last executing test programs: 12.419309122s ago: executing program 2 (id=203): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {0x503b}, {0x1, 0x100}, {0x2}, {0x0, 0xffff0004}, {0xfffffffc}, {0x5, 0x40000000}, {0xffff, 0x7}], 0x4, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)=@userptr={0x8, 0x2, 0x4, 0x10, 0xbfc, {0x77359400}, {0x5, 0x0, 0x4, 0x6, 0xc, 0x5, "2f5dbd93"}, 0x6bb9f6a3, 0x2, {0x0}, 0x5}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a20000000000a01030004000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000800000010c0001"], 0xe8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x80, 0x1, 0x7ff, 0x6, {{0x5, 0x4, 0x2, 0x36, 0x14, 0x66, 0x0, 0xfc, 0x4, 0x0, @loopback, @broadcast}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0xb00, &(0x7f0000000340), 0x10) syz_io_uring_setup(0x327a, &(0x7f0000000400)={0x0, 0x3, 0x2c, 0x3, 0x87}, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) ftruncate(r0, 0x80080079a0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) 11.966967492s ago: executing program 2 (id=204): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) getdents(r1, 0x0, 0x0) r3 = accept4$inet6(r0, 0x0, &(0x7f0000000140), 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x101) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) 11.874827942s ago: executing program 2 (id=206): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000200000", @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8ddab6479a6f1514ce8523c1f80508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x4cf7}], 0x1, 0x10001, 0x0) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) getpgid(0xffffffffffffffff) 10.928897324s ago: executing program 2 (id=211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000600), 0x0) 9.327854056s ago: executing program 1 (id=212): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x10000002, 0x4}], 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x14130}], 0x1}, 0x0) 9.023813456s ago: executing program 2 (id=214): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.921131027s ago: executing program 4 (id=215): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 8.894483636s ago: executing program 1 (id=216): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) getdents(r1, 0x0, 0x0) r3 = accept4$inet6(r0, 0x0, &(0x7f0000000140), 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x101) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) 8.031937318s ago: executing program 3 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r4) 8.019221778s ago: executing program 1 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r4, 0xffffffffffffffff, 0x0) 7.973936888s ago: executing program 4 (id=220): socket$inet6(0xa, 0x3, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x6, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x48}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.83219195s ago: executing program 3 (id=221): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000200000", @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8ddab6479a6f1514ce8523c1f80508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x4cf7}], 0x1, 0x10001, 0x0) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) getpgid(0xffffffffffffffff) 6.75458227s ago: executing program 2 (id=222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000700)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.169383161s ago: executing program 1 (id=223): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 6.11601904s ago: executing program 0 (id=224): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000000780)=[{0x0, 0xf}, {&(0x7f0000000300)=""/41, 0x29}], 0x2) 5.240221252s ago: executing program 0 (id=225): socket$inet6(0xa, 0x3, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x1, 0x0, 0x0, @sint={0xd171d53, 0xc}}]}) 5.131638502s ago: executing program 4 (id=226): syz_io_uring_setup(0x14ee, &(0x7f00000002c0)={0x0, 0xf81a, 0x800, 0x2, 0xbb}, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.067898902s ago: executing program 1 (id=227): sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRES32, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYBLOB="0387483807e2665068879e8b5d64c03ff9ec662b7cf62295205c41fc6c3b697e94a09476d68eb10d651d96691b154bd17cfc", @ANYBLOB=',iocharset=cp869,errors=continue,\x00', @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT], 0x1, 0x1538, &(0x7f0000003980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000003c0)={0x1, 0x0, 0x5, 0x7fc6, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) lchown(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000380)='\x00', &(0x7f00000004c0)='{\x12)\x00']}, &(0x7f0000000980)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='GPL\x00', &(0x7f00000005c0)='\']}@.*]\x8c}.$.+\x00', &(0x7f0000000600)='sched_switch\x00', &(0x7f0000000800)=']}\x00', 0x0, &(0x7f0000000880)='GPL\x00', &(0x7f00000008c0)='-{-#/}\xde\xf7{\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='-%]\\\x00']}) 4.957421383s ago: executing program 3 (id=228): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x5, 0x4}) 4.548401483s ago: executing program 4 (id=229): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 4.443991953s ago: executing program 0 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SET_NAME(0x25, &(0x7f0000000540)='/dev/vsock\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x0, 0x0, 0x0, 0xffffffff}}) 2.844064126s ago: executing program 0 (id=231): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000740)=[{0x0}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0xc000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x20004040) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000280)=ANY=[@ANYBLOB]) sendmmsg$inet6(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) 2.843613256s ago: executing program 4 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r4) 2.714603296s ago: executing program 1 (id=233): socket$inet6(0xa, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 2.644020146s ago: executing program 3 (id=234): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 1.690323597s ago: executing program 3 (id=235): landlock_create_ruleset(&(0x7f00000000c0)={0x4901, 0x1}, 0xa, 0x0) pipe(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid(0x0, 0xffffffffffffffff, 0x0, 0x60000007, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000002100), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000002140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x78a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 1.687457627s ago: executing program 4 (id=236): r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000020000000500", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0xb, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020}}, 0x44}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.465792617s ago: executing program 0 (id=237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) rmdir(&(0x7f0000000040)='./control\x00') syz_emit_ethernet(0x85, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6, 0x0, "98060595680f2db52fadcabe60c43d2952a8d4d0265324b80a9793670777f5d0bbb2a66e20fc05720189fdd20bf991c062f9c3df339a179a3ae5d85e7130bd5fa5b2c90eb6"}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) listen(r0, 0xfffffff7) 1.299904148s ago: executing program 3 (id=238): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000200000", @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8ddab6479a6f1514ce8523c1f80508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x4cf7}], 0x1, 0x10001, 0x0) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) getpgid(0xffffffffffffffff) 0s ago: executing program 0 (id=239): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @empty, 0x200000}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. syzkaller login: [ 54.162197][ T4157] cgroup: Unknown subsys name 'net' [ 54.302132][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.780483][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.287878][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 57.308749][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 57.329525][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 57.362576][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 57.389330][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 57.517521][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.524872][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.532965][ T4168] device bridge_slave_0 entered promiscuous mode [ 57.553418][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.560720][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.568997][ T4178] device bridge_slave_0 entered promiscuous mode [ 57.584396][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.591816][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.600321][ T4168] device bridge_slave_1 entered promiscuous mode [ 57.619594][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.626843][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.635097][ T4178] device bridge_slave_1 entered promiscuous mode [ 57.669133][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.676371][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.684531][ T4167] device bridge_slave_0 entered promiscuous mode [ 57.698686][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.706054][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.713858][ T4172] device bridge_slave_0 entered promiscuous mode [ 57.737930][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.745729][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.753550][ T4167] device bridge_slave_1 entered promiscuous mode [ 57.769449][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.776791][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.785350][ T4172] device bridge_slave_1 entered promiscuous mode [ 57.794644][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.803853][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.811066][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.819522][ T4179] device bridge_slave_0 entered promiscuous mode [ 57.837388][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.855834][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.873300][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.880532][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.889003][ T4179] device bridge_slave_1 entered promiscuous mode [ 57.904066][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.938504][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.965772][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.977489][ T4168] team0: Port device team_slave_0 added [ 57.985135][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.995758][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.007444][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.024856][ T4168] team0: Port device team_slave_1 added [ 58.055594][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.075429][ T4178] team0: Port device team_slave_0 added [ 58.106262][ T4167] team0: Port device team_slave_0 added [ 58.114225][ T4172] team0: Port device team_slave_0 added [ 58.121691][ T4178] team0: Port device team_slave_1 added [ 58.130129][ T4179] team0: Port device team_slave_0 added [ 58.146892][ T4167] team0: Port device team_slave_1 added [ 58.153326][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.160653][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.186670][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.201027][ T4172] team0: Port device team_slave_1 added [ 58.214968][ T4179] team0: Port device team_slave_1 added [ 58.243308][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.250428][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.276461][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.302412][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.309856][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.336820][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.359938][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.367094][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.393035][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.422656][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.429729][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.456672][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.473100][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.480110][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.506710][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.519009][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.526291][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.552331][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.563866][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.570931][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.597324][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.629275][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.636453][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.662522][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.674083][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.681234][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.707406][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.730445][ T4168] device hsr_slave_0 entered promiscuous mode [ 58.737338][ T4168] device hsr_slave_1 entered promiscuous mode [ 58.799985][ T4178] device hsr_slave_0 entered promiscuous mode [ 58.806971][ T4178] device hsr_slave_1 entered promiscuous mode [ 58.813611][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.821815][ T4178] Cannot create hsr debugfs directory [ 58.841551][ T4167] device hsr_slave_0 entered promiscuous mode [ 58.848997][ T4167] device hsr_slave_1 entered promiscuous mode [ 58.856435][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.864017][ T4167] Cannot create hsr debugfs directory [ 58.885249][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 58.895327][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 58.901500][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 58.912452][ T4179] device hsr_slave_0 entered promiscuous mode [ 58.919757][ T4179] device hsr_slave_1 entered promiscuous mode [ 58.927441][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.935641][ T4179] Cannot create hsr debugfs directory [ 58.954338][ T4172] device hsr_slave_0 entered promiscuous mode [ 58.961440][ T4172] device hsr_slave_1 entered promiscuous mode [ 58.967875][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 58.973930][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 58.974070][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.988050][ T4172] Cannot create hsr debugfs directory [ 59.313609][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.333205][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.354014][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.363444][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.396088][ T4178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.406822][ T4178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.421336][ T4178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.443423][ T4178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.485798][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.503852][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.514304][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.537554][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.611704][ T4179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.621574][ T4179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.632224][ T4179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.645614][ T4179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.685677][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.739354][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.751983][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.775318][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.795700][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.802595][ T4172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.813041][ T4172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.832423][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.845409][ T4172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.855844][ T4172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.866601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.874326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.882468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.891986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.901415][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.908731][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.918159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.930988][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.941416][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.950182][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.957304][ T3042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.000163][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.010046][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.020393][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.029690][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.038215][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.045327][ T3042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.053094][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.077251][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.087296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.097038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.106764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.117848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.127000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.137989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.147138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.159484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.168543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.177556][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.184650][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.211170][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.219456][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.250064][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.258818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.269301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.278193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.287615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.296833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.324200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.334308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.347797][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.371883][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.395326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.404296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.415677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.424222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.433746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.443453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.452601][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.459770][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.469437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.478157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.487772][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.494896][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.503767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.512722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.521559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.535219][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.543310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.553717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.586209][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.597582][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.611746][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.630679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.638998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.650438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.658635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.667717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.676667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.685914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.714568][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.723394][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.737098][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.744509][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.753610][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.762824][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.771649][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.778777][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.787210][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.801297][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.822784][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.831742][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.846206][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.861918][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.871202][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.878854][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.889445][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.907383][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.926670][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.936441][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.945765][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.956255][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.965006][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 60.965630][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 60.971757][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.985381][ T4210] Bluetooth: hci1: command 0x041b tx timeout [ 60.992593][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.999713][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.008482][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.018473][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.028956][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.039821][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.048331][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 61.055538][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.061396][ T4212] Bluetooth: hci4: command 0x041b tx timeout [ 61.062617][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.078011][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.088395][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.116803][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.135467][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.147102][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.174389][ T4168] device veth0_vlan entered promiscuous mode [ 61.194278][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.206340][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.213855][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.225817][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.234720][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.243021][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.251954][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.262350][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.271338][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.280335][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.290422][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.298688][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.306620][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.317315][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.331205][ T4168] device veth1_vlan entered promiscuous mode [ 61.340289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.352235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.363431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.380902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.390255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.412492][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.424063][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.440883][ T4179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.453724][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.476975][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.485524][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.493978][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.502540][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.511574][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.520514][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.529081][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.536645][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.544121][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.563840][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.593207][ T4168] device veth0_macvtap entered promiscuous mode [ 61.650860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.660390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.677659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.694135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.704700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.713471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.728118][ T4168] device veth1_macvtap entered promiscuous mode [ 61.740371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.749036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.758443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.767602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.776108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.785796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.822081][ T4178] device veth0_vlan entered promiscuous mode [ 61.836974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.846349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.857043][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.869178][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.878253][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.895337][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.915515][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.923350][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.931623][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.941159][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.950992][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.959492][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.970682][ T4178] device veth1_vlan entered promiscuous mode [ 61.982963][ T4167] device veth0_vlan entered promiscuous mode [ 61.992199][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.001571][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.035457][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.044319][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.061939][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.073908][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.085688][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.093977][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.102440][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.111198][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.124388][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.133568][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.166392][ T4167] device veth1_vlan entered promiscuous mode [ 62.190595][ T4178] device veth0_macvtap entered promiscuous mode [ 62.211989][ T4172] device veth0_vlan entered promiscuous mode [ 62.225185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.233541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.242300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.251392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.260439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.269322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.278812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.287167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.312460][ T4178] device veth1_macvtap entered promiscuous mode [ 62.345956][ T4172] device veth1_vlan entered promiscuous mode [ 62.375715][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.383913][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.400709][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.431687][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.443402][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.457333][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.480859][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.491701][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.502176][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.512302][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.524602][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.536097][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.547251][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.556627][ T4167] device veth0_macvtap entered promiscuous mode [ 62.599475][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.610954][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.615190][ T3042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.621639][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.636309][ T3042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.638168][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.652945][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.662485][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.671853][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.681612][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.692150][ T4178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.701199][ T4178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.710100][ T4178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.719360][ T4178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.730607][ T4172] device veth0_macvtap entered promiscuous mode [ 62.754729][ T3042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.762788][ T3042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.773851][ T4167] device veth1_macvtap entered promiscuous mode [ 62.786955][ T4172] device veth1_macvtap entered promiscuous mode [ 62.798892][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.808095][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.819778][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.828494][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.836859][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.845612][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.855099][ T4179] device veth0_vlan entered promiscuous mode [ 62.876136][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.893089][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.909136][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.921396][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.932326][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.943697][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.956439][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.980747][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.993799][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.003965][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.015336][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.027101][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.038048][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.047498][ T4209] Bluetooth: hci2: command 0x040f tx timeout [ 63.049129][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 63.059770][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.069352][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 63.075891][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.086807][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.104961][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.114340][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.124680][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.133566][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.142668][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 63.154640][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 63.178320][ T4179] device veth1_vlan entered promiscuous mode [ 63.190827][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.202033][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.213632][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.224324][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.235047][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.245858][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.262975][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.310814][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.336762][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.365436][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.380852][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.395941][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.406384][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.417443][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.427382][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.437976][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.451006][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.462054][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.470975][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.480244][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.489368][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.514547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.522711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.527847][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.540117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.556498][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.643061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.681377][ T4253] syz.2.10[4253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.681482][ T4253] syz.2.10[4253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.711802][ T4253] 9pnet: Could not find request transport: f [ 63.738462][ T4179] device veth0_macvtap entered promiscuous mode [ 63.744850][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.753049][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.762269][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.785278][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.819337][ T4255] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 63.839452][ T4179] device veth1_macvtap entered promiscuous mode [ 63.848089][ T4255] xt_NFQUEUE: number of total queues is 0 [ 63.867627][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.877492][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.886125][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.957420][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.973547][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.993800][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.009916][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.036428][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.052659][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.064245][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.082203][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.093674][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.116990][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.128812][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.152485][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.163310][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.173591][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.184316][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.194319][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.207462][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.226666][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.241488][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.423760][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.502947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.666055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.924995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.975139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.998768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.097364][ T3042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.125678][ T2352] Bluetooth: hci0: command 0x0419 tx timeout [ 65.136249][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.151415][ T2352] Bluetooth: hci1: command 0x0419 tx timeout [ 65.160796][ T3042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.180666][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.188584][ T2352] Bluetooth: hci2: command 0x0419 tx timeout [ 65.201093][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.210616][ T4211] Bluetooth: hci3: command 0x0419 tx timeout [ 65.216881][ T4211] Bluetooth: hci4: command 0x0419 tx timeout [ 65.223595][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.265017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.315482][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.323528][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.359400][ T4260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.391272][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.407774][ T4260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.420479][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.441856][ T4273] xt_TPROXY: Can be used only with -p tcp or -p udp [ 65.551154][ T4277] loop2: detected capacity change from 0 to 164 [ 65.585977][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.594048][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.629395][ T4282] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.682106][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.710352][ T4260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.729710][ T4260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.776473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.823081][ T26] audit: type=1326 audit(1733546692.884:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392f6bbed9 code=0x7ffc0000 [ 65.894658][ T26] audit: type=1326 audit(1733546692.884:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392f6bbed9 code=0x7ffc0000 [ 65.930628][ T26] audit: type=1326 audit(1733546692.904:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f392f6bbed9 code=0x7ffc0000 [ 66.044381][ T26] audit: type=1326 audit(1733546692.904:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392f6bbed9 code=0x7ffc0000 [ 66.067246][ T26] audit: type=1326 audit(1733546692.904:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392f6bbed9 code=0x7ffc0000 [ 66.121838][ T4293] mmap: syz.2.21 (4293) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 66.192402][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 66.434233][ T4296] loop3: detected capacity change from 0 to 128 [ 67.022891][ T4316] loop3: detected capacity change from 0 to 512 [ 67.127831][ T4321] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 67.169614][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.192140][ T4316] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 67.207232][ T4316] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.258217][ T4318] loop1: detected capacity change from 0 to 512 [ 67.483058][ T4318] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 67.501892][ T4318] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.063012][ T4344] loop4: detected capacity change from 0 to 512 [ 68.331771][ T4344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.715327][ T4344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.875550][ T4344] EXT4-fs (loop4): 1 truncate cleaned up [ 68.903410][ T4344] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 69.567616][ T4367] syz.1.43[4367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.567823][ T4367] syz.1.43[4367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.638280][ T4367] 9pnet: Insufficient options for proto=fd [ 69.791510][ T4371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 69.926562][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 69.981533][ T4375] device batadv0 entered promiscuous mode [ 70.024124][ T4380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.238074][ T4395] loop1: detected capacity change from 0 to 512 [ 71.250551][ T4387] syz.0.51 (4387) used greatest stack depth: 19896 bytes left [ 71.288676][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.303669][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.364539][ T21] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.388990][ T4395] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.457562][ T4395] EXT4-fs (loop1): 1 truncate cleaned up [ 71.465113][ T4395] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 71.566254][ T26] audit: type=1326 audit(1733546698.634:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 71.682440][ T26] audit: type=1326 audit(1733546698.674:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 71.795220][ T26] audit: type=1326 audit(1733546698.674:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 72.458758][ T4412] syz.0.61[4412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.458869][ T4412] syz.0.61[4412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.481352][ T4411] loop1: detected capacity change from 0 to 512 [ 72.676267][ T4411] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.695039][ T4417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.867224][ T4411] EXT4-fs (loop1): 1 orphan inode deleted [ 72.895491][ T4411] EXT4-fs (loop1): 1 truncate cleaned up [ 72.930705][ T4411] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.356728][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 73.444542][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 73.493479][ T4432] tipc: Started in network mode [ 73.528715][ T4432] tipc: Node identity b2b1b4f0a34e, cluster identity 4711 [ 73.564790][ T4432] tipc: Enabled bearer , priority 7 [ 73.599257][ T4433] ªªªªªª: renamed from syzkaller0 [ 73.615782][ T4435] loop3: detected capacity change from 0 to 512 [ 73.616590][ T4433] tipc: Disabling bearer [ 73.797154][ T4435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.872828][ T4435] EXT4-fs (loop3): 1 truncate cleaned up [ 73.904544][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 74.598785][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 74.813338][ T4454] Zero length message leads to an empty skb [ 75.119066][ T4459] loop2: detected capacity change from 0 to 512 [ 75.237266][ T4459] EXT4-fs (loop2): Ignoring removed oldalloc option [ 75.247384][ T4459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.354544][ T4459] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 75.395000][ T4459] EXT4-fs (loop2): 1 truncate cleaned up [ 75.429297][ T4459] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 75.478875][ T4468] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.606863][ T26] audit: type=1800 audit(1733546702.674:10): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 75.629951][ T4459] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 76.262136][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'. [ 76.543388][ T26] audit: type=1326 audit(1733546703.604:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d3cbded9 code=0x7ffc0000 [ 76.643944][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 78.888981][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 79.174118][ T26] audit: type=1326 audit(1733546706.234:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2021156ed9 code=0x7ffc0000 [ 79.280391][ T26] audit: type=1326 audit(1733546706.234:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2021156ed9 code=0x7ffc0000 [ 79.331365][ T4539] tipc: Started in network mode [ 79.342091][ T4539] tipc: Node identity da5ec5cd283a, cluster identity 4711 [ 79.377351][ T26] audit: type=1326 audit(1733546706.234:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2021156ed9 code=0x7ffc0000 [ 79.389579][ T4539] tipc: Enabled bearer , priority 0 [ 79.425280][ T26] audit: type=1326 audit(1733546706.234:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2021156ed9 code=0x7ffc0000 [ 79.448727][ T26] audit: type=1326 audit(1733546706.234:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2021156ed9 code=0x7ffc0000 [ 79.529868][ T4542] device syzkaller0 entered promiscuous mode [ 79.597225][ T1106] cfg80211: failed to load regulatory.db [ 79.704387][ T4538] tipc: Resetting bearer [ 79.822845][ T4538] tipc: Disabling bearer [ 80.720174][ T4567] netlink: 'syz.1.117': attribute type 25 has an invalid length. [ 80.741938][ T4569] loop2: detected capacity change from 0 to 256 [ 81.047536][ T4569] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 81.361316][ T4582] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 82.893577][ T4603] loop2: detected capacity change from 0 to 512 [ 83.174908][ T4603] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.259842][ T4578] loop4: detected capacity change from 0 to 512 [ 83.289973][ T4603] EXT4-fs (loop2): 1 truncate cleaned up [ 83.323395][ T4603] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 83.525029][ T4614] tipc: Enabling of bearer rejected, failed to enable media [ 83.693849][ T4578] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 83.858425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 83.874482][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.883415][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.892314][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.901300][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.910195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.919180][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.928161][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.937063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.945947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.337256][ T4578] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.505508][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.744744][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 84.864835][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.900944][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.979977][ T4626] netlink: 'syz.2.137': attribute type 10 has an invalid length. [ 85.003802][ T4626] device syz_tun entered promiscuous mode [ 85.037939][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 85.052196][ T23] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 85.054017][ T4626] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 85.063690][ T23] usb 2-1: Product: syz [ 85.081040][ T23] usb 2-1: Manufacturer: syz [ 85.174836][ T23] hub 2-1:4.0: USB hub found [ 85.199759][ T4626] syz.2.137 (4626) used greatest stack depth: 19448 bytes left [ 85.374782][ T23] hub 2-1:4.0: 2 ports detected [ 85.381976][ T4633] loop2: detected capacity change from 0 to 256 [ 85.437238][ T4636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 85.474825][ T4636] device macvlan0 entered promiscuous mode [ 85.483925][ T4633] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 85.657009][ T4181] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.711323][ T23] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 85.718219][ T23] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 85.767374][ T23] usb 2-1: USB disconnect, device number 2 [ 86.606136][ T4181] usb 5-1: Using ep0 maxpacket: 32 [ 86.668343][ T4654] loop1: detected capacity change from 0 to 512 [ 86.735000][ T4181] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.763961][ T4654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.777839][ T4181] usb 5-1: config 0 has no interfaces? [ 86.790013][ T4181] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 86.837411][ T4181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.841156][ T4654] EXT4-fs (loop1): 1 truncate cleaned up [ 86.859395][ T4181] usb 5-1: config 0 descriptor?? [ 86.861851][ T4654] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 86.964628][ T4211] Bluetooth: hci4: command 0x0405 tx timeout [ 87.604870][ T4181] usb 5-1: USB disconnect, device number 2 [ 87.646354][ T4663] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 87.682828][ T4663] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 87.738615][ T4663] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 87.777707][ T4663] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 88.029782][ T4668] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 88.031584][ T4663] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 88.032231][ T4663] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 88.047949][ T4670] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.630073][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 88.914460][ C1] sched: RT throttling activated [ 89.674743][ T4251] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.902641][ T4689] loop1: detected capacity change from 0 to 256 [ 91.158311][ T4251] usb 2-1: device not accepting address 3, error -71 [ 91.240442][ T4689] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 93.108601][ T4707] loop0: detected capacity change from 0 to 512 [ 93.206578][ T26] audit: type=1326 audit(1733546720.274:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.1.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f392f6bbed9 code=0x0 [ 93.232746][ T4707] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.260092][ T4707] EXT4-fs (loop0): 1 truncate cleaned up [ 93.267993][ T4707] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 94.298545][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 96.186247][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.379676][ T4213] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.444543][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 96.565195][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.602457][ T21] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 96.627581][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 96.659971][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 96.670324][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.780833][ T4213] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 96.800275][ T4213] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 96.830269][ T4213] usb 4-1: config 0 has no interface number 1 [ 96.834819][ T21] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 96.844527][ T4213] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.866354][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.879049][ T4213] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 96.927359][ T21] usb 1-1: Product: syz [ 96.931671][ T21] usb 1-1: Manufacturer: syz [ 96.963790][ T21] usb 1-1: SerialNumber: syz [ 96.966599][ T4752] loop2: detected capacity change from 0 to 256 [ 97.082795][ T4752] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 97.114691][ T4213] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 97.134138][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.154877][ T21] usb 1-1: config 0 descriptor?? [ 97.175004][ T4739] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 97.187224][ T4213] usb 4-1: Product: syz [ 98.834742][ T4766] fuse: Bad value for 'fd' [ 98.924795][ T4213] usb 4-1: config 0 descriptor?? [ 98.940958][ T21] ati_remote_probe: Unexpected desc.bNumEndpoints [ 98.954686][ T4213] usb 4-1: can't set config #0, error -71 [ 98.969289][ T4213] usb 4-1: USB disconnect, device number 2 [ 99.024700][ T21] usb 1-1: USB disconnect, device number 2 [ 99.335303][ T4774] loop0: detected capacity change from 0 to 512 [ 99.778710][ T4774] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.117113][ T4774] EXT4-fs (loop0): 1 truncate cleaned up [ 100.117146][ T4774] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 101.073802][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.761960][ T4808] loop2: detected capacity change from 0 to 256 [ 104.911511][ T4808] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 104.914574][ T23] usb 3-1: device not accepting address 2, error -71 [ 106.235056][ T4209] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.634556][ T4209] usb 2-1: Using ep0 maxpacket: 32 [ 106.754774][ T4209] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 106.763022][ T4209] usb 2-1: config 0 has no interface number 0 [ 106.844622][ T4209] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 106.874414][ T4209] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 106.910332][ T4209] usb 2-1: config 0 interface 126 has no altsetting 0 [ 106.979363][ T4836] Invalid ELF header magic: != ELF [ 107.076953][ T4209] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 107.096459][ T4209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.134020][ T4209] usb 2-1: Product: syz [ 107.138654][ T4209] usb 2-1: Manufacturer: syz [ 107.143352][ T4209] usb 2-1: SerialNumber: syz [ 107.156841][ T4209] usb 2-1: config 0 descriptor?? [ 107.181413][ T4816] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.281398][ T4816] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.314672][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.607087][ T4209] ir_usb 2-1:0.126: IR Dongle converter detected [ 108.634586][ T4209] usb 2-1: IRDA class descriptor not found, device not bound [ 108.664324][ T4209] usb 2-1: USB disconnect, device number 5 [ 109.425836][ T4868] loop0: detected capacity change from 0 to 256 [ 109.626811][ T4868] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 111.974899][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.115350][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 112.397562][ T23] usb 5-1: can't read configurations, error -71 [ 115.931154][ T4932] loop1: detected capacity change from 0 to 256 [ 116.009395][ T4932] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 119.227136][ T26] audit: type=1326 audit(1733546746.294:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 119.334606][ T26] audit: type=1326 audit(1733546746.314:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 119.834764][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.364591][ T26] audit: type=1326 audit(1733546746.324:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 120.489009][ T4976] [ 120.491377][ T4976] ====================================================== [ 120.498404][ T4976] WARNING: possible circular locking dependency detected [ 120.505428][ T4976] 5.15.173-syzkaller #0 Not tainted [ 120.510632][ T4976] ------------------------------------------------------ [ 120.517815][ T4976] syz.0.239/4976 is trying to acquire lock: [ 120.523703][ T4976] ffff88807c378120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf6a/0x1cb0 [ 120.533418][ T4976] [ 120.533418][ T4976] but task is already holding lock: [ 120.540779][ T4976] ffffc900018fd490 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 120.550356][ T4976] [ 120.550356][ T4976] which lock already depends on the new lock. [ 120.550356][ T4976] [ 120.560748][ T4976] [ 120.560748][ T4976] the existing dependency chain (in reverse order) is: [ 120.569759][ T4976] [ 120.569759][ T4976] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 120.577670][ T4976] lock_acquire+0x1db/0x4f0 [ 120.582692][ T4976] _raw_spin_lock+0x2a/0x40 [ 120.587713][ T4976] __inet_hash+0xe4/0x8e0 [ 120.592556][ T4976] inet_csk_listen_start+0x231/0x310 [ 120.598358][ T4976] inet_listen+0x2c9/0x7c0 [ 120.603321][ T4976] __sys_listen+0x1a7/0x220 [ 120.608339][ T4976] __x64_sys_listen+0x56/0x60 [ 120.613531][ T4976] do_syscall_64+0x3b/0xb0 [ 120.618468][ T4976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.624907][ T4976] [ 120.624907][ T4976] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 120.632634][ T4976] validate_chain+0x1649/0x5930 [ 120.638006][ T4976] __lock_acquire+0x1295/0x1ff0 [ 120.643377][ T4976] lock_acquire+0x1db/0x4f0 [ 120.648400][ T4976] mptcp_diag_get_info+0x276/0xa10 [ 120.654038][ T4976] inet_sk_diag_fill+0xf6a/0x1cb0 [ 120.659581][ T4976] mptcp_diag_dump+0xd1d/0x1330 [ 120.664949][ T4976] __inet_diag_dump+0x20e/0x3a0 [ 120.670407][ T4976] netlink_dump+0x5a4/0xca0 [ 120.675427][ T4976] __netlink_dump_start+0x50f/0x6d0 [ 120.681229][ T4976] inet_diag_handler_cmd+0x1d7/0x2a0 [ 120.687038][ T4976] sock_diag_rcv_msg+0xd5/0x400 [ 120.692416][ T4976] netlink_rcv_skb+0x1cf/0x410 [ 120.697709][ T4976] sock_diag_rcv+0x26/0x40 [ 120.702654][ T4976] netlink_unicast+0x7b6/0x980 [ 120.708022][ T4976] netlink_sendmsg+0xa30/0xd60 [ 120.713308][ T4976] sock_write_iter+0x39b/0x530 [ 120.718591][ T4976] do_iter_readv_writev+0x594/0x7a0 [ 120.724311][ T4976] do_iter_write+0x1e6/0x760 [ 120.729418][ T4976] do_writev+0x281/0x470 [ 120.734207][ T4976] do_syscall_64+0x3b/0xb0 [ 120.739143][ T4976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.745556][ T4976] [ 120.745556][ T4976] other info that might help us debug this: [ 120.745556][ T4976] [ 120.755906][ T4976] Possible unsafe locking scenario: [ 120.755906][ T4976] [ 120.763362][ T4976] CPU0 CPU1 [ 120.768723][ T4976] ---- ---- [ 120.774091][ T4976] lock(&h->lhash2[i].lock); [ 120.778778][ T4976] lock(sk_lock-AF_INET6); [ 120.785806][ T4976] lock(&h->lhash2[i].lock); [ 120.793087][ T4976] lock(sk_lock-AF_INET6); [ 120.797587][ T4976] [ 120.797587][ T4976] *** DEADLOCK *** [ 120.797587][ T4976] [ 120.805724][ T4976] 6 locks held by syz.0.239/4976: [ 120.810741][ T4976] #0: ffffffff8dc4b0c8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 120.820155][ T4976] #1: ffffffff8dc4af28 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x206/0x400 [ 120.830680][ T4976] #2: ffff88807913d690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6d0 [ 120.841386][ T4976] #3: ffffffff8dd27928 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x191/0x3a0 [ 120.851661][ T4976] #4: ffffffff8cb1fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 120.860992][ T4976] #5: ffffc900018fd490 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 120.871007][ T4976] [ 120.871007][ T4976] stack backtrace: [ 120.876925][ T4976] CPU: 0 PID: 4976 Comm: syz.0.239 Not tainted 5.15.173-syzkaller #0 [ 120.884985][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.895052][ T4976] Call Trace: [ 120.898325][ T4976] [ 120.901278][ T4976] dump_stack_lvl+0x1e3/0x2d0 [ 120.905961][ T4976] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 120.911595][ T4976] ? print_circular_bug+0x12b/0x1a0 [ 120.916793][ T4976] check_noncircular+0x2f8/0x3b0 [ 120.921731][ T4976] ? add_chain_block+0x850/0x850 [ 120.926662][ T4976] ? lockdep_lock+0x11f/0x2a0 [ 120.931337][ T4976] validate_chain+0x1649/0x5930 [ 120.936196][ T4976] ? reacquire_held_locks+0x660/0x660 [ 120.941577][ T4976] ? is_dynamic_key+0x1f0/0x1f0 [ 120.946435][ T4976] ? __lock_acquire+0x1295/0x1ff0 [ 120.951468][ T4976] ? mark_lock+0x98/0x340 [ 120.955924][ T4976] ? reacquire_held_locks+0x660/0x660 [ 120.961301][ T4976] ? __lock_acquire+0x1295/0x1ff0 [ 120.966323][ T4976] ? mark_lock+0x98/0x340 [ 120.970647][ T4976] __lock_acquire+0x1295/0x1ff0 [ 120.975499][ T4976] lock_acquire+0x1db/0x4f0 [ 120.980022][ T4976] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 120.985225][ T4976] ? read_lock_is_recursive+0x10/0x10 [ 120.990597][ T4976] mptcp_diag_get_info+0x276/0xa10 [ 120.995704][ T4976] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 121.000903][ T4976] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 121.006106][ T4976] ? mptcp_diag_dump_one+0x280/0x280 [ 121.011389][ T4976] ? memset+0x1f/0x40 [ 121.015366][ T4976] inet_sk_diag_fill+0xf6a/0x1cb0 [ 121.020396][ T4976] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 121.026212][ T4976] ? __might_sleep+0xc0/0xc0 [ 121.030798][ T4976] ? inet_diag_bc_sk+0x19d/0x10d0 [ 121.035821][ T4976] ? __rwlock_init+0x140/0x140 [ 121.040581][ T4976] ? do_raw_spin_unlock+0x137/0x8b0 [ 121.045780][ T4976] mptcp_diag_dump+0xd1d/0x1330 [ 121.050631][ T4976] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 121.057222][ T4976] __inet_diag_dump+0x20e/0x3a0 [ 121.062077][ T4976] netlink_dump+0x5a4/0xca0 [ 121.066586][ T4976] ? netlink_lookup+0x1d0/0x1d0 [ 121.071437][ T4976] ? __inet_diag_dump_start+0x8a/0x990 [ 121.076898][ T4976] ? __inet_diag_dump_start+0x831/0x990 [ 121.082446][ T4976] __netlink_dump_start+0x50f/0x6d0 [ 121.087646][ T4976] inet_diag_handler_cmd+0x1d7/0x2a0 [ 121.092934][ T4976] ? sock_diag_rcv_msg+0x206/0x400 [ 121.098064][ T4976] ? rcu_lock_release+0x20/0x20 [ 121.102916][ T4976] ? inet_diag_handler_get_info+0xb70/0xb70 [ 121.108814][ T4976] ? inet_diag_dump_start+0x20/0x20 [ 121.114098][ T4976] ? inet_diag_dump+0x50/0x50 [ 121.118775][ T4976] ? rcu_lock_release+0x20/0x20 [ 121.123623][ T4976] ? __copy_skb_header+0x47b/0x600 [ 121.128733][ T4976] ? dev_queue_xmit+0x20/0x20 [ 121.133500][ T4976] ? rcu_lock_release+0x20/0x20 [ 121.138361][ T4976] sock_diag_rcv_msg+0xd5/0x400 [ 121.143233][ T4976] netlink_rcv_skb+0x1cf/0x410 [ 121.148011][ T4976] ? sock_diag_bind+0xa0/0xa0 [ 121.152692][ T4976] ? netlink_ack+0xb10/0xb10 [ 121.157289][ T4976] sock_diag_rcv+0x26/0x40 [ 121.161703][ T4976] netlink_unicast+0x7b6/0x980 [ 121.166467][ T4976] ? netlink_detachskb+0x90/0x90 [ 121.171403][ T4976] ? __virt_addr_valid+0x3bb/0x460 [ 121.176510][ T4976] ? 0xffffffff81000000 [ 121.180656][ T4976] ? __check_object_size+0x300/0x410 [ 121.185944][ T4976] ? bpf_lsm_netlink_send+0x5/0x10 [ 121.191065][ T4976] netlink_sendmsg+0xa30/0xd60 [ 121.195833][ T4976] ? netlink_getsockopt+0x5b0/0x5b0 [ 121.201033][ T4976] ? aa_sock_msg_perm+0x91/0x150 [ 121.205968][ T4976] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 121.211261][ T4976] ? security_socket_sendmsg+0x7d/0xa0 [ 121.216722][ T4976] ? netlink_getsockopt+0x5b0/0x5b0 [ 121.221920][ T4976] sock_write_iter+0x39b/0x530 [ 121.226684][ T4976] ? sock_read_iter+0x480/0x480 [ 121.231560][ T4976] ? __lock_acquire+0x1ff0/0x1ff0 [ 121.236587][ T4976] do_iter_readv_writev+0x594/0x7a0 [ 121.241787][ T4976] ? generic_file_rw_checks+0x260/0x260 [ 121.247336][ T4976] ? common_file_perm+0x17d/0x1d0 [ 121.252357][ T4976] ? fsnotify_perm+0x64/0x590 [ 121.257028][ T4976] ? security_file_permission+0x75/0xa0 [ 121.262749][ T4976] do_iter_write+0x1e6/0x760 [ 121.267340][ T4976] ? import_iovec+0xe6/0x120 [ 121.272018][ T4976] do_writev+0x281/0x470 [ 121.276289][ T4976] ? do_readv+0x460/0x460 [ 121.280621][ T4976] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 121.286600][ T4976] ? vtime_user_exit+0x2d1/0x400 [ 121.291621][ T4976] ? syscall_enter_from_user_mode+0x2e/0x240 [ 121.297623][ T4976] ? lockdep_hardirqs_on+0x94/0x130 [ 121.302839][ T4976] ? syscall_enter_from_user_mode+0x2e/0x240 [ 121.308821][ T4976] do_syscall_64+0x3b/0xb0 [ 121.313324][ T4976] ? clear_bhb_loop+0x15/0x70 [ 121.318001][ T4976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.323906][ T4976] RIP: 0033:0x7f6db0c32ed9 [ 121.328319][ T4976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.347928][ T4976] RSP: 002b:00007f6daeaa9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 121.356351][ T4976] RAX: ffffffffffffffda RBX: 00007f6db0df8fa0 RCX: 00007f6db0c32ed9 [ 121.364322][ T4976] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000004 [ 121.372294][ T4976] RBP: 00007f6db0ca6cc8 R08: 0000000000000000 R09: 0000000000000000 [ 121.380261][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.388263][ T4976] R13: 0000000000000000 R14: 00007f6db0df8fa0 R15: 00007fff2ba5d788 [ 121.396239][ T4976] [ 121.402343][ T4976] BUG: sleeping function called from invalid context at net/core/sock.c:3282 [ 121.411777][ T4976] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4976, name: syz.0.239 [ 121.420779][ T4976] INFO: lockdep is turned off. [ 121.425580][ T4976] Preemption disabled at: [ 121.425593][ T4976] [<0000000000000000>] 0x0 [ 121.434369][ T4976] CPU: 0 PID: 4976 Comm: syz.0.239 Not tainted 5.15.173-syzkaller #0 [ 121.442447][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.452504][ T4976] Call Trace: [ 121.455781][ T4976] [ 121.458706][ T4976] dump_stack_lvl+0x1e3/0x2d0 [ 121.463388][ T4976] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 121.469141][ T4976] ? panic+0x860/0x860 [ 121.473305][ T4976] ___might_sleep+0x547/0x6a0 [ 121.477976][ T4976] ? __might_sleep+0xc0/0xc0 [ 121.482563][ T4976] __lock_sock_fast+0x2f/0xe0 [ 121.487233][ T4976] mptcp_diag_get_info+0x282/0xa10 [ 121.492339][ T4976] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 121.497578][ T4976] ? mptcp_diag_dump_one+0x280/0x280 [ 121.502855][ T4976] ? memset+0x1f/0x40 [ 121.506835][ T4976] inet_sk_diag_fill+0xf6a/0x1cb0 [ 121.511864][ T4976] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 121.517582][ T4976] ? __might_sleep+0xc0/0xc0 [ 121.522169][ T4976] ? inet_diag_bc_sk+0x19d/0x10d0 [ 121.527198][ T4976] ? __rwlock_init+0x140/0x140 [ 121.531957][ T4976] ? do_raw_spin_unlock+0x137/0x8b0 [ 121.537173][ T4976] mptcp_diag_dump+0xd1d/0x1330 [ 121.542029][ T4976] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 121.548617][ T4976] __inet_diag_dump+0x20e/0x3a0 [ 121.553494][ T4976] netlink_dump+0x5a4/0xca0 [ 121.558000][ T4976] ? netlink_lookup+0x1d0/0x1d0 [ 121.562874][ T4976] ? __inet_diag_dump_start+0x8a/0x990 [ 121.568335][ T4976] ? __inet_diag_dump_start+0x831/0x990 [ 121.573912][ T4976] __netlink_dump_start+0x50f/0x6d0 [ 121.579114][ T4976] inet_diag_handler_cmd+0x1d7/0x2a0 [ 121.584402][ T4976] ? sock_diag_rcv_msg+0x206/0x400 [ 121.589519][ T4976] ? rcu_lock_release+0x20/0x20 [ 121.594365][ T4976] ? inet_diag_handler_get_info+0xb70/0xb70 [ 121.600257][ T4976] ? inet_diag_dump_start+0x20/0x20 [ 121.605450][ T4976] ? inet_diag_dump+0x50/0x50 [ 121.610122][ T4976] ? rcu_lock_release+0x20/0x20 [ 121.614971][ T4976] ? __copy_skb_header+0x47b/0x600 [ 121.620084][ T4976] ? dev_queue_xmit+0x20/0x20 [ 121.624758][ T4976] ? rcu_lock_release+0x20/0x20 [ 121.629605][ T4976] sock_diag_rcv_msg+0xd5/0x400 [ 121.634454][ T4976] netlink_rcv_skb+0x1cf/0x410 [ 121.639213][ T4976] ? sock_diag_bind+0xa0/0xa0 [ 121.643887][ T4976] ? netlink_ack+0xb10/0xb10 [ 121.648479][ T4976] sock_diag_rcv+0x26/0x40 [ 121.652890][ T4976] netlink_unicast+0x7b6/0x980 [ 121.657650][ T4976] ? netlink_detachskb+0x90/0x90 [ 121.662598][ T4976] ? __virt_addr_valid+0x3bb/0x460 [ 121.667701][ T4976] ? 0xffffffff81000000 [ 121.671864][ T4976] ? __check_object_size+0x300/0x410 [ 121.677148][ T4976] ? bpf_lsm_netlink_send+0x5/0x10 [ 121.682254][ T4976] netlink_sendmsg+0xa30/0xd60 [ 121.687024][ T4976] ? netlink_getsockopt+0x5b0/0x5b0 [ 121.692225][ T4976] ? aa_sock_msg_perm+0x91/0x150 [ 121.697159][ T4976] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 121.702441][ T4976] ? security_socket_sendmsg+0x7d/0xa0 [ 121.707912][ T4976] ? netlink_getsockopt+0x5b0/0x5b0 [ 121.713154][ T4976] sock_write_iter+0x39b/0x530 [ 121.717947][ T4976] ? sock_read_iter+0x480/0x480 [ 121.722818][ T4976] ? __lock_acquire+0x1ff0/0x1ff0 [ 121.727852][ T4976] do_iter_readv_writev+0x594/0x7a0 [ 121.733068][ T4976] ? generic_file_rw_checks+0x260/0x260 [ 121.738633][ T4976] ? common_file_perm+0x17d/0x1d0 [ 121.743661][ T4976] ? fsnotify_perm+0x64/0x590 [ 121.748340][ T4976] ? security_file_permission+0x75/0xa0 [ 121.753884][ T4976] do_iter_write+0x1e6/0x760 [ 121.758479][ T4976] ? import_iovec+0xe6/0x120 [ 121.763074][ T4976] do_writev+0x281/0x470 [ 121.767328][ T4976] ? do_readv+0x460/0x460 [ 121.771661][ T4976] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 121.777642][ T4976] ? vtime_user_exit+0x2d1/0x400 [ 121.782625][ T4976] ? syscall_enter_from_user_mode+0x2e/0x240 [ 121.788763][ T4976] ? lockdep_hardirqs_on+0x94/0x130 [ 121.793992][ T4976] ? syscall_enter_from_user_mode+0x2e/0x240 [ 121.799987][ T4976] do_syscall_64+0x3b/0xb0 [ 121.804419][ T4976] ? clear_bhb_loop+0x15/0x70 [ 121.809208][ T4976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.815105][ T4976] RIP: 0033:0x7f6db0c32ed9 [ 121.819522][ T4976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.839139][ T4976] RSP: 002b:00007f6daeaa9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 121.847550][ T4976] RAX: ffffffffffffffda RBX: 00007f6db0df8fa0 RCX: 00007f6db0c32ed9 [ 121.855524][ T4976] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000004 [ 121.863523][ T4976] RBP: 00007f6db0ca6cc8 R08: 0000000000000000 R09: 0000000000000000 [ 121.871488][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.879455][ T4976] R13: 0000000000000000 R14: 00007f6db0df8fa0 R15: 00007fff2ba5d788 [ 121.887428][ T4976] [ 121.928534][ T26] audit: type=1326 audit(1733546746.324:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 122.018948][ T26] audit: type=1326 audit(1733546746.324:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 122.101402][ T26] audit: type=1326 audit(1733546746.324:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 122.203201][ T26] audit: type=1326 audit(1733546746.324:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 122.249629][ T26] audit: type=1326 audit(1733546746.324:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 122.275720][ T26] audit: type=1326 audit(1733546746.324:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000 [ 122.301316][ T26] audit: type=1326 audit(1733546746.324:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0c32ed9 code=0x7ffc0000