+0x250/0x2d8 [ 55.842673][ T4307] ret_from_fork+0x10/0x20 [ 55.872448][ T4307] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 55.876828][ T4307] Bluetooth: hci0: failed to register connection device [ 55.888065][ T3884] usb 1-1: Using ep0 maxpacket: 8 [ 55.894704][ T3884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.898153][ T3884] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 55.900904][ T3884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.910503][ T3884] usb 1-1: config 0 descriptor?? [ 56.907703][ T4557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.910478][ T4557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.985480][ T4346] usb 1-1: USB disconnect, device number 2 [ 59.421324][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.423953][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.711414][ T4635] fuse: Bad value for 'fd' [ 62.339814][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.376135][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.855348][ T4555] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.858127][ T4555] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.860566][ T4555] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.863075][ T4555] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.242943][ T14] cfg80211: failed to load regulatory.db [ 63.531502][ T4687] tipc: Started in network mode [ 63.532983][ T4687] tipc: Node identity 721c549bb53f, cluster identity 4711 [ 63.535148][ T4687] tipc: Enabled bearer , priority 0 [ 63.548668][ T4687] device syzkaller0 entered promiscuous mode [ 64.026476][ T4699] binder: 4692:4699 ioctl 4018620d 0 returned -22 [ 64.035885][ T4699] binder: 4692:4699 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 64.093403][ T4687] tipc: Resetting bearer [ 64.123515][ T4699] binder: 4692:4699 got transaction to invalid handle, 1 [ 64.130194][ T4699] binder: 4699:4692 cannot find target node [ 64.133028][ T4699] binder: 4692:4699 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3054 [ 64.136222][ T4699] binder: 4692:4699 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.137042][ T4686] tipc: Resetting bearer [ 64.142306][ T4699] binder: 4699 RLIMIT_NICE not set [ 64.143903][ T4699] binder: 4692:4699 ioctl c0306201 20000240 returned -11 [ 64.163170][ T3884] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.439051][ T4709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.451051][ T4709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.644000][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.646191][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.103379][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.106275][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.617522][ T14] tipc: Node number set to 3340981403 [ 65.632630][ T4686] tipc: Disabling bearer [ 65.906143][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 66.064330][ T4724] NILFS (nullb0): couldn't find nilfs on the device [ 67.841014][ T4738] binder: 4735:4738 ioctl 4018620d 0 returned -22 [ 67.843710][ T4738] binder: 4735:4738 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 67.884323][ T4738] binder: 4735:4738 got transaction to invalid handle, 1 [ 67.886289][ T4738] binder: 4738:4735 cannot find target node [ 68.082403][ T4738] binder: 4735:4738 transaction call to 0:0 failed 6/29201/-22, size 0-0 line 3054 [ 68.092552][ T4744] binder: 4735:4744 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.117040][ T4744] binder: 4744 RLIMIT_NICE not set [ 68.294044][ T4621] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.299228][ T4621] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.860668][ T4390] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.082743][ T4748] binder: 4747:4748 ioctl 4018620d 0 returned -22 [ 69.101204][ T4748] binder: 4747:4748 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 69.119664][ T4748] binder: 4747:4748 got transaction to invalid handle, 1 [ 69.130194][ T4748] binder: 4748:4747 cannot find target node [ 69.131989][ T4748] binder: 4747:4748 transaction call to 0:0 failed 9/29201/-22, size 0-0 line 3054 [ 69.139931][ T4748] binder: 4747:4748 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 69.143640][ T4748] binder: 4748 RLIMIT_NICE not set [ 69.151462][ T4748] binder: 4747:4748 ioctl c0306201 20000240 returned -11 [ 69.156378][ T4553] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.113592][ T4730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.326887][ T4307] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 71.336771][ T3884] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 71.448456][ T4775] NILFS (nullb0): couldn't find nilfs on the device [ 71.516966][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.987926][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.000991][ T3884] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 72.003224][ T3884] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 72.007360][ T3884] usb 1-1: config 5 has no interface number 0 [ 72.009039][ T3884] usb 1-1: config 5 interface 123 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 72.019362][ T3884] usb 1-1: config 5 interface 123 has no altsetting 0 [ 72.051559][ T3884] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 72.070117][ T3884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.072375][ T3884] usb 1-1: Product: syz [ 72.073539][ T3884] usb 1-1: Manufacturer: syz [ 72.099239][ T3884] usb 1-1: SerialNumber: syz [ 72.175592][ T4779] binder: BINDER_SET_CONTEXT_MGR already set [ 72.185372][ T4779] binder: 4778:4779 ioctl 4018620d 20000040 returned -16 [ 72.196279][ T4779] binder: 4778:4779 got transaction to invalid handle, 1 [ 72.211413][ T4779] binder: 4779:4778 cannot find target node [ 72.213166][ T4779] binder: 4778:4779 transaction call to 0:0 failed 11/29201/-22, size 0-0 line 3054 [ 72.226448][ T4779] binder: 4778:4779 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 72.236235][ T4779] binder: 4779 RLIMIT_NICE not set [ 72.243855][ T4779] binder: 4778:4779 ioctl c0306201 20000240 returned -11 [ 72.252007][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.373981][ T3884] comedi comedi1: Wrong number of endpoints [ 72.375836][ T3884] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 72.414962][ T3884] usb 1-1: USB disconnect, device number 3 [ 72.682831][ T4790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.751258][ T4792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.71'. [ 73.419208][ T4790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.530506][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 73.533061][ T4796] device bridge_slave_1 left promiscuous mode [ 73.534786][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.632908][ T4796] device bridge_slave_0 left promiscuous mode [ 73.634784][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.772897][ T4800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.789220][ T4800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.073594][ T4809] binder: BINDER_SET_CONTEXT_MGR already set [ 74.075522][ T4809] binder: 4808:4809 ioctl 4018620d 20000040 returned -16 [ 74.084207][ T4809] binder: 4808:4809 got transaction to invalid handle, 1 [ 74.086432][ T4809] binder: 4809:4808 cannot find target node [ 74.094378][ T4809] binder: 4808:4809 transaction call to 0:0 failed 13/29201/-22, size 0-0 line 3054 [ 74.098251][ T4809] binder: 4808:4809 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.102070][ T4809] binder: 4809 RLIMIT_NICE not set [ 74.103515][ T4809] binder: 4808:4809 ioctl c0306201 20000240 returned -11 [ 74.106256][ T4553] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.114823][ T4811] tipc: Enabling of bearer rejected, failed to enable media [ 75.464270][ T4840] binder: BINDER_SET_CONTEXT_MGR already set [ 75.466229][ T4840] binder: 4839:4840 ioctl 4018620d 20000040 returned -16 [ 75.681501][ T4842] Cannot find add_set index 0 as target [ 75.739923][ T4843] Cannot find add_set index 0 as target [ 76.654904][ T4840] binder: 4839:4840 got transaction to invalid handle, 1 [ 76.671297][ T4840] binder: 4840:4839 cannot find target node [ 76.673002][ T4840] binder: 4839:4840 transaction call to 0:0 failed 15/29201/-22, size 0-0 line 3054 [ 76.685193][ T4848] tipc: Enabling of bearer rejected, failed to enable media [ 76.697356][ T4840] binder: 4839:4840 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.700943][ T4840] binder: 4840 RLIMIT_NICE not set [ 76.702581][ T4840] binder: 4839:4840 ioctl c0306201 20000240 returned -11 [ 76.735196][ T4390] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.761578][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.777014][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.793400][ T4855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.796339][ T4855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.840417][ T4859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.846078][ T4859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.535214][ T4390] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.805953][ T4390] usb 1-1: Using ep0 maxpacket: 8 [ 78.830235][ T4390] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.833476][ T4390] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.848428][ T4390] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 79.453829][ T4390] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 79.456589][ T4390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.557223][ T4936] binder: 4909:4936 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 79.574831][ T4390] usb 1-1: Product: syz [ 79.576015][ T4390] usb 1-1: Manufacturer: syz [ 79.601163][ T4390] usb 1-1: SerialNumber: syz [ 79.611465][ T4390] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 79.614725][ T4390] usbtest 1-1:1.0: Linux user mode ISO test driver [ 79.617663][ T4958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.620157][ T4958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.622808][ T4390] usbtest 1-1:1.0: high-speed {control iso-in} tests (+alt) [ 79.662879][ T4936] binder: 4909:4936 ioctl 4018620d 0 returned -22 [ 79.663677][ T4971] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.105'. [ 79.673668][ T4940] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.105'. [ 79.846554][ T4936] binder: 4909:4936 Acquire 1 refcount change on invalid ref 0 ret -22 [ 79.874592][ T14] usb 1-1: USB disconnect, device number 4 [ 80.022355][ T4936] binder: 4909:4936 got transaction to invalid handle, 1 [ 80.024299][ T4936] binder: 4936:4909 cannot find target node [ 80.025875][ T4936] binder: 4909:4936 transaction call to 0:0 failed 16/29201/-22, size 0-0 line 3054 [ 80.040029][ T4936] binder: 4909:4936 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.051176][ T4936] binder: 4936 RLIMIT_NICE not set [ 80.052729][ T4936] binder: 4909:4936 ioctl c0306201 20000240 returned -11 [ 80.076735][ T4390] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.118078][ T4955] ipt_CLUSTERIP: Please specify destination IP [ 80.202514][ T4980] binder: 4979:4980 ioctl c0306201 0 returned -14 [ 80.225800][ T4980] binder: 4979:4980 got transaction to invalid handle, 1 [ 80.244187][ T4980] binder: 4980:4979 cannot find target node [ 80.245870][ T4980] binder: 4979:4980 transaction call to 0:0 failed 20/29201/-22, size 0-0 line 3054 [ 80.276225][ T4980] binder: 4979:4980 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.281159][ T4980] binder: 4979:4980 ioctl c0306201 20000240 returned -11 [ 80.284192][ T4390] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.343157][ T4985] tipc: Enabling of bearer rejected, failed to enable media [ 82.546547][ T5001] tipc: Started in network mode [ 82.594646][ T5001] tipc: Node identity 7a03ca411497, cluster identity 4711 [ 82.597612][ T5001] tipc: Enabled bearer , priority 0 [ 82.621022][ T5003] device syzkaller0 entered promiscuous mode [ 83.616761][ T4346] tipc: Node number set to 1855244865 [ 83.636896][ T4998] tipc: Resetting bearer [ 83.808690][ T4998] tipc: Disabling bearer [ 83.965956][ T5022] binder: 5021:5022 ioctl 4018620d 0 returned -22 [ 83.968281][ T5022] binder_user_error: 1 callbacks suppressed [ 83.968290][ T5022] binder: tried to use weak ref as strong ref [ 83.971573][ T5022] binder: 5021:5022 Acquire 1 refcount change on invalid ref 0 ret -22 [ 83.974335][ T5022] binder: 5021:5022 got transaction to invalid handle, 1 [ 84.093898][ T5022] binder: 5022:5021 cannot find target node [ 84.095630][ T5022] binder: 5021:5022 transaction call to 0:0 failed 23/29201/-22, size 0-0 line 3054 [ 84.117244][ T5022] binder: 5021:5022 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.131984][ T5022] binder: 5022 RLIMIT_NICE not set [ 84.133371][ T5022] binder: 5021:5022 ioctl c0306201 20000240 returned -11 [ 85.177949][ T5030] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 85.350444][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.772928][ T5106] binder: 5105:5106 ioctl c0306201 0 returned -14 [ 85.792745][ T5106] binder: 5105:5106 got transaction to invalid handle, 1 [ 85.794824][ T5106] binder: 5106:5105 cannot find target node [ 85.796573][ T5106] binder: 5105:5106 transaction call to 0:0 failed 27/29201/-22, size 0-0 line 3054 [ 85.847560][ T5111] binder: 5105:5111 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.872109][ T5111] binder: 5111 RLIMIT_NICE not set [ 85.878255][ T4390] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.934011][ T5025] sctp: failed to load transform for md5: -2 [ 86.345340][ T5118] syz.3.124 uses obsolete (PF_INET,SOCK_PACKET) [ 87.808133][ T5140] tipc: Enabled bearer , priority 0 [ 87.810712][ T5140] device syzkaller0 entered promiscuous mode [ 87.869797][ T5140] tipc: Resetting bearer [ 87.888985][ T5139] tipc: Resetting bearer [ 87.987610][ T5139] tipc: Disabling bearer [ 88.155997][ T5147] binder: 5146:5147 ioctl c0306201 0 returned -14 [ 88.160769][ T5147] binder: 5146:5147 got transaction to invalid handle, 1 [ 88.165086][ T5147] binder: 5147:5146 cannot find target node [ 88.169276][ T5147] binder: 5146:5147 transaction call to 0:0 failed 31/29201/-22, size 0-0 line 3054 [ 88.175742][ T5147] binder: 5146:5147 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.185332][ T5147] binder: 5146:5147 ioctl c0306201 20000240 returned -11 [ 88.190399][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.279468][ T5149] netlink: 312 bytes leftover after parsing attributes in process `syz.1.133'. [ 88.406798][ T4307] Bluetooth: hci4: link tx timeout [ 88.408491][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.411632][ T4307] Bluetooth: hci4: link tx timeout [ 88.413194][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.415851][ T4307] Bluetooth: hci4: link tx timeout [ 88.417476][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.425352][ T4307] Bluetooth: hci4: link tx timeout [ 88.426909][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.429441][ T4307] Bluetooth: hci4: link tx timeout [ 88.430929][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.433872][ T4307] Bluetooth: hci4: link tx timeout [ 88.435292][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.465061][ T4307] Bluetooth: hci4: link tx timeout [ 88.466628][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.471050][ T4307] Bluetooth: hci4: link tx timeout [ 88.472489][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.474807][ T4307] Bluetooth: hci4: link tx timeout [ 88.476386][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.483238][ T4307] Bluetooth: hci4: link tx timeout [ 88.484738][ T4307] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 90.546853][ T4307] Bluetooth: hci4: command 0x0406 tx timeout [ 90.928933][ T5245] tipc: Enabled bearer , priority 0 [ 90.944908][ T5245] device syzkaller0 entered promiscuous mode [ 90.981124][ T5245] tipc: Resetting bearer [ 90.991094][ T5244] tipc: Resetting bearer [ 91.078175][ T5244] tipc: Disabling bearer [ 91.124678][ T5249] binder: 5248:5249 ioctl c0306201 0 returned -14 [ 91.147255][ T5249] binder_user_error: 1 callbacks suppressed [ 91.147266][ T5249] binder: 5248:5249 got transaction to invalid handle, 1 [ 91.150929][ T5249] binder: 5249:5248 cannot find target node [ 91.152575][ T5249] binder: 5248:5249 transaction call to 0:0 failed 35/29201/-22, size 0-0 line 3054 [ 91.403780][ T5253] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 91.407631][ T5253] netlink: 'syz.3.141': attribute type 2 has an invalid length. [ 91.876218][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 92.085195][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 92.518201][ T5249] binder: 5248:5249 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 92.521633][ T5249] binder: 5249 RLIMIT_NICE not set [ 92.537424][ T5249] binder: 5248:5249 ioctl c0306201 20000240 returned -11 [ 92.557420][ T4390] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.227814][ T5349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'. [ 96.047885][ T4307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.058824][ T4307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.061651][ T4307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.064989][ T4307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.068818][ T4307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.070993][ T4307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.351961][ T5368] ubi31: attaching mtd0 [ 96.359909][ T5368] ubi31: scanning is finished [ 96.361365][ T5368] ubi31: empty MTD device detected [ 96.942677][ T5368] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 97.015783][ T5372] tipc: Enabled bearer , priority 0 [ 97.018504][ T5372] device syzkaller0 entered promiscuous mode [ 97.030037][ T5372] tipc: Resetting bearer [ 97.073794][ T5370] tipc: Resetting bearer [ 97.106270][ T5374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.158'. [ 97.147602][ T5370] tipc: Disabling bearer [ 97.465103][ T5383] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 97.472522][ T5383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.160'. [ 98.207136][ T4307] Bluetooth: hci5: command 0x0409 tx timeout [ 98.245733][ T5383] team0: Failed to send options change via netlink (err -105) [ 98.251919][ T5383] team0: Port device geneve0 added [ 98.566040][ T5379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.788273][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.791484][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.148715][ T5379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.155974][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 99.299191][ T5379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.488956][ T5379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.660577][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.662642][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.665308][ T5359] device bridge_slave_0 entered promiscuous mode [ 99.678907][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.681028][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.291987][ T5359] device bridge_slave_1 entered promiscuous mode [ 100.422188][ T4307] Bluetooth: hci5: command 0x041b tx timeout [ 100.737916][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.742538][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.277317][ T5359] team0: Port device team_slave_0 added [ 101.292047][ T5379] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.301297][ T5359] team0: Port device team_slave_1 added [ 101.325545][ T5379] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.344640][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.349058][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.377049][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.382977][ T5379] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.414680][ T5379] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.418311][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.420215][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.443294][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.628938][ T5359] device hsr_slave_0 entered promiscuous mode [ 101.941620][ T5359] device hsr_slave_1 entered promiscuous mode [ 102.357477][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.359716][ T5359] Cannot create hsr debugfs directory [ 102.364295][ T5580] device bridge0 entered promiscuous mode [ 102.366275][ T5580] device macvlan2 entered promiscuous mode [ 102.494199][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 102.614493][ T5594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.632875][ T5594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.426293][ T5359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.613491][ T4307] Bluetooth: hci5: command 0x0419 tx timeout [ 105.971303][ T5359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.216818][ T5776] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 107.219075][ T5776] netlink: 'syz.3.186': attribute type 2 has an invalid length. [ 107.378416][ T5359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.428429][ T5359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.452002][ T4307] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 107.458039][ T5782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.460616][ T5782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.651071][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.693776][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.696438][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.710318][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.717147][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.722031][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.724750][ T5688] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.726812][ T5688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.763252][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.772061][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.777383][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.785956][ T5688] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.788054][ T5688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.861226][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.870020][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.873959][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.884664][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.890076][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.893237][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.896291][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.029774][ T5799] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 108.637398][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.666157][ T5359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.681844][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.797445][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.800529][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.803217][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.467427][ T5809] xt_hashlimit: max too large, truncated to 1048576 [ 109.635486][ T5815] binder: 5814:5815 got transaction to invalid handle, 1 [ 109.638033][ T5815] binder: 5815:5814 cannot find target node [ 109.641972][ T5815] binder: 5814:5815 transaction call to 0:0 failed 39/29201/-22, size 0-0 line 3054 [ 109.649502][ T5815] binder: 5814:5815 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 109.717931][ T5815] binder: 5815 RLIMIT_NICE not set [ 109.719593][ T5815] binder: 5814:5815 ioctl c0306201 20000240 returned -11 [ 109.727828][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.730002][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.736432][ T1514] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.748067][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.857276][ T5820] tipc: Enabled bearer , priority 0 [ 109.860068][ T5820] device syzkaller0 entered promiscuous mode [ 109.888856][ T5820] tipc: Resetting bearer [ 109.923212][ T5818] tipc: Resetting bearer [ 109.977546][ T5818] tipc: Disabling bearer [ 109.986654][ T5801] loop3: detected capacity change from 0 to 32768 [ 110.009676][ T5801] ======================================================= [ 110.009676][ T5801] WARNING: The mand mount option has been deprecated and [ 110.009676][ T5801] and is ignored by this kernel. Remove the mand [ 110.009676][ T5801] option from the mount to silence this warning. [ 110.009676][ T5801] ======================================================= [ 110.120997][ T5801] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.145225][ T5836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.165208][ T5836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.374582][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.377995][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.443510][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.446492][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.450491][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.462486][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.475219][ T5359] device veth0_vlan entered promiscuous mode [ 110.495975][ T5359] device veth1_vlan entered promiscuous mode [ 110.556639][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.559716][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.562708][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.573150][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.588463][ T5359] device veth0_macvtap entered promiscuous mode [ 110.602426][ T5359] device veth1_macvtap entered promiscuous mode [ 110.646172][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.659485][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.670148][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.690156][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.703104][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.717579][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.731797][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.745295][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.758076][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.780960][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.783811][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.788571][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.829765][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.873889][ T4319] ocfs2: Unmounting device (7,3) on (node local) [ 111.780288][ T5865] binder: 5864:5865 got transaction to invalid handle, 1 [ 111.792187][ T5865] binder: 5865:5864 cannot find target node [ 111.793855][ T5865] binder: 5864:5865 transaction call to 0:0 failed 43/29201/-22, size 0-0 line 3054 [ 111.798639][ T5865] binder: 5864:5865 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 111.802645][ T5865] binder: 5865 RLIMIT_NICE not set [ 111.804088][ T5865] binder: 5864:5865 ioctl c0306201 20000240 returned -11 [ 111.806608][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.847518][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.850602][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.853127][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.856162][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.883343][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.886177][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.897410][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.900407][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.914210][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.916492][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.920432][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.951077][ T5359] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.953611][ T5359] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.955930][ T5359] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.967231][ T5359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.166994][ T47] Bluetooth: hci3: command 0x2016 tx timeout [ 112.193307][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 112.295536][ T47] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 112.299591][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.305946][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.421408][ T4677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.423883][ T4677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.433294][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.535139][ T4675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.542764][ T4675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.554107][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.109904][ T5900] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 113.112788][ T5900] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.925359][ T5888] loop3: detected capacity change from 0 to 32768 [ 113.982378][ T5888] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.123993][ T5917] binder: 5916:5917 got transaction to invalid handle, 1 [ 114.126262][ T5917] binder: 5917:5916 cannot find target node [ 114.141695][ T5917] binder: 5916:5917 transaction call to 0:0 failed 47/29201/-22, size 0-0 line 3054 [ 114.148259][ T5917] binder: 5916:5917 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 114.156621][ T5917] binder: 5917 RLIMIT_NICE not set [ 114.173310][ T5917] binder: 5916:5917 ioctl c0306201 20000240 returned -11 [ 114.192044][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.396590][ T4319] ocfs2: Unmounting device (7,3) on (node local) [ 115.162343][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 116.447254][ T47] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 116.453800][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.461160][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.479916][ T5924] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.482530][ T5924] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 116.585394][ T4978] device hsr_slave_0 left promiscuous mode [ 116.631743][ T4978] device hsr_slave_1 left promiscuous mode [ 116.706989][ T4978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.710213][ T4978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.712930][ T4978] device bridge_slave_1 left promiscuous mode [ 116.723462][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.772459][ T4978] device bridge_slave_0 left promiscuous mode [ 116.774449][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.219487][ T5964] binder: 5963:5964 got transaction to invalid handle, 1 [ 117.262303][ T5964] binder: 5964:5963 cannot find target node [ 117.263938][ T5964] binder: 5963:5964 transaction call to 0:0 failed 51/29201/-22, size 0-0 line 3054 [ 117.302904][ T5966] binder: 5963:5966 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 117.306501][ T5966] binder: 5966 RLIMIT_NICE not set [ 117.362985][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.566642][ T5968] loop3: detected capacity change from 0 to 32768 [ 118.605236][ T5968] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.998981][ T4319] ocfs2: Unmounting device (7,3) on (node local) [ 120.291393][ T4978] team0 (unregistering): Port device team_slave_1 removed [ 120.470720][ T4978] team0 (unregistering): Port device team_slave_0 removed [ 120.637643][ T4978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.857595][ T4978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.238710][ T4978] bond0 (unregistering): Released all slaves [ 123.512066][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 124.548675][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.551242][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.782174][ T6020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.825712][ T6029] netlink: 'syz.1.244': attribute type 10 has an invalid length. [ 124.895990][ T6029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.244'. [ 125.147244][ T6029] team0: Failed to send options change via netlink (err -105) [ 125.170031][ T6029] team0: Port device geneve0 added [ 125.369878][ T6020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.630474][ T6020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.507107][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.509053][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.567027][ T4307] Bluetooth: hci5: command 0x2016 tx timeout [ 126.585791][ T6020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.603054][ T6059] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 126.605720][ T6059] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 126.698796][ T6040] loop3: detected capacity change from 0 to 32768 [ 126.751209][ T6040] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.940374][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 127.142257][ T4319] ocfs2: Unmounting device (7,3) on (node local) [ 127.166531][ T6020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.199043][ T6020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.228227][ T6020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.251809][ T6020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.440328][ T47] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 128.153586][ T6095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.156159][ T6095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.278506][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.281121][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.330635][ T6106] block device autoloading is deprecated and will be removed. [ 128.732551][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 128.939058][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 131.234481][ T6138] binder: BINDER_SET_CONTEXT_MGR already set [ 131.236195][ T6138] binder: 6137:6138 ioctl 4018620d 20000040 returned -16 [ 131.249504][ T6138] binder: tried to use weak ref as strong ref [ 131.260093][ T6138] binder: 6137:6138 Acquire 1 refcount change on invalid ref 0 ret -22 [ 131.283891][ T6138] binder: 6137:6138 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 131.306762][ T6138] binder: 6138 RLIMIT_NICE not set [ 131.308225][ T6138] binder: 6137:6138 ioctl c0306201 20000240 returned -11 [ 132.291737][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 132.320202][ T47] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 133.425107][ T47] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 133.435589][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.464413][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.174250][ T6180] tipc: Enabling of bearer rejected, failed to enable media [ 137.089595][ T6198] binder: 6197:6198 tried to acquire reference to desc 0, got 1 instead [ 137.092659][ T6198] binder: 6197:6198 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 137.100590][ T6198] binder: 6198 RLIMIT_NICE not set [ 137.102103][ T6198] binder: 6197:6198 ioctl c0306201 20000240 returned -11 [ 137.108909][ T47] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 138.476680][ C1] sched: RT throttling activated [ 138.689358][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.692168][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.752439][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 138.817186][ T47] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 138.886004][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.890290][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.869033][ T6248] binder: 6247:6248 tried to acquire reference to desc 0, got 1 instead [ 139.885291][ T6248] binder: 6247:6248 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.892832][ T6248] binder: 6248 RLIMIT_NICE not set [ 139.915112][ T6248] binder: 6247:6248 ioctl c0306201 20000240 returned -11 [ 139.963600][ T6211] loop3: detected capacity change from 0 to 32768 [ 140.868653][ T6211] (syz.3.291,6211,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 140.909987][ T6211] (syz.3.291,6211,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 140.974935][ T47] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 142.346800][ T6284] netlink: 44 bytes leftover after parsing attributes in process `syz.4.307'. [ 143.528973][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.310'. [ 144.528935][ T6304] binder: 6301:6304 tried to acquire reference to desc 0, got 1 instead [ 144.537996][ T6304] binder: 6301:6304 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 144.541739][ T6304] binder: 6304 RLIMIT_NICE not set [ 144.543239][ T6304] binder: 6301:6304 ioctl c0306201 20000240 returned -11 [ 146.598057][ T6327] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 148.524807][ T6358] binder: 6355:6358 tried to acquire reference to desc 0, got 1 instead [ 148.549169][ T6358] binder: 6355:6358 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 148.561800][ T6358] binder: 6358 RLIMIT_NICE not set [ 148.563316][ T6358] binder: 6355:6358 ioctl c0306201 20000240 returned -11 [ 149.367075][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.369682][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.530037][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 151.430466][ T6420] tipc: Enabling of bearer rejected, failed to enable media [ 151.575454][ T6417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.661368][ T6400] loop4: detected capacity change from 0 to 32768 [ 152.365865][ T6400] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 153.639664][ T6390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.903670][ T4313] ocfs2: Unmounting device (7,4) on (node local) [ 154.947615][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 155.458733][ T6481] device syzkaller0 entered promiscuous mode [ 156.921390][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.927582][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.022043][ T6504] loop3: detected capacity change from 0 to 512 [ 157.996908][ T6504] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1) [ 158.216211][ T6512] binder: 6510:6512 tried to acquire reference to desc 0, got 1 instead [ 158.941881][ T4307] Bluetooth: hci3: command 0x0406 tx timeout [ 158.944632][ T4307] Bluetooth: hci0: command 0x0406 tx timeout [ 158.946411][ T4307] Bluetooth: hci2: command 0x0406 tx timeout [ 158.962981][ T6512] binder: 6510:6512 ioctl c0306201 0 returned -14 [ 159.001484][ T4415] binder: release 6510:6514 transaction 74 out, still active [ 159.003925][ T4415] binder: undelivered TRANSACTION_COMPLETE [ 159.090483][ T22] binder: send failed reply for transaction 74, target dead [ 159.383314][ T6536] device syzkaller0 entered promiscuous mode [ 160.319282][ T6549] netlink: 44 bytes leftover after parsing attributes in process `syz.5.367'. [ 160.398518][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.402962][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.059990][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 164.993141][ T6645] binder: 6642:6645 tried to acquire reference to desc 0, got 1 instead [ 165.023219][ T6645] binder: 6642:6645 ioctl c0306201 0 returned -14 [ 165.142633][ T7] binder: release 6642:6645 transaction 79 out, still active [ 165.144709][ T7] binder: undelivered TRANSACTION_COMPLETE [ 165.313275][ T24] binder: send failed reply for transaction 79, target dead [ 165.725738][ T6666] device syzkaller0 entered promiscuous mode [ 166.678248][ T6677] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 166.683777][ T6677] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 166.740226][ T6677] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 166.766849][ T6677] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 166.784492][ T6677] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 166.830843][ T6677] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 166.854170][ T6677] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 168.462559][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 168.547306][ T6764] binder: 6759:6764 tried to acquire reference to desc 0, got 1 instead [ 168.612314][ T7] binder: release 6759:6764 transaction 84 out, still active [ 168.614685][ T7] binder: undelivered TRANSACTION_COMPLETE [ 168.885555][ T7] binder: send failed reply for transaction 84, target dead [ 169.820963][ T6779] binder: 6775:6779 got transaction to invalid handle, 1 [ 169.824227][ T6779] binder: 6779:6775 cannot find target node [ 169.830232][ T6779] binder: 6775:6779 transaction call to 0:0 failed 88/29201/-22, size 0-0 line 3054 [ 169.846248][ T6779] binder: 6775:6779 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 169.861578][ T6779] binder: 6779 RLIMIT_NICE not set [ 169.865290][ T6779] binder: 6775:6779 ioctl c0306201 20000240 returned -11 [ 169.893883][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.953748][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.976889][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.360665][ T6799] loop1: detected capacity change from 0 to 2048 [ 170.376560][ T6799] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.429807][ T6802] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.713381][ T6809] mkiss: ax0: crc mode is auto. [ 172.366912][ T4415] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.563685][ T4415] usb 1-1: device descriptor read/64, error -71 [ 172.750205][ T6894] binder: 6893:6894 tried to acquire reference to desc 0, got 1 instead [ 172.767353][ T24] binder: release 6893:6894 transaction 93 out, still active [ 172.769463][ T24] binder: undelivered TRANSACTION_COMPLETE [ 172.816907][ T24] binder: send failed reply for transaction 93, target dead [ 172.826872][ T4415] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.976863][ T4415] usb 1-1: device descriptor read/64, error -71 [ 173.095316][ T6906] binder: 6904:6906 got transaction to invalid handle, 1 [ 173.097778][ T6906] binder: 6906:6904 cannot find target node [ 173.099553][ T6906] binder: 6904:6906 transaction call to 0:0 failed 97/29201/-22, size 0-0 line 3054 [ 173.102687][ T6906] binder: 6904:6906 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 173.106378][ T6906] binder: 6906 RLIMIT_NICE not set [ 173.107861][ T6906] binder: 6904:6906 ioctl c0306201 20000240 returned -11 [ 173.108407][ T4415] usb usb1-port1: attempt power cycle [ 173.110415][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.537376][ T4415] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 173.545186][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 173.570087][ T4415] usb 1-1: device descriptor read/8, error -71 [ 173.887228][ T4415] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 174.005169][ T4415] usb 1-1: device descriptor read/8, error -71 [ 174.170718][ T4415] usb usb1-port1: unable to enumerate USB device [ 175.403086][ T6944] binder: 6943:6944 tried to acquire reference to desc 0, got 1 instead [ 175.412097][ T4379] binder: release 6943:6944 transaction 102 out, still active [ 175.414227][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 175.524127][ T4379] binder: send failed reply for transaction 102, target dead [ 176.312473][ T6948] loop3: detected capacity change from 0 to 2048 [ 176.392618][ T6948] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.498277][ T7029] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.778373][ T7039] mkiss: ax0: crc mode is auto. [ 178.777604][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 178.878179][ T7033] loop4: detected capacity change from 0 to 32768 [ 179.685885][ T7033] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 179.905879][ T7079] binder: 7076:7079 tried to acquire reference to desc 0, got 1 instead [ 179.922237][ T4379] binder: release 7076:7079 transaction 107 out, still active [ 179.924387][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 181.626994][ T1514] binder: send failed reply for transaction 107, target dead [ 181.989395][ T7158] binder: 7157:7158 tried to acquire reference to desc 0, got 1 instead [ 181.992243][ T7158] binder: 7157:7158 ioctl c0306201 0 returned -14 [ 182.041535][ T4313] ocfs2: Unmounting device (7,4) on (node local) [ 182.157042][ T7158] binder: 7157:7158 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 182.160519][ T7158] binder: 7158 RLIMIT_NICE not set [ 182.194708][ T7158] binder: 7157:7158 ioctl c0306201 20000240 returned -11 [ 183.210510][ T7166] loop1: detected capacity change from 0 to 2048 [ 183.454182][ T7166] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 183.524634][ T7177] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.789144][ T7182] mkiss: ax0: crc mode is auto. [ 184.316386][ T7195] binder: 7193:7195 tried to acquire reference to desc 0, got 1 instead [ 184.355465][ T4343] binder: release 7193:7195 transaction 116 out, still active [ 184.358176][ T4343] binder: undelivered TRANSACTION_COMPLETE [ 184.463666][ T4343] binder: send failed reply for transaction 116, target dead [ 185.609785][ T7210] binder: 7209:7210 tried to acquire reference to desc 0, got 1 instead [ 185.630110][ T7210] binder: 7209:7210 ioctl c0306201 0 returned -14 [ 185.637155][ T7210] binder: 7209:7210 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 185.646463][ T7210] binder: 7210 RLIMIT_NICE not set [ 185.658315][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 185.664360][ T7210] binder: 7209:7210 ioctl c0306201 20000240 returned -11 [ 187.369122][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.371013][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.911610][ T7239] loop3: detected capacity change from 0 to 2048 [ 187.998951][ T7239] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 188.155793][ T7254] tipc: Enabled bearer , priority 0 [ 188.526324][ T7259] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.534124][ T7257] tipc: Resetting bearer [ 188.754265][ T7264] mkiss: ax0: crc mode is auto. [ 188.867601][ T7253] tipc: Disabling bearer [ 188.895037][ T7270] binder: 7269:7270 tried to acquire reference to desc 0, got 1 instead [ 188.898084][ T7270] binder: 7269:7270 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 188.901859][ T7270] binder: 7270 RLIMIT_NICE not set [ 188.903620][ T7270] binder: 7269:7270 ioctl c0306201 20000240 returned -11 [ 190.181332][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 191.134178][ T7284] loop3: detected capacity change from 0 to 32768 [ 191.375854][ T7284] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 191.982335][ T7384] loop4: detected capacity change from 0 to 512 [ 192.022205][ T7384] EXT4-fs (loop4): first meta block group too large: 4294967295 (group descriptor block count 1) [ 192.302119][ T4319] ocfs2: Unmounting device (7,3) on (node local) [ 193.016203][ T7397] binder: 7396:7397 tried to acquire reference to desc 0, got 1 instead [ 193.019468][ T7397] binder: 7396:7397 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 193.023069][ T7397] binder: 7397 RLIMIT_NICE not set [ 193.024480][ T7397] binder: 7396:7397 ioctl c0306201 20000240 returned -11 [ 193.260313][ T7401] loop1: detected capacity change from 0 to 2048 [ 193.263854][ T7401] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 193.297027][ T7403] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.509121][ T7408] mkiss: ax0: crc mode is auto. [ 195.610426][ T7498] loop3: detected capacity change from 0 to 512 [ 195.981716][ T7498] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1) [ 196.052181][ T7500] binder: 7499:7500 tried to acquire reference to desc 0, got 1 instead [ 196.066405][ T6018] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.069217][ T7500] binder: 7499:7500 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 196.076035][ T7500] binder: 7500 RLIMIT_NICE not set [ 196.078006][ T7500] binder: 7499:7500 ioctl c0306201 20000240 returned -11 [ 196.969539][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 197.231446][ T7518] device syzkaller0 entered promiscuous mode [ 198.288534][ T7534] loop1: detected capacity change from 0 to 2048 [ 198.309833][ T7534] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 199.273891][ T7606] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.485268][ T7611] mkiss: ax0: crc mode is auto. [ 200.025180][ T7615] binder: 7614:7615 tried to acquire reference to desc 0, got 1 instead [ 200.051610][ T7615] binder: 7614:7615 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.062090][ T7615] binder: 7615 RLIMIT_NICE not set [ 200.063543][ T7615] binder: 7614:7615 ioctl c0306201 20000240 returned -11 [ 200.387687][ T7622] loop0: detected capacity change from 0 to 512 [ 200.416823][ T7622] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1) [ 200.425164][ T7625] device syzkaller0 entered promiscuous mode [ 200.747349][ T6018] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.374319][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 203.969464][ T7718] loop1: detected capacity change from 0 to 2048 [ 204.164333][ T7718] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 204.220201][ T7729] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.223149][ T7728] binder: 7727:7728 tried to acquire reference to desc 0, got 1 instead [ 204.389555][ T7718] mkiss: ax0: crc mode is auto. [ 204.394676][ T7732] binder: 7727:7732 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 204.398753][ T7732] binder: 7732 RLIMIT_NICE not set [ 204.682752][ T7743] device syzkaller0 entered promiscuous mode [ 207.021390][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 207.156209][ T7776] binder: 7775:7776 tried to acquire reference to desc 0, got 1 instead [ 207.161897][ T7776] binder: 7775:7776 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.165844][ T7776] binder: 7776 RLIMIT_NICE not set [ 207.171623][ T7776] binder: 7775:7776 ioctl c0306201 20000240 returned -11 [ 207.396122][ T7784] loop0: detected capacity change from 0 to 512 [ 207.433390][ T7784] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1) [ 207.488501][ T7782] loop4: detected capacity change from 0 to 2048 [ 207.494055][ T7782] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 207.517192][ T7789] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.911255][ T7792] mkiss: ax0: crc mode is auto. [ 208.237611][ T7787] tipc: Enabling of bearer rejected, failed to enable media [ 208.587123][ T4317] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 210.718279][ T7833] loop0: detected capacity change from 0 to 2048 [ 210.732219][ T7833] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 210.814472][ T7840] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.089368][ T7849] mkiss: ax0: crc mode is auto. [ 211.569551][ T7850] binder: 7844:7850 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 211.604417][ T7848] binder: 7844:7848 got transaction to invalid handle, 1 [ 211.606566][ T7848] binder: 7848:7844 cannot find target node [ 211.630717][ T7848] binder: 7844:7848 transaction call to 0:0 failed 146/29201/-22, size 0-0 line 3054 [ 211.650628][ T7848] binder: 7844:7848 ioctl c0306201 0 returned -14 [ 211.666336][ T4387] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.865101][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 211.976209][ T4317] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 212.125097][ T7859] loop1: detected capacity change from 0 to 32768 [ 212.156531][ T7859] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 214.443688][ T7955] loop3: detected capacity change from 0 to 512 [ 214.538609][ T7955] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1) [ 214.653422][ T4305] ocfs2: Unmounting device (7,1) on (node local) [ 216.360757][ T4307] Bluetooth: hci4: command 0x0406 tx timeout [ 216.662659][ T7979] binder: 7974:7979 tried to acquire reference to desc 0, got 1 instead [ 216.686078][ T7979] binder: 7974:7979 ioctl c0306201 0 returned -14 [ 216.698879][ T3884] binder: release 7974:7979 transaction 151 out, still active [ 216.700999][ T3884] binder: undelivered TRANSACTION_COMPLETE [ 217.539681][ T3884] binder: send failed reply for transaction 151, target dead [ 217.627871][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 217.761114][ T7978] loop3: detected capacity change from 0 to 32768 [ 217.794884][ T7978] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 217.892397][ T4317] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 218.762725][ T4319] ocfs2: Unmounting device (7,3) on (node local) [ 219.714054][ T8080] loop4: detected capacity change from 0 to 512 [ 219.858873][ T8080] EXT4-fs (loop4): first meta block group too large: 4294967295 (group descriptor block count 1) [ 219.933089][ T8084] binder: 8083:8084 tried to acquire reference to desc 0, got 1 instead [ 220.057081][ T4343] binder: release 8083:8084 transaction 156 out, still active [ 220.059216][ T4343] binder: undelivered TRANSACTION_COMPLETE [ 220.287933][ T4379] binder: send failed reply for transaction 156, target dead [ 220.806877][ T4307] Bluetooth: hci5: command 0x0406 tx timeout [ 222.587344][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 224.242936][ T4307] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 228.589599][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 228.994061][ T8252] binder: 8251:8252 tried to acquire reference to desc 0, got 1 instead [ 229.001205][ T3884] binder: release 8251:8252 transaction 161 out, still active [ 229.003620][ T3884] binder: undelivered TRANSACTION_COMPLETE [ 229.043399][ T4387] binder: send failed reply for transaction 161, target dead [ 229.381891][ T8258] loop0: detected capacity change from 0 to 512 [ 229.431955][ T8258] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1) [ 230.757583][ T4307] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 233.611325][ T8355] loop1: detected capacity change from 0 to 2048 [ 233.625681][ T8355] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 233.656595][ T8358] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.187911][ T8364] mkiss: ax0: crc mode is auto. [ 234.554170][ T8368] binder: 8366:8368 tried to acquire reference to desc 0, got 1 instead [ 234.625036][ T4553] binder: release 8366:8370 transaction 166 out, still active [ 234.630354][ T4553] binder: undelivered TRANSACTION_COMPLETE [ 234.691420][ T4387] binder: send failed reply for transaction 166, target dead [ 234.780228][ T8377] loop0: detected capacity change from 0 to 512 [ 234.860585][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 234.878034][ T8377] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1) [ 237.440019][ T8470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.605'. [ 237.996993][ T4387] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 238.215988][ T4387] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 238.218592][ T4387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.220874][ T4387] usb 1-1: Product: syz [ 238.222087][ T4387] usb 1-1: Manufacturer: syz [ 238.223458][ T4387] usb 1-1: SerialNumber: syz [ 238.299277][ T4387] usb 1-1: config 0 descriptor?? [ 238.341754][ T4387] gspca_main: spca501-2.14.0 probing 0000:0000 [ 238.949707][ T4387] gspca_spca501: reg write: error -110 [ 238.953606][ T4387] spca501 1-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 238.959734][ T4387] spca501: probe of 1-1:0.0 failed with error -22 [ 238.972640][ T4387] usb 1-1: Found UVC 0.00 device syz (0000:0000) [ 238.982444][ T4387] usb 1-1: No valid video chain found. [ 239.652203][ T4387] usb 1-1: USB disconnect, device number 9 [ 239.955050][ T8485] loop1: detected capacity change from 0 to 2048 [ 239.972822][ T8485] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 240.001882][ T8492] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.191413][ T8497] binder: 8496:8497 tried to acquire reference to desc 0, got 1 instead [ 240.195185][ T4387] binder: release 8496:8497 transaction 171 out, still active [ 240.201899][ T4387] binder: undelivered TRANSACTION_COMPLETE [ 240.294331][ T8498] mkiss: ax0: crc mode is auto. [ 241.007135][ T4343] binder: send failed reply for transaction 171, target dead [ 241.072039][ T8506] loop0: detected capacity change from 0 to 512 [ 241.122365][ T8506] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1) [ 242.903316][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 243.279291][ T8535] tipc: Enabling of bearer rejected, failed to enable media [ 244.427017][ T8549] binder: 8541:8549 tried to acquire reference to desc 0, got 1 instead [ 244.462157][ T4387] binder: release 8541:8542 transaction 176 out, still active [ 244.464514][ T4387] binder: undelivered TRANSACTION_COMPLETE [ 244.566556][ T4387] binder: send failed reply for transaction 176, target dead [ 244.701045][ T8559] loop4: detected capacity change from 0 to 2048 [ 244.704483][ T8559] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 244.739837][ T8560] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.767358][ T8563] loop3: detected capacity change from 0 to 512 [ 244.781981][ T8563] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1) [ 245.402938][ T8564] mkiss: ax0: crc mode is auto. [ 246.710789][ T8579] tipc: Enabled bearer , priority 0 [ 246.745105][ T8577] tipc: Disabling bearer [ 246.958510][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 248.809991][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.816009][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.640856][ T8646] tipc: Enabling of bearer rejected, failed to enable media [ 250.734563][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 251.676135][ T4968] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.733888][ T4968] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.791536][ T4968] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.855523][ T4968] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.181727][ T4317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.195695][ T4317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.201945][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.207545][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.211189][ T4317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.213542][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.337933][ T4968] tipc: Left network mode [ 254.203173][ T8712] tipc: Started in network mode [ 254.204685][ T8712] tipc: Node identity f64809365217, cluster identity 4711 [ 254.227030][ T8712] tipc: Enabled bearer , priority 0 [ 254.247012][ T4307] Bluetooth: hci0: command 0x0409 tx timeout [ 254.254371][ T8711] tipc: Disabling bearer [ 255.001936][ T8673] chnl_net:caif_netlink_parms(): no params data found [ 255.650698][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.656928][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.659722][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.663533][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.666046][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.670785][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.321738][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.326897][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 256.341888][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.368016][ T8673] device bridge_slave_0 entered promiscuous mode [ 256.452993][ T4968] device hsr_slave_0 left promiscuous mode [ 256.497146][ T4968] device hsr_slave_1 left promiscuous mode [ 256.577949][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.580082][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.582984][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.585000][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.603859][ T4968] device bridge_slave_1 left promiscuous mode [ 256.605565][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.701792][ T4968] device bridge_slave_0 left promiscuous mode [ 256.703660][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.780630][ T4968] device bridge0 left promiscuous mode [ 256.880248][ T4968] device veth1_macvtap left promiscuous mode [ 256.882232][ T4968] device veth0_macvtap left promiscuous mode [ 256.885173][ T4968] device veth1_vlan left promiscuous mode [ 256.894389][ T4968] device veth0_vlan left promiscuous mode [ 257.257644][ T4968] team0 (unregistering): Port device geneve0 removed [ 257.686934][ T4307] Bluetooth: hci1: command 0x0409 tx timeout [ 258.406848][ T4307] Bluetooth: hci0: command 0x040f tx timeout [ 259.029641][ T4968] team0 (unregistering): Port device team_slave_1 removed [ 259.209643][ T4968] team0 (unregistering): Port device team_slave_0 removed [ 259.387624][ T4968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.587547][ T4968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.776819][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 260.486838][ T4307] Bluetooth: hci0: command 0x0419 tx timeout [ 261.856976][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 261.878607][ T4968] bond0 (unregistering): Released all slaves [ 262.111091][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.113127][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.115722][ T8673] device bridge_slave_1 entered promiscuous mode [ 262.133497][ T8783] tipc: Enabling of bearer rejected, failed to enable media [ 262.245011][ T8673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.258142][ T8673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.327317][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 262.405027][ T8673] team0: Port device team_slave_0 added [ 262.450427][ T8673] team0: Port device team_slave_1 added [ 262.692576][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.704608][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.753759][ T8673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.784281][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.799954][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.855932][ T8673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.900710][ T8740] chnl_net:caif_netlink_parms(): no params data found [ 263.128813][ T8673] device hsr_slave_0 entered promiscuous mode [ 263.167228][ T8673] device hsr_slave_1 entered promiscuous mode [ 263.416826][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.423480][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.437896][ T8740] device bridge_slave_0 entered promiscuous mode [ 263.443598][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.445790][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.454835][ T8740] device bridge_slave_1 entered promiscuous mode [ 263.479003][ T8740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.483818][ T8740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.544558][ T8740] team0: Port device team_slave_0 added [ 263.600735][ T8740] team0: Port device team_slave_1 added [ 263.688491][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.690417][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.740086][ T8740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.813524][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.815536][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.837174][ T8740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.927418][ T4307] Bluetooth: hci1: command 0x0419 tx timeout [ 264.461886][ T8740] device hsr_slave_0 entered promiscuous mode [ 264.531960][ T8740] device hsr_slave_1 entered promiscuous mode [ 264.586878][ T8740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.589108][ T8740] Cannot create hsr debugfs directory [ 264.680576][ T8673] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.749592][ T8673] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 265.056805][ T8673] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 265.122620][ T8673] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 265.417696][ T8740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 265.476034][ T8740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 265.533931][ T8740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.569935][ T8740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.615154][ T8673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.730270][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.732853][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.786961][ T8673] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.202660][ T4968] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.238583][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 266.251952][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.254856][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.259135][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.261177][ T4962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.328624][ T4968] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.339356][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.342253][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.345576][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.361784][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.363971][ T4962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.393013][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.513480][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.546462][ T8740] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.654457][ T8740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.665674][ T8740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.710730][ T4968] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.731188][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.733854][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.736489][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.759077][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.773326][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.775428][ T4503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.798206][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.833314][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.858087][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.860231][ T4503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.862747][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.891747][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.896465][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.931028][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.936163][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.962453][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.975606][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.985140][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.015613][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.029281][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.057396][ T4968] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.352821][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.355465][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.361551][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.373110][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.394904][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.421058][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.424038][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.431740][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.435574][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.491603][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.493807][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.495987][ T4968] tipc: Left network mode [ 267.511723][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.513863][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.516559][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.537358][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.540058][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.552691][ T8673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.083778][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.103389][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.105649][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.670580][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.673875][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.797742][ T8740] device veth0_vlan entered promiscuous mode [ 268.901364][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.904378][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.907966][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.924246][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.045477][ T8740] device veth1_vlan entered promiscuous mode [ 269.323744][ T8740] device veth0_macvtap entered promiscuous mode [ 269.326886][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.331128][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.340873][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.371151][ T8740] device veth1_macvtap entered promiscuous mode [ 269.434834][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.445792][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.451458][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.494082][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.503285][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.505998][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.533126][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.536292][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.540339][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.543025][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.562415][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.580147][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.690711][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.693654][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.715288][ T8673] device veth0_vlan entered promiscuous mode [ 269.736400][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.740193][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.757113][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.765743][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.768961][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.787302][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.790100][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.806017][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.816884][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.819880][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.840537][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.853807][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.857162][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.859746][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.877668][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.889760][ T8673] device veth1_vlan entered promiscuous mode [ 270.322648][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.325549][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.332862][ T8740] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.335263][ T8740] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.338381][ T8740] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.340832][ T8740] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.386898][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.708'. [ 270.454436][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.458183][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.975887][ T8673] device veth0_macvtap entered promiscuous mode [ 270.981876][ T8673] device veth1_macvtap entered promiscuous mode [ 271.218591][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.221472][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.224217][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.260280][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.277330][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.280701][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.283703][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.286966][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.296641][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.299969][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.304888][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.322544][ T4968] device hsr_slave_0 left promiscuous mode [ 271.357429][ T4968] device hsr_slave_1 left promiscuous mode [ 271.397157][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.399456][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.413007][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.415174][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.424880][ T4968] device bridge_slave_1 left promiscuous mode [ 271.427974][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.463845][ T4968] device bridge_slave_0 left promiscuous mode [ 271.465745][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.697846][ T4968] device veth1_macvtap left promiscuous mode [ 271.699819][ T4968] device veth0_macvtap left promiscuous mode [ 271.703757][ T4968] device veth1_vlan left promiscuous mode [ 271.706191][ T4968] device veth0_vlan left promiscuous mode [ 272.069470][ T9037] rdma_op 00000000921f99d1 conn xmit_rdma 0000000000000000 [ 272.194182][ T4968] team0 (unregistering): Port device geneve0 removed [ 274.189066][ T4968] team0 (unregistering): Port device team_slave_1 removed [ 274.379078][ T4968] team0 (unregistering): Port device team_slave_0 removed [ 274.557563][ T4968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.759113][ T4968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.115977][ T4968] bond0 (unregistering): Released all slaves [ 277.372927][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.379809][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.382610][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.385428][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.397647][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.400663][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.403442][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.406284][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.411438][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.414327][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.419472][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.422547][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.426498][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.431729][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.719'. [ 277.434277][ T9068] tipc: Enabling of bearer rejected, failed to enable media [ 277.478356][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.481279][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.548877][ T8673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.551380][ T8673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.553803][ T8673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.556169][ T8673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.948689][ T5774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.082576][ T5774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.100231][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.186492][ T5774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.189901][ T5774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.204176][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.452151][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.454486][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.515945][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.766347][ T4503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.501973][ T4503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.532888][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.451911][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.735'. [ 284.385109][ T9184] ================================================================== [ 284.387480][ T9184] BUG: KASAN: use-after-free in rose_transmit_link+0x4f8/0x66c [ 284.389570][ T9184] Read of size 1 at addr ffff0000f2995c32 by task syz.7.743/9184 [ 284.391704][ T9184] [ 284.392381][ T9184] CPU: 0 PID: 9184 Comm: syz.7.743 Not tainted 6.1.146-syzkaller #0 [ 284.394689][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.397481][ T9184] Call trace: [ 284.398447][ T9184] dump_backtrace+0x1c8/0x1f4 [ 284.399773][ T9184] show_stack+0x2c/0x3c [ 284.400943][ T9184] __dump_stack+0x30/0x40 [ 284.402176][ T9184] dump_stack_lvl+0xf8/0x160 [ 284.403481][ T9184] print_address_description+0x88/0x200 [ 284.405081][ T9184] print_report+0x50/0x68 [ 284.406276][ T9184] kasan_report+0xa8/0x100 [ 284.407538][ T9184] __asan_report_load1_noabort+0x2c/0x38 [ 284.409100][ T9184] rose_transmit_link+0x4f8/0x66c [ 284.410469][ T9184] rose_write_internal+0xeec/0x17c0 [ 284.411967][ T9184] rose_release+0x224/0x518 [ 284.413228][ T9184] sock_close+0xb4/0x1f8 [ 284.414438][ T9184] __fput+0x1bc/0x7c0 [ 284.415551][ T9184] ____fput+0x20/0x30 [ 284.416712][ T9184] task_work_run+0x1ec/0x270 [ 284.418031][ T9184] get_signal+0x1120/0x1310 [ 284.419306][ T9184] do_notify_resume+0x340/0x2b0c [ 284.420679][ T9184] el0_svc+0x98/0x138 [ 284.421862][ T9184] el0t_64_sync_handler+0x84/0xf0 [ 284.423311][ T9184] el0t_64_sync+0x18c/0x190 [ 284.424512][ T9184] [ 284.425194][ T9184] Allocated by task 6397: [ 284.426394][ T9184] kasan_set_track+0x4c/0x80 [ 284.427734][ T9184] kasan_save_alloc_info+0x28/0x34 [ 284.429287][ T9184] __kasan_kmalloc+0xa0/0xb8 [ 284.430592][ T9184] kmalloc_trace+0x7c/0x94 [ 284.431796][ T9184] rose_add_node+0x1f4/0xba4 [ 284.433121][ T9184] rose_rt_ioctl+0xa04/0xde4 [ 284.434453][ T9184] rose_ioctl+0x378/0xb80 [ 284.435691][ T9184] sock_do_ioctl+0xf8/0x240 [ 284.437027][ T9184] sock_ioctl+0x5c4/0x840 [ 284.438227][ T9184] __arm64_sys_ioctl+0x14c/0x1c8 [ 284.439601][ T9184] invoke_syscall+0x98/0x2bc [ 284.440860][ T9184] el0_svc_common+0x138/0x258 [ 284.442189][ T9184] do_el0_svc+0x58/0x13c [ 284.443571][ T9184] el0_svc+0x58/0x138 [ 284.444694][ T9184] el0t_64_sync_handler+0x84/0xf0 [ 284.446105][ T9184] el0t_64_sync+0x18c/0x190 [ 284.447345][ T9184] [ 284.448012][ T9184] Freed by task 9182: [ 284.449090][ T9184] kasan_set_track+0x4c/0x80 [ 284.450331][ T9184] kasan_save_free_info+0x3c/0x60 [ 284.451729][ T9184] ____kasan_slab_free+0x148/0x1b0 [ 284.453197][ T9184] __kasan_slab_free+0x18/0x28 [ 284.454532][ T9184] slab_free_freelist_hook+0x16c/0x1ec [ 284.456043][ T9184] __kmem_cache_free+0xc0/0x224 [ 284.457427][ T9184] kfree+0xd0/0x1ac [ 284.458512][ T9184] rose_remove_neigh+0x23c/0x2b8 [ 284.459867][ T9184] rose_rt_device_down+0x2d4/0x330 [ 284.461305][ T9184] rose_device_event+0x5d8/0x68c [ 284.462729][ T9184] raw_notifier_call_chain+0xd4/0x164 [ 284.464225][ T9184] __dev_notify_flags+0x250/0x46c [ 284.465713][ T9184] dev_change_flags+0xc8/0x154 [ 284.467061][ T9184] dev_ifsioc+0x524/0xed0 [ 284.468301][ T9184] dev_ioctl+0x4c8/0xc8c [ 284.469555][ T9184] sock_do_ioctl+0x18c/0x240 [ 284.470896][ T9184] sock_ioctl+0x5c4/0x840 [ 284.472078][ T9184] __arm64_sys_ioctl+0x14c/0x1c8 [ 284.473447][ T9184] invoke_syscall+0x98/0x2bc [ 284.474776][ T9184] el0_svc_common+0x138/0x258 [ 284.476106][ T9184] do_el0_svc+0x58/0x13c [ 284.477294][ T9184] el0_svc+0x58/0x138 [ 284.478410][ T9184] el0t_64_sync_handler+0x84/0xf0 [ 284.479831][ T9184] el0t_64_sync+0x18c/0x190 [ 284.481085][ T9184] [ 284.481729][ T9184] The buggy address belongs to the object at ffff0000f2995c00 [ 284.481729][ T9184] which belongs to the cache kmalloc-512 of size 512 [ 284.485683][ T9184] The buggy address is located 50 bytes inside of [ 284.485683][ T9184] 512-byte region [ffff0000f2995c00, ffff0000f2995e00) [ 284.489379][ T9184] [ 284.490028][ T9184] The buggy address belongs to the physical page: [ 284.491858][ T9184] page:0000000030c911f0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x132994 [ 284.494716][ T9184] head:0000000030c911f0 order:2 compound_mapcount:0 compound_pincount:0 [ 284.497024][ T9184] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 284.499353][ T9184] raw: 05ffc00000010200 fffffc0003d46100 dead000000000002 ffff0000c0002600 [ 284.501705][ T9184] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 284.504107][ T9184] page dumped because: kasan: bad access detected [ 284.505974][ T9184] [ 284.506635][ T9184] Memory state around the buggy address: [ 284.508224][ T9184] ffff0000f2995b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 284.510490][ T9184] ffff0000f2995b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 284.512782][ T9184] >ffff0000f2995c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.515067][ T9184] ^ [ 284.516617][ T9184] ffff0000f2995c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.518849][ T9184] ffff0000f2995d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.521093][ T9184] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.558270][ T9187] netlink: 'syz.6.744': attribute type 10 has an invalid length. [ 284.560468][ T9187] netlink: 40 bytes leftover after parsing attributes in process `syz.6.744'. [ 284.686422][ T9187] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 285.037899][ T9184] Disabling lock debugging due to kernel taint [ 285.039895][ T9184] ------------[ cut here ]------------ [ 285.041315][ T9184] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 285.044918][ T9184] WARNING: CPU: 0 PID: 9184 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 285.047557][ T9184] Modules linked in: [ 285.048588][ T9184] CPU: 0 PID: 9184 Comm: syz.7.743 Tainted: G B 6.1.146-syzkaller #0 [ 285.051183][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.053967][ T9184] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 285.056116][ T9184] pc : debug_print_object+0x148/0x1d4 [ 285.057679][ T9184] lr : debug_print_object+0x148/0x1d4 [ 285.059216][ T9184] sp : ffff800020d37620 [ 285.060318][ T9184] x29: ffff800020d37620 x28: dfff800000000000 x27: 0000000000000002 [ 285.062557][ T9184] x26: ffff8000150b0000 x25: ffff8000083ae084 x24: dfff800000000000 [ 285.064754][ T9184] x23: 0000000000000000 x22: ffff800010ac6a88 x21: ffff800011f9a440 [ 285.067061][ T9184] x20: ffff800011acad00 x19: ffff800011f99f80 x18: ffff800011aabce0 [ 285.069254][ T9184] x17: 203a657079742074 x16: ffff800008042c60 x15: 0000000000000002 [ 285.071413][ T9184] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 285.073566][ T9184] x11: 000000000002b61d x10: ffff80002c90a000 x9 : f06c015734d4c100 [ 285.075841][ T9184] x8 : f06c015734d4c100 x7 : 0000000000000001 x6 : 0000000000000001 [ 285.078024][ T9184] x5 : ffff800020d370b8 x4 : ffff800015194800 x3 : ffff80000852e350 [ 285.080277][ T9184] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 285.082521][ T9184] Call trace: [ 285.083425][ T9184] debug_print_object+0x148/0x1d4 [ 285.084779][ T9184] debug_object_assert_init+0x250/0x2c8 [ 285.086380][ T9184] timer_delete+0x48/0x1e8 [ 285.087645][ T9184] rose_transmit_link+0x43c/0x66c [ 285.089081][ T9184] rose_write_internal+0xeec/0x17c0 [ 285.090475][ T9184] rose_release+0x224/0x518 [ 285.091676][ T9184] sock_close+0xb4/0x1f8 [ 285.092938][ T9184] __fput+0x1bc/0x7c0 [ 285.094040][ T9184] ____fput+0x20/0x30 [ 285.095130][ T9184] task_work_run+0x1ec/0x270 [ 285.096397][ T9184] get_signal+0x1120/0x1310 [ 285.097832][ T9184] do_notify_resume+0x340/0x2b0c [ 285.099369][ T9184] el0_svc+0x98/0x138 [ 285.100675][ T9184] el0t_64_sync_handler+0x84/0xf0 [ 285.102045][ T9184] el0t_64_sync+0x18c/0x190 [ 285.103317][ T9184] irq event stamp: 1011 [ 285.104453][ T9184] hardirqs last enabled at (1011): [] finish_lock_switch+0xb0/0x1c4 [ 285.107199][ T9184] hardirqs last disabled at (1010): [] __schedule+0x298/0x1b2c [ 285.109837][ T9184] softirqs last enabled at (638): [] lock_sock_nested+0xe0/0x130 [ 285.112477][ T9184] softirqs last disabled at (636): [] lock_sock_nested+0x88/0x130 [ 285.115235][ T9184] ---[ end trace 0000000000000000 ]--- [ 285.828804][ T4962] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.938496][ T4962] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.038756][ T4962] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.099728][ T4962] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.190589][ T4962] device hsr_slave_0 left promiscuous mode [ 288.227326][ T4962] device hsr_slave_1 left promiscuous mode [ 288.307229][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.309387][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.311900][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.314020][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.316438][ T4962] device bridge_slave_1 left promiscuous mode [ 288.318417][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.357643][ T4962] device bridge_slave_0 left promiscuous mode [ 288.359434][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.487077][ T4962] device veth1_macvtap left promiscuous mode [ 288.489541][ T4962] device veth0_macvtap left promiscuous mode [ 288.491388][ T4962] device veth1_vlan left promiscuous mode [ 288.493042][ T4962] device veth0_vlan left promiscuous mode [ 290.237635][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 290.427678][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 290.618358][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.828665][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.273006][ T4962] bond0 (unregistering): Released all slaves