last executing test programs: 11.737777519s ago: executing program 0 (id=75): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 8.259434506s ago: executing program 3 (id=85): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x8f, 0x8d, 0x46715c3b, 0x6b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, @mcast1, 0x1, 0x40, 0x1, 0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$netrom(r0, &(0x7f0000000300)={{}, [@null, @remote, @bcast, @null, @netrom, @netrom, @remote, @rose]}, &(0x7f0000000380)=0x48, 0x800) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f00000003c0)=0x5, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000180)={0x4000}, 0x0) landlock_restrict_self(r5, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) 7.746467438s ago: executing program 0 (id=86): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.60728982s ago: executing program 0 (id=87): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="3e27aa1f"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 7.043211756s ago: executing program 3 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 6.378080708s ago: executing program 0 (id=93): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x5, "6112a7a989"}, 0x0}) 5.124447872s ago: executing program 3 (id=96): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) 4.14176025s ago: executing program 3 (id=100): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mlockall(0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b0f, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.232210808s ago: executing program 4 (id=107): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 2.340403951s ago: executing program 3 (id=110): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000100)=""/224) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001600)='p', 0x1}], 0x2) 2.199142782s ago: executing program 4 (id=112): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$cont(0x18, r1, 0x7, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 1.530970003s ago: executing program 1 (id=115): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 1.512854519s ago: executing program 0 (id=116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) 1.495106961s ago: executing program 1 (id=117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1.223336236s ago: executing program 4 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x401, 0x0, 0x0, {0xd, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4010) 1.206341348s ago: executing program 0 (id=120): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 1.195719372s ago: executing program 1 (id=121): readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/18, 0x12}], 0x1) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4, 0x2000, 0x200}, &(0x7f0000000040), &(0x7f0000000500)) 1.127227577s ago: executing program 1 (id=122): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 569.901733ms ago: executing program 4 (id=123): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)="cd6fbe", 0x3, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x1) 507.809008ms ago: executing program 3 (id=124): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x200, 0x21, 0x11, 0x31, 0x8, 0x19d2, 0x189, 0xfc36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x8, 0xd627ee85d49d43a6, 0x8, [{{0x9, 0x4, 0xc4, 0x7e, 0x0, 0xff, 0x77, 0x31, 0x6}}]}}]}}, 0x0) read$char_usb(r1, &(0x7f0000000340)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x448, &(0x7f0000000cc0)=ANY=[]) 464.973938ms ago: executing program 4 (id=125): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003400)='4', 0x1}], 0x1}}], 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) 386.080818ms ago: executing program 1 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000500006"], 0x64}}, 0x0) 343.061868ms ago: executing program 2 (id=128): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, &(0x7f0000000140)={0x2, 0x1, @raw_data=[0xd93, 0x9, 0x4, 0x9, 0x0, 0x203, 0x6, 0x800, 0xfffffffe, 0x4, 0x1, 0xfffffffd, 0x6, 0x7, 0x0, 0x1000]}) 328.898039ms ago: executing program 1 (id=129): socket$inet6_dccp(0xa, 0x6, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x800) 236.339834ms ago: executing program 2 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0xe701ac47a3d23ecd, 0x0, 0x2}, 0x14}}, 0x0) 143.294675ms ago: executing program 2 (id=131): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) finit_module(r1, 0x0, 0x1) 120.222798ms ago: executing program 2 (id=132): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000100)=[r1], 0x1}) 82.359308ms ago: executing program 4 (id=133): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0xfec5, 0x800, 0xffffffff}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000100), 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) setxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)=@v1={0x1000000, [{0x4f2d, 0x5}]}, 0xc, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 7.141661ms ago: executing program 2 (id=134): r0 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 0s ago: executing program 2 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.40' (ED25519) to the list of known hosts. [ 33.634826][ T6412] cgroup: Unknown subsys name 'net' [ 33.889509][ T6412] cgroup: Unknown subsys name 'cpuset' [ 33.892916][ T6412] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.234511][ T6412] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.608458][ T6436] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.611841][ T6436] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.614273][ T6436] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.616462][ T6438] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.618724][ T6438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.620748][ T6438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.620952][ T6437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.622892][ T6438] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.625133][ T6437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.625893][ T6438] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.628110][ T6437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.629225][ T6438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.631068][ T6437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.631815][ T6438] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.633903][ T6437] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.636638][ T6437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.638794][ T6437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.640699][ T6439] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.641046][ T6437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.642499][ T6439] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.644238][ T6437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.645954][ T6438] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.650841][ T5991] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.659915][ T6437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.661974][ T6438] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.662292][ T6437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.664045][ T6438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.665328][ T6437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.669688][ T6438] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.678298][ T6438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.842053][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 36.959237][ T6426] chnl_net:caif_netlink_parms(): no params data found [ 36.994236][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 37.006635][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.008520][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.010076][ T6424] bridge_slave_0: entered allmulticast mode [ 37.011887][ T6424] bridge_slave_0: entered promiscuous mode [ 37.018570][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.020345][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.022029][ T6424] bridge_slave_1: entered allmulticast mode [ 37.024159][ T6424] bridge_slave_1: entered promiscuous mode [ 37.048900][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 37.068553][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.070357][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.071977][ T6425] bridge_slave_0: entered allmulticast mode [ 37.073757][ T6425] bridge_slave_0: entered promiscuous mode [ 37.090395][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.100636][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.102460][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.104084][ T6425] bridge_slave_1: entered allmulticast mode [ 37.105957][ T6425] bridge_slave_1: entered promiscuous mode [ 37.114577][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.116143][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.118551][ T6426] bridge_slave_0: entered allmulticast mode [ 37.120446][ T6426] bridge_slave_0: entered promiscuous mode [ 37.123797][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.125957][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.127634][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.129278][ T6426] bridge_slave_1: entered allmulticast mode [ 37.131152][ T6426] bridge_slave_1: entered promiscuous mode [ 37.198853][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.211822][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.225788][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.233872][ T6424] team0: Port device team_slave_0 added [ 37.236670][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.239033][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.240926][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.242774][ T6423] bridge_slave_0: entered allmulticast mode [ 37.244613][ T6423] bridge_slave_0: entered promiscuous mode [ 37.257764][ T6425] team0: Port device team_slave_0 added [ 37.260781][ T6424] team0: Port device team_slave_1 added [ 37.263004][ T6425] team0: Port device team_slave_1 added [ 37.274724][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.276310][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.278135][ T6423] bridge_slave_1: entered allmulticast mode [ 37.280017][ T6423] bridge_slave_1: entered promiscuous mode [ 37.296451][ T6426] team0: Port device team_slave_0 added [ 37.299451][ T6426] team0: Port device team_slave_1 added [ 37.302391][ T6429] chnl_net:caif_netlink_parms(): no params data found [ 37.320565][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.322033][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.327732][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.340959][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.343488][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.345025][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.350975][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.353998][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.355555][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.362017][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.369987][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.371694][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.377425][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.383484][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.384974][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.390891][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.394935][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.409044][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.410689][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.416457][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.442204][ T6423] team0: Port device team_slave_0 added [ 37.498889][ T6424] hsr_slave_0: entered promiscuous mode [ 37.537118][ T6424] hsr_slave_1: entered promiscuous mode [ 37.578744][ T6423] team0: Port device team_slave_1 added [ 37.628457][ T6426] hsr_slave_0: entered promiscuous mode [ 37.677459][ T6426] hsr_slave_1: entered promiscuous mode [ 37.716983][ T6426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.718913][ T6426] Cannot create hsr debugfs directory [ 37.729980][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.731710][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.737443][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.768777][ T6425] hsr_slave_0: entered promiscuous mode [ 37.807144][ T6425] hsr_slave_1: entered promiscuous mode [ 37.846893][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.848695][ T6425] Cannot create hsr debugfs directory [ 37.855314][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.857725][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.859504][ T6429] bridge_slave_0: entered allmulticast mode [ 37.861389][ T6429] bridge_slave_0: entered promiscuous mode [ 37.867365][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.868810][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.874444][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.899530][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.901148][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.902811][ T6429] bridge_slave_1: entered allmulticast mode [ 37.904768][ T6429] bridge_slave_1: entered promiscuous mode [ 37.944165][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.963538][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.995040][ T6429] team0: Port device team_slave_0 added [ 38.017894][ T6429] team0: Port device team_slave_1 added [ 38.099043][ T6423] hsr_slave_0: entered promiscuous mode [ 38.137571][ T6423] hsr_slave_1: entered promiscuous mode [ 38.177060][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.178832][ T6423] Cannot create hsr debugfs directory [ 38.197461][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.199071][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.204938][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.210571][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.212116][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.218044][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.338816][ T6429] hsr_slave_0: entered promiscuous mode [ 38.377969][ T6429] hsr_slave_1: entered promiscuous mode [ 38.416852][ T6429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.418717][ T6429] Cannot create hsr debugfs directory [ 38.449184][ T6424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.452789][ T6424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.470341][ T6424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.473679][ T6424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.533483][ T6425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.537927][ T6425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.542002][ T6425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.548294][ T6425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.582620][ T6426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.593458][ T6426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.599300][ T6426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.602441][ T6426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.624442][ T6423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.641382][ T6423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.653818][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.658623][ T6423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.661858][ T6423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.668970][ T6438] Bluetooth: hci1: command tx timeout [ 38.687665][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.719022][ T6429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.725008][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.726807][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.732072][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.733766][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.737313][ T6438] Bluetooth: hci4: command tx timeout [ 38.738709][ T6438] Bluetooth: hci3: command tx timeout [ 38.739913][ T6438] Bluetooth: hci2: command tx timeout [ 38.741161][ T6438] Bluetooth: hci0: command tx timeout [ 38.743936][ T6429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.793999][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.798100][ T6429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.801752][ T6429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.836489][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.859456][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.861012][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.871518][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.902540][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.907567][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.909141][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.921052][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.938872][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.941808][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.943519][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.945967][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.947504][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.961390][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.973864][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.019032][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.020613][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.040524][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.064805][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.066459][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.071970][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.073546][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.076134][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.077737][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.131482][ T6424] veth0_vlan: entered promiscuous mode [ 39.143283][ T6424] veth1_vlan: entered promiscuous mode [ 39.170031][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.192405][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.240635][ T6424] veth0_macvtap: entered promiscuous mode [ 39.244743][ T6424] veth1_macvtap: entered promiscuous mode [ 39.264893][ T6425] veth0_vlan: entered promiscuous mode [ 39.290691][ T6426] veth0_vlan: entered promiscuous mode [ 39.302322][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.306257][ T6425] veth1_vlan: entered promiscuous mode [ 39.313359][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.321381][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.340070][ T6426] veth1_vlan: entered promiscuous mode [ 39.355550][ T6426] veth0_macvtap: entered promiscuous mode [ 39.366102][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.375377][ T6424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.384486][ T6424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.386548][ T6424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.389035][ T6424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.394110][ T6426] veth1_macvtap: entered promiscuous mode [ 39.429842][ T6425] veth0_macvtap: entered promiscuous mode [ 39.433036][ T6425] veth1_macvtap: entered promiscuous mode [ 39.449576][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.452692][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.456171][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.472094][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.474400][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.478258][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.494224][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.496717][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.500992][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.503261][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.506559][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.511088][ T6423] veth0_vlan: entered promiscuous mode [ 39.515878][ T6426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.523105][ T6426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.524939][ T6426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.527471][ T6426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.545479][ T6423] veth1_vlan: entered promiscuous mode [ 39.548771][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.551107][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.553250][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.555604][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.559544][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.574479][ T6425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.576329][ T6425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.578992][ T6425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.581106][ T6425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.593509][ T6423] veth0_macvtap: entered promiscuous mode [ 39.599426][ T6429] veth0_vlan: entered promiscuous mode [ 39.611778][ T6429] veth1_vlan: entered promiscuous mode [ 39.623927][ T6423] veth1_macvtap: entered promiscuous mode [ 39.627894][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.629625][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.681095][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.681750][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.682960][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.685228][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.690250][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.692613][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.694623][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.698184][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.702179][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.713914][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.716389][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.722974][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.725517][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.729291][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.731604][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.734601][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.742798][ T6429] veth0_macvtap: entered promiscuous mode [ 39.746082][ T6429] veth1_macvtap: entered promiscuous mode [ 39.754762][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.757574][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.759973][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.762232][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.764301][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.767373][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.769506][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.771946][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.775677][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.781241][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.782931][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.805606][ T6423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.808404][ T6423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.810517][ T6423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.812577][ T6423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.823844][ T837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.824180][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.825558][ T837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.831569][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.833989][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.836579][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.839392][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.841384][ T6424] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.842269][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.842290][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.853043][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.856327][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.862395][ T6429] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.864356][ T6429] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.866337][ T6429] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.868911][ T6429] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.904374][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.906140][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.940251][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.942335][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.012801][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.014625][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.016332][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.044378][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.111362][ T837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.113378][ T837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.135544][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.138000][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.196431][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.198533][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.741101][ T6433] Bluetooth: hci1: command tx timeout [ 40.823341][ T6433] Bluetooth: hci0: command tx timeout [ 40.824808][ T6433] Bluetooth: hci2: command tx timeout [ 40.826556][ T6433] Bluetooth: hci3: command tx timeout [ 40.828507][ T6433] Bluetooth: hci4: command tx timeout [ 40.882171][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.884244][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.791975][ T6532] binder: 6520:6532 BC_ACQUIRE_DONE u0000000000000001 no match [ 41.793785][ T6532] binder: 6520:6532 got reply transaction with no transaction stack [ 41.795688][ T6532] binder: 6520:6532 transaction reply to 0:0 failed 1/29201/-71, size 96-0 line 3046 [ 43.017535][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.021547][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.653699][ T6438] Bluetooth: hci1: command tx timeout [ 43.655228][ T6438] Bluetooth: hci4: command tx timeout [ 43.656638][ T6438] Bluetooth: hci3: command tx timeout [ 43.658241][ T6438] Bluetooth: hci2: command tx timeout [ 43.659719][ T6438] Bluetooth: hci0: command tx timeout [ 44.333694][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 44.337245][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 45.127955][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.130734][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.488095][ T6556] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.937024][ T6433] Bluetooth: hci0: command tx timeout [ 45.938268][ T6433] Bluetooth: hci2: command tx timeout [ 45.939478][ T6433] Bluetooth: hci3: command tx timeout [ 45.940661][ T6433] Bluetooth: hci4: command tx timeout [ 45.941839][ T6433] Bluetooth: hci1: command tx timeout [ 47.754954][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.759843][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.821020][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.823520][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.230873][ T6591] syz.0.22: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 48.236145][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.0.22 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 48.236166][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.236175][ T6591] Call trace: [ 48.236179][ T6591] show_stack+0x2c/0x3c (C) [ 48.236199][ T6591] dump_stack_lvl+0xe4/0x150 [ 48.236224][ T6591] dump_stack+0x1c/0x28 [ 48.236238][ T6591] warn_alloc+0x220/0x3a4 [ 48.236257][ T6591] __vmalloc_node_range_noprof+0x114/0xfd8 [ 48.236278][ T6591] vmalloc_user_noprof+0x100/0x15c [ 48.236293][ T6591] xskq_create+0xd4/0x170 [ 48.236307][ T6591] xsk_init_queue+0xb0/0x118 [ 48.236320][ T6591] xsk_setsockopt+0x4b4/0x940 [ 48.236334][ T6591] do_sock_setsockopt+0x2a0/0x4e0 [ 48.236348][ T6591] __sys_setsockopt+0x128/0x1a8 [ 48.236361][ T6591] __arm64_sys_setsockopt+0xb8/0xd4 [ 48.236374][ T6591] invoke_syscall+0x98/0x2b8 [ 48.236387][ T6591] el0_svc_common+0x130/0x23c [ 48.236403][ T6591] do_el0_svc+0x48/0x58 [ 48.236419][ T6591] el0_svc+0x54/0x168 [ 48.236434][ T6591] el0t_64_sync_handler+0x84/0x108 [ 48.236449][ T6591] el0t_64_sync+0x198/0x19c [ 48.246117][ T6591] Mem-Info: [ 48.253553][ T6591] active_anon:81 inactive_anon:4623 isolated_anon:0 [ 48.253553][ T6591] active_file:2027 inactive_file:3564 isolated_file:0 [ 48.253553][ T6591] unevictable:768 dirty:1550 writeback:0 [ 48.253553][ T6591] slab_reclaimable:9464 slab_unreclaimable:87676 [ 48.253553][ T6591] mapped:28377 shmem:1035 pagetables:635 [ 48.253553][ T6591] sec_pagetables:0 bounce:0 [ 48.253553][ T6591] kernel_misc_reclaimable:0 [ 48.253553][ T6591] free:1455399 free_pcp:471 free_cma:7360 [ 48.254253][ T6591] Node 0 active_anon:324kB inactive_anon:18492kB active_file:8108kB inactive_file:14256kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:113508kB dirty:6200kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8484kB pagetables:2540kB sec_pagetables:0kB all_unreclaimable? no [ 48.255134][ T6591] Node 0 DMA free:3076784kB boost:0kB min:20860kB low:26072kB high:31284kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:29440kB [ 48.257932][ T6591] lowmem_reserve[]: 0 0 3488 0 0 [ 48.261623][ T6591] Node 0 Normal free:2744812kB boost:0kB min:24192kB low:30240kB high:36288kB reserved_highatomic:0KB active_anon:324kB inactive_anon:18592kB active_file:8108kB inactive_file:14256kB unevictable:3072kB writepending:6200kB present:5242880kB managed:3576756kB mlocked:0kB bounce:0kB free_pcp:1820kB local_pcp:1300kB free_cma:0kB [ 48.262908][ T6591] lowmem_reserve[]: 0 0 0 0 0 [ 48.274850][ T6591] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 3*256kB (UC) 1*512kB (C) 1*1024kB (U) 1*2048kB (U) 750*4096kB (MC) = 3076784kB [ 48.588202][ T6591] Node 0 Normal: 22*4kB (UME) 256*8kB (UME) 28*16kB (UME) 12*32kB (UME) 4*64kB (E) 11*128kB (UME) 23*256kB (UME) 22*512kB (ME) 11*1024kB (UME) 6*2048kB (UME) 658*4096kB (M) = 2740504kB [ 48.588392][ T6591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.588405][ T6591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 48.588418][ T6591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 48.588431][ T6591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 48.588444][ T6591] 6606 total pagecache pages [ 48.588451][ T6591] 0 pages in swap cache [ 48.588457][ T6591] Free swap = 124996kB [ 48.588465][ T6591] Total swap = 124996kB [ 48.588473][ T6591] 2097152 pages RAM [ 48.588479][ T6591] 0 pages HighMem/MovableOnly [ 48.588486][ T6591] 432915 pages reserved [ 48.588493][ T6591] 8192 pages cma reserved [ 48.588500][ T6591] 0 pages hwpoisoned [ 48.993734][ T6603] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.524042][ T6611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.279748][ T6624] syz.2.31 (6624): drop_caches: 2 [ 51.572301][ T6627] random: crng reseeded on system resumption [ 51.756975][ T6625] could not allocate digest TFM handle sha512-avx2 [ 51.759001][ T6626] could not allocate digest TFM handle sha224-ni [ 52.029042][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.031027][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.044732][ T6611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.405002][ T6611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.969161][ T6611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.365206][ T6611] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.384858][ T6611] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.403426][ T6611] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.440002][ T6611] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.646006][ T6678] Zero length message leads to an empty skb [ 54.754725][ T6696] ALSA: mixer_oss: invalid OSS volume '' [ 56.755570][ T6707] capability: warning: `syz.3.56' uses 32-bit capabilities (legacy support in use) [ 57.253868][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 57.270045][ T30] audit: type=1326 audit(57.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6712 comm="syz.0.59" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b4d528 code=0x0 [ 57.422125][ T6438] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 57.424904][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: kworker/u9:7 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 57.427138][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.429445][ T6438] Workqueue: hci0 hci_rx_work [ 57.430488][ T6438] Call trace: [ 57.431077][ T6438] show_stack+0x2c/0x3c (C) [ 57.432034][ T6438] dump_stack_lvl+0xe4/0x150 [ 57.433035][ T6438] dump_stack+0x1c/0x28 [ 57.433999][ T6438] sysfs_create_dir_ns+0x278/0x318 [ 57.435050][ T6438] kobject_add_internal+0x598/0xb04 [ 57.436224][ T6438] kobject_add+0x14c/0x224 [ 57.437466][ T6438] device_add+0x3a0/0xa6c [ 57.438497][ T6438] hci_conn_add_sysfs+0xc4/0x1cc [ 57.439623][ T6438] le_conn_complete_evt+0x9a8/0xf0c [ 57.440743][ T6438] hci_le_enh_conn_complete_evt+0x114/0x414 [ 57.442170][ T6438] hci_le_meta_evt+0x2a4/0x478 [ 57.443267][ T6438] hci_event_packet+0x890/0x106c [ 57.444499][ T6438] hci_rx_work+0x318/0xa80 [ 57.445401][ T6438] process_one_work+0x7bc/0x1600 [ 57.446560][ T6438] worker_thread+0x97c/0xeec [ 57.447532][ T6438] kthread+0x288/0x310 [ 57.448382][ T6438] ret_from_fork+0x10/0x20 [ 57.449379][ C0] vkms_vblank_simulate: vblank timer overrun [ 57.451139][ T6438] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.454368][ T6438] Bluetooth: hci0: failed to register connection device [ 58.276677][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 58.292127][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.294229][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.156401][ T6760] nbd: nbd2 already in use [ 61.913242][ T6780] could not allocate digest TFM handle sha512-avx2 [ 61.914874][ T6781] could not allocate digest TFM handle sha224-ni [ 62.093907][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.095790][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.177468][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.250846][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 62.347188][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.349944][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.352054][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.355195][ T8] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 62.361753][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.383694][ T8] usb 1-1: config 0 descriptor?? [ 62.395510][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.398013][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.414193][ T6798] delete_channel: no stack [ 62.922334][ T6790] delete_channel: no stack [ 63.217854][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.219934][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.477887][ T8] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 63.479775][ T8] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 63.481246][ T8] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 63.482711][ T8] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 63.484114][ T8] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 63.492567][ T8] acrux 0003:1A34:0802.0001: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 63.495000][ T8] acrux 0003:1A34:0802.0001: no inputs found [ 63.496423][ T8] acrux 0003:1A34:0802.0001: Failed to enable force feedback support, error: -19 [ 64.857428][ T2345] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.858938][ T2345] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.955799][ T6507] usb 1-1: USB disconnect, device number 2 [ 67.699839][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.817190][ T6853] warning: `syz.1.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.876854][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 67.898541][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.902254][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.904594][ T27] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 67.955442][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.009412][ T27] usb 1-1: config 0 descriptor?? [ 68.578623][ T6870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.584652][ T6870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.668679][ T27] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 68.875425][ T27] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 69.078017][ T27] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 69.281440][ T27] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 69.284923][ T27] ft260 0003:0403:6030.0002: i2c bus error: 0x12 [ 70.028832][ T6888] syz.1.106 (6888): drop_caches: 2 [ 70.133515][ T27] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 70.180456][ T30] audit: type=1326 audit(70.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c34d528 code=0x7ffc0000 [ 70.185747][ T2251] cfg80211: failed to load regulatory.db [ 70.190821][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.192480][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.194406][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.196172][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.199551][ T30] audit: type=1326 audit(70.170:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff9c34d528 code=0x7ffc0000 [ 70.203783][ T30] audit: type=1326 audit(70.170:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c34d528 code=0x7ffc0000 [ 70.208084][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.219071][ T30] audit: type=1326 audit(70.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c34d528 code=0x7ffc0000 [ 70.224769][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.226426][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.237595][ T30] audit: type=1326 audit(70.200:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff9c34d528 code=0x7ffc0000 [ 70.242043][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.243740][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.246103][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.247907][ T30] audit: type=1326 audit(70.200:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c34d528 code=0x7ffc0000 [ 70.252344][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.255576][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.268624][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.277666][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.279279][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.288552][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.291761][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.293313][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.294986][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.296562][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.306154][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.308638][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.310139][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.311715][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.313370][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.315061][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.316518][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.318347][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.319945][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.321638][ T27] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38 [ 70.362716][ T27] usb 1-1: USB disconnect, device number 3 [ 70.394245][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.396063][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.543282][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'. [ 70.952347][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 71.191863][ T6915] netlink: 100 bytes leftover after parsing attributes in process `syz.1.117'. [ 71.579471][ T6923] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.594839][ T6923] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 72.083896][ T6925] netlink: 224 bytes leftover after parsing attributes in process `syz.1.122'. [ 72.085980][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 72.248040][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.262527][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.281047][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.283107][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.382854][ T6433] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 72.385191][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: kworker/u9:3 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 72.387274][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.389498][ T6433] Workqueue: hci1 hci_rx_work [ 72.390569][ T6433] Call trace: [ 72.391270][ T6433] show_stack+0x2c/0x3c (C) [ 72.392275][ T6433] dump_stack_lvl+0xe4/0x150 [ 72.393339][ T6433] dump_stack+0x1c/0x28 [ 72.394318][ T6433] sysfs_create_dir_ns+0x278/0x318 [ 72.395471][ T6433] kobject_add_internal+0x598/0xb04 [ 72.396520][ T6433] kobject_add+0x14c/0x224 [ 72.397491][ T6433] device_add+0x3a0/0xa6c [ 72.398395][ T6433] hci_conn_add_sysfs+0xc4/0x1cc [ 72.399556][ T6433] le_conn_complete_evt+0x9a8/0xf0c [ 72.400820][ T6433] hci_le_conn_complete_evt+0x114/0x404 [ 72.402068][ T6433] hci_le_meta_evt+0x2a4/0x478 [ 72.403184][ T6433] hci_event_packet+0x890/0x106c [ 72.404308][ T6433] hci_rx_work+0x318/0xa80 [ 72.405291][ T6433] process_one_work+0x7bc/0x1600 [ 72.406427][ T6433] worker_thread+0x97c/0xeec [ 72.407354][ T6433] kthread+0x288/0x310 [ 72.408201][ T6433] ret_from_fork+0x10/0x20 [ 72.410008][ T6433] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 72.413171][ T6433] Bluetooth: hci1: failed to register connection device [ 72.711947][ T10] ================================================================== [ 72.713930][ T10] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x34/0x158 [ 72.715873][ T10] Read of size 8 at addr ffff0000ef38cb08 by task kworker/0:1/10 [ 72.717612][ T10] [ 72.718111][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 72.720156][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.722494][ T10] Workqueue: events binder_deferred_func [ 72.723807][ T10] Call trace: [ 72.724581][ T10] show_stack+0x2c/0x3c (C) [ 72.725601][ T10] dump_stack_lvl+0xe4/0x150 [ 72.726620][ T10] print_report+0x198/0x538 [ 72.727742][ T10] kasan_report+0xd8/0x138 [ 72.728743][ T10] __asan_report_load8_noabort+0x20/0x2c [ 72.729917][ T10] __list_del_entry_valid_or_report+0x34/0x158 [ 72.731359][ T10] binder_release_work+0xc0/0x4f4 [ 72.732508][ T10] binder_deferred_func+0x109c/0x1270 [ 72.733923][ T10] process_one_work+0x7bc/0x1600 [ 72.735050][ T10] worker_thread+0x97c/0xeec [ 72.736084][ T10] kthread+0x288/0x310 [ 72.736942][ T10] ret_from_fork+0x10/0x20 [ 72.737978][ T10] [ 72.738511][ T10] Allocated by task 6957: [ 72.739419][ T10] kasan_save_track+0x40/0x78 [ 72.740533][ T10] kasan_save_alloc_info+0x40/0x50 [ 72.741669][ T10] __kasan_kmalloc+0xac/0xc4 [ 72.742754][ T10] __kmalloc_cache_noprof+0x244/0x378 [ 72.744039][ T10] binder_ioctl_write_read+0x1e94/0xb0d8 [ 72.745304][ T10] binder_ioctl+0x408/0x2670 [ 72.746329][ T10] __arm64_sys_ioctl+0x14c/0x1c8 [ 72.747466][ T10] invoke_syscall+0x98/0x2b8 [ 72.748473][ T10] el0_svc_common+0x130/0x23c [ 72.749000][ T6959] mmap: syz.2.136 (6959) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.749549][ T10] do_el0_svc+0x48/0x58 [ 72.753043][ T10] el0_svc+0x54/0x168 [ 72.753887][ T10] el0t_64_sync_handler+0x84/0x108 [ 72.755049][ T10] el0t_64_sync+0x198/0x19c [ 72.756071][ T10] [ 72.756576][ T10] Freed by task 10: [ 72.757462][ T10] kasan_save_track+0x40/0x78 [ 72.758518][ T10] kasan_save_free_info+0x54/0x6c [ 72.759658][ T10] __kasan_slab_free+0x64/0x8c [ 72.760822][ T10] kfree+0x184/0x47c [ 72.761778][ T10] binder_deferred_func+0xff0/0x1270 [ 72.763068][ T10] process_one_work+0x7bc/0x1600 [ 72.764232][ T10] worker_thread+0x97c/0xeec [ 72.765283][ T10] kthread+0x288/0x310 [ 72.766140][ T10] ret_from_fork+0x10/0x20 [ 72.767243][ T10] [ 72.767743][ T10] The buggy address belongs to the object at ffff0000ef38cb00 [ 72.767743][ T10] which belongs to the cache kmalloc-64 of size 64 [ 72.770888][ T10] The buggy address is located 8 bytes inside of [ 72.770888][ T10] freed 64-byte region [ffff0000ef38cb00, ffff0000ef38cb40) [ 72.773899][ T10] [ 72.774403][ T10] The buggy address belongs to the physical page: [ 72.775842][ T10] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12f38c [ 72.777883][ T10] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 72.779594][ T10] page_type: f5(slab) [ 72.780470][ T10] raw: 05ffc00000000000 ffff0000c00018c0 dead000000000100 dead000000000122 [ 72.782659][ T10] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 72.784505][ T10] page dumped because: kasan: bad access detected [ 72.785941][ T10] [ 72.786479][ T10] Memory state around the buggy address: [ 72.787777][ T10] ffff0000ef38ca00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 72.789755][ T10] ffff0000ef38ca80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 72.791508][ T10] >ffff0000ef38cb00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 72.793325][ T10] ^ [ 72.794310][ T10] ffff0000ef38cb80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 72.796084][ T10] ffff0000ef38cc00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 72.797841][ T10] ================================================================== [ 72.799712][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.801450][ T10] Disabling lock debugging due to kernel taint [ 72.803139][ T10] Unable to handle kernel paging request at virtual address 00060083c0000001 [ 72.804959][ T10] Mem abort info: [ 72.805692][ T10] ESR = 0x0000000096000004 [ 72.806685][ T10] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.808060][ T10] SET = 0, FnV = 0 [ 72.808931][ T10] EA = 0, S1PTW = 0 [ 72.809808][ T10] FSC = 0x04: level 0 translation fault [ 72.810940][ T10] Data abort info: [ 72.811740][ T10] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 72.813047][ T10] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.814374][ T10] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.815747][ T10] [00060083c0000001] address between user and kernel address ranges [ 72.818190][ T10] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 72.819751][ T10] Modules linked in: [ 72.820589][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 72.823106][ T10] Tainted: [B]=BAD_PAGE [ 72.823946][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.826288][ T10] Workqueue: events binder_deferred_func [ 72.827500][ T10] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 72.829263][ T10] pc : __list_del_entry_valid_or_report+0x78/0x158 [ 72.830683][ T10] lr : __list_del_entry_valid_or_report+0x4c/0x158 [ 72.832237][ T10] sp : ffff8000979979c0 [ 72.833192][ T10] x29: ffff8000979979c0 x28: ffff700012f32f80 x27: ffff0000ef38cb00 [ 72.834892][ T10] x26: dfff800000000000 x25: ffff8000922b00a0 x24: ffff80008f154f3b [ 72.836621][ T10] x23: ffff80008f154f16 x22: dfff800000000000 x21: 0034041e0000000a [ 72.838435][ T10] x20: ffff0000c767d300 x19: ffff0000ef38cb00 x18: 0000000000000008 [ 72.840052][ T10] x17: 0000000000000000 x16: ffff80008b47f65c x15: 0000000000000001 [ 72.841787][ T10] x14: 1ffff000125bc2e8 x13: 0000000000000000 x12: 0000000000000000 [ 72.843703][ T10] x11: ffff7000125bc2e9 x10: 0000000000ff0100 x9 : ffff80009746b3a0 [ 72.845348][ T10] x8 : 00068083c0000001 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.847082][ T10] x5 : ffff800097996ff8 x4 : ffff80008f9bd220 x3 : ffff800083161924 [ 72.848930][ T10] x2 : dead000000000122 x1 : 0000000000000008 x0 : 0000000000000000 [ 72.850702][ T10] Call trace: [ 72.851499][ T10] __list_del_entry_valid_or_report+0x78/0x158 (P) [ 72.852973][ T10] __list_del_entry_valid_or_report+0x4c/0x158 (L) [ 72.854461][ T10] binder_release_work+0xc0/0x4f4 [ 72.855568][ T10] binder_deferred_func+0x109c/0x1270 [ 72.856673][ T10] process_one_work+0x7bc/0x1600 [ 72.857859][ T10] worker_thread+0x97c/0xeec [ 72.858947][ T10] kthread+0x288/0x310 [ 72.859870][ T10] ret_from_fork+0x10/0x20 [ 72.860869][ T10] Code: 91008902 eb0202bf 54000520 d343fea8 (38766908) [ 72.862401][ T10] ---[ end trace 0000000000000000 ]--- [ 72.982208][ T10] Kernel panic - not syncing: Oops: Fatal exception [ 72.983771][ T10] SMP: stopping secondary CPUs [ 72.984831][ T10] Kernel Offset: disabled [ 72.985754][ T10] CPU features: 0x40,0000081c,00800250,82017203 [ 72.987001][ T10] Memory Limit: none [ 73.084201][ T10] Rebooting in 86400 seconds..