last executing test programs: 10.746292685s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}]}}]}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x1000}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 9.234290869s ago: executing program 1 (id=13): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8.123347016s ago: executing program 1 (id=26): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r0, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d", 0x5d) 8.025050067s ago: executing program 1 (id=28): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)='(', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000f00)='0', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="f61354896ddadd6dd551692941291945d2caf0abafead8cd7fd2f025a147883d47465e3249627f2b6d2b4369a2e4f351921ca1dc677d15439a9af8bfb6584ae738859237c725eca9fa90786a134c5eca039ee267ff15c8fa6256f89db34ac656eafeb770bb08cc8e70f3897c2be3cd0290", 0x71}], 0x1}}], 0x3, 0xc0) sendto$inet(r0, &(0x7f0000000640)="06d924495b", 0x5, 0x4008841, 0x0, 0x0) 7.938570879s ago: executing program 1 (id=29): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7.371052687s ago: executing program 1 (id=37): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x1, 0xfffffffffffffde4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 5.790545901s ago: executing program 4 (id=61): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)={0x7f0, 0x1, [{0x1, 0x1}]}) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) 5.768203502s ago: executing program 4 (id=63): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x5, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 4.881831265s ago: executing program 4 (id=70): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0x4) 4.837704276s ago: executing program 4 (id=71): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 4.750524418s ago: executing program 4 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) 4.708393958s ago: executing program 4 (id=74): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add4", 0x8}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 3.428806348s ago: executing program 0 (id=90): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e0027000f00000002800600121f", 0x2e}], 0x1}, 0x0) 3.215707551s ago: executing program 0 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) 3.041955084s ago: executing program 0 (id=94): getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @local}}, [0x10000, 0x8, 0x6, 0x10001, 0xfff8000000000000, 0x8000000000008, 0x3e3, 0x39, 0x5, 0x1eb, 0x2f, 0x7ffffbff, 0x7, 0xd635b1b, 0x10000]}, &(0x7f0000000180)=0x100) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x180, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc16}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa500}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c89ce0a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb6b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="3902800000000000000014000000040007"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.934618385s ago: executing program 0 (id=96): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x44, 0x1d, 0x37, 0x20, 0x2294, 0x425a, 0x20b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x76, 0xb7, 0xa3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x5, 0x0, 0xfe}}]}}]}}]}}, 0x0) 1.879332852s ago: executing program 3 (id=111): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x59033, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.766638494s ago: executing program 3 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) 1.604727226s ago: executing program 3 (id=115): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3863, 0x208, 0x9, 0x800, 0x5, 0x9, 0xfff9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.262528081s ago: executing program 0 (id=116): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3400000002400001003a03"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x87a6e3291c50835a) 1.118313733s ago: executing program 0 (id=120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000080)={0x20, 0xe, 0x5, '\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.071584944s ago: executing program 3 (id=121): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 405.549954ms ago: executing program 3 (id=124): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x59033, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 405.115374ms ago: executing program 3 (id=125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 158.402848ms ago: executing program 2 (id=127): syz_emit_ethernet(0x4e, &(0x7f0000000a80)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, "cf75fc179d582c67"}}}}}, 0x0) 145.748948ms ago: executing program 2 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) 111.543669ms ago: executing program 2 (id=129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5, 0x0, 0x0, 0xffff}, {0x3d}, {}, {}, {0x60}, {0x0, 0x0, 0x0, 0x8000}, {}, {0xfffc}, {0x0, 0x1}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4ba) 18.05039ms ago: executing program 2 (id=130): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x680081, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a0000"], 0x0) 17.88906ms ago: executing program 2 (id=131): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x83cff000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 0s ago: executing program 2 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xab5af60351d76db4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x25, 0x0, &(0x7f0000000040)="13435c46632b5f1ef020bc6a5c73e4e71c9b050000000500080001d67be98c8b38e34bd008", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 43.427177][ T4013] cgroup: Unknown subsys name 'net' [ 43.681412][ T4013] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.027136][ T4013] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.602550][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 45.657719][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 45.665261][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 45.681287][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 45.721185][ T4039] chnl_net:caif_netlink_parms(): no params data found [ 45.768263][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.770400][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.773170][ T4026] device bridge_slave_0 entered promiscuous mode [ 45.812384][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.815930][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.819029][ T4023] device bridge_slave_0 entered promiscuous mode [ 45.822556][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.825101][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.828059][ T4026] device bridge_slave_1 entered promiscuous mode [ 45.846333][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.848436][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.851343][ T4024] device bridge_slave_0 entered promiscuous mode [ 45.855381][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.857326][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.860095][ T4023] device bridge_slave_1 entered promiscuous mode [ 45.882804][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.885157][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.887977][ T4024] device bridge_slave_1 entered promiscuous mode [ 45.936805][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.941728][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.977570][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.981706][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.985021][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.987178][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.990000][ T4039] device bridge_slave_0 entered promiscuous mode [ 45.993150][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.995589][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.998365][ T4036] device bridge_slave_0 entered promiscuous mode [ 46.003190][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.018613][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.020653][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.023430][ T4039] device bridge_slave_1 entered promiscuous mode [ 46.026337][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.028374][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.031097][ T4036] device bridge_slave_1 entered promiscuous mode [ 46.035582][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.047812][ T4026] team0: Port device team_slave_0 added [ 46.051436][ T4026] team0: Port device team_slave_1 added [ 46.093933][ T4023] team0: Port device team_slave_0 added [ 46.110868][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.115626][ T4024] team0: Port device team_slave_0 added [ 46.124634][ T4023] team0: Port device team_slave_1 added [ 46.128165][ T4039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.133314][ T4039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.138370][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.147663][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.149696][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.163488][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.169252][ T4024] team0: Port device team_slave_1 added [ 46.171691][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.173616][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.181180][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.239161][ T4036] team0: Port device team_slave_0 added [ 46.243516][ T4036] team0: Port device team_slave_1 added [ 46.272529][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.275043][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.282161][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.286823][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.288763][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.296248][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.301925][ T4039] team0: Port device team_slave_0 added [ 46.311089][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.313112][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.323740][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.328802][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.330773][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.338477][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.386451][ T4026] device hsr_slave_0 entered promiscuous mode [ 46.424589][ T4026] device hsr_slave_1 entered promiscuous mode [ 46.469043][ T4039] team0: Port device team_slave_1 added [ 46.478760][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.480841][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.488530][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.510275][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.512275][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.519553][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.560963][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.563016][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.574290][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.610326][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.612393][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.619720][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.686480][ T4023] device hsr_slave_0 entered promiscuous mode [ 46.734560][ T4023] device hsr_slave_1 entered promiscuous mode [ 46.774196][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.776679][ T4023] Cannot create hsr debugfs directory [ 46.836663][ T4024] device hsr_slave_0 entered promiscuous mode [ 46.894413][ T4024] device hsr_slave_1 entered promiscuous mode [ 46.934196][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.936420][ T4024] Cannot create hsr debugfs directory [ 46.977205][ T4036] device hsr_slave_0 entered promiscuous mode [ 47.014624][ T4036] device hsr_slave_1 entered promiscuous mode [ 47.054367][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.056500][ T4036] Cannot create hsr debugfs directory [ 47.146264][ T4039] device hsr_slave_0 entered promiscuous mode [ 47.184366][ T4039] device hsr_slave_1 entered promiscuous mode [ 47.234807][ T4039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.237011][ T4039] Cannot create hsr debugfs directory [ 47.314887][ T4025] Bluetooth: hci0: command 0x0409 tx timeout [ 47.314992][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 47.316894][ T4025] Bluetooth: hci2: command 0x0409 tx timeout [ 47.318632][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 47.321561][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 47.500652][ T4023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.536374][ T4023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.578293][ T4023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.627604][ T4023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.712923][ T4026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.754367][ T4026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.812990][ T4026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.860108][ T4026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.956447][ T4036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.985824][ T4036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.037718][ T4036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.079771][ T4036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.153801][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.205040][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.209042][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.213344][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.255227][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.258888][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.313227][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.346199][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.407117][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.410197][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.413550][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.415766][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.419253][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.439096][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.442004][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.445260][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.447309][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.474573][ T4039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.512480][ T4039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.559589][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.571644][ T4039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.610024][ T4039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.651424][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.654710][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.682546][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.686523][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.690318][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.693381][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.710562][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.713458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.717689][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.720788][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.728342][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.743182][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.747331][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.750059][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.752192][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.755591][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.758253][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.760917][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.769205][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.772832][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.776534][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.779390][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.792492][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.802048][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.827498][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.832266][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.838696][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.840829][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.846296][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.849673][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.852435][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.854585][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.858257][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.861660][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.886319][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.889284][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.891925][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.893910][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.912808][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.916941][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.945176][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.948709][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.952210][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.962776][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.966494][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.971829][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.982427][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.992819][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.002996][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.010314][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.013535][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.030826][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.033709][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.037636][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.041130][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.052737][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.073839][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.077058][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.079328][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.082300][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.096854][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.117407][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.120331][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.131927][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.151421][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.160628][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.201790][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.205364][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.208155][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.222269][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.229482][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.242738][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.246696][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.249600][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.251597][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.256843][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.259537][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.262265][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.287364][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.290376][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.293202][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.295308][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.298786][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.301957][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.319996][ T4023] device veth0_vlan entered promiscuous mode [ 49.327652][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.330637][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.342669][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.348150][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.351060][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.353664][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.359071][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.362112][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.375553][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.379034][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.382794][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.387801][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.390972][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.392974][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.395968][ T4093] Bluetooth: hci2: command 0x041b tx timeout [ 49.397079][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.400098][ T4093] Bluetooth: hci1: command 0x041b tx timeout [ 49.402489][ T4093] Bluetooth: hci3: command 0x041b tx timeout [ 49.404700][ T4093] Bluetooth: hci4: command 0x041b tx timeout [ 49.407001][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.410412][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.424250][ T4093] Bluetooth: hci0: command 0x041b tx timeout [ 49.432856][ T4023] device veth1_vlan entered promiscuous mode [ 49.436689][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.439437][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.441676][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.443874][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.449094][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.458222][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.461117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.463819][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.465944][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.473723][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.479831][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.503505][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.507440][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.510982][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.522565][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.532709][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.540127][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.549099][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.552370][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.559833][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.577109][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.580169][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.601221][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.608054][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.611197][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.615620][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.618669][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.621587][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.638013][ T4039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.641658][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.647378][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.650404][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.667149][ T4023] device veth0_macvtap entered promiscuous mode [ 49.677193][ T4023] device veth1_macvtap entered promiscuous mode [ 49.709006][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.712036][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.741547][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.745725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.754870][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.757533][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.770871][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.783900][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.788030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.796332][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.802950][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.806316][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.820276][ T4026] device veth0_vlan entered promiscuous mode [ 49.832293][ T4026] device veth1_vlan entered promiscuous mode [ 49.845491][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.848456][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.850735][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.856370][ T4023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.859332][ T4023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.861707][ T4023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.871545][ T4023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.891494][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.941363][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.945704][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.948109][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.950406][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.956879][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.966969][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.022191][ T4026] device veth0_macvtap entered promiscuous mode [ 50.030911][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.033821][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.038325][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.041165][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.047319][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.060399][ T4026] device veth1_macvtap entered promiscuous mode [ 50.066256][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.069246][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.072171][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.099099][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.101856][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.105852][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.109475][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.117946][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.120736][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.138939][ T4036] device veth0_vlan entered promiscuous mode [ 50.147810][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.156505][ T4024] device veth0_vlan entered promiscuous mode [ 50.167229][ T4024] device veth1_vlan entered promiscuous mode [ 50.171456][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.176315][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.179458][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.183691][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.189049][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.191943][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.195336][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.198201][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.201248][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.205188][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.208425][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.241189][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.251774][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.256964][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.273655][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.277955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.292591][ T4026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.295486][ T4026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.297983][ T4026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.300448][ T4026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.319333][ T4036] device veth1_vlan entered promiscuous mode [ 50.324538][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.327434][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.330565][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.334884][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.337266][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.343547][ T4024] device veth0_macvtap entered promiscuous mode [ 50.348707][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.351701][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.357786][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.360921][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.363837][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.380111][ T4039] device veth0_vlan entered promiscuous mode [ 50.390881][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.393727][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.399567][ T4024] device veth1_macvtap entered promiscuous mode [ 50.421933][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.427118][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.430100][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.440019][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.443045][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.451389][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.455974][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.460556][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.468193][ T4039] device veth1_vlan entered promiscuous mode [ 50.473381][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.476990][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.479776][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.482638][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.489093][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.498640][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.501168][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.503636][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.507014][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.512711][ T4036] device veth0_macvtap entered promiscuous mode [ 50.529890][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.532673][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.535751][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.544947][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.548094][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.551875][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.556449][ T4136] udc-core: couldn't find an available UDC or it's busy [ 50.558431][ T4136] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.593500][ T4036] device veth1_macvtap entered promiscuous mode [ 50.686877][ T431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.689227][ T431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.692360][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.696365][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.699230][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.725534][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.728602][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.738944][ T4039] device veth0_macvtap entered promiscuous mode [ 50.743371][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.747152][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.749679][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.752563][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.756651][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.759537][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.763789][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.807339][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.810520][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.813663][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.832089][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.837660][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.840495][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.843377][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.848359][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.851277][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.858223][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.864378][ T4036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864778][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.868986][ T4036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.869343][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.871866][ T4036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.876575][ T4036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.885316][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.887680][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.889737][ T4039] device veth1_macvtap entered promiscuous mode [ 50.895385][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.898136][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.901124][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.905819][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.960219][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.963272][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.968470][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.971482][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.975818][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.978800][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.981427][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.984838][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.990380][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.006494][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.009685][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.016624][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.019566][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.022776][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.029936][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.032713][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.037682][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.043606][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.052708][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.063548][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.067156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.070169][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.099443][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.104497][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.110597][ T4039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.117835][ T4039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.131736][ T4039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.137038][ T4039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.141267][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.312254][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.315159][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.319744][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.342989][ T4148] udc-core: couldn't find an available UDC or it's busy [ 51.351952][ T4148] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.412637][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.422888][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.429945][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.472700][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.475900][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 51.484611][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 51.484722][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 51.484812][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 51.487530][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.489005][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.593504][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.596794][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.600048][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.567366][ T4159] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 52.771006][ T4168] udc-core: couldn't find an available UDC or it's busy [ 52.773065][ T4168] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.890026][ T4170] binder: 4169:4170 tried to acquire reference to desc 0, got 1 instead [ 52.906511][ T4170] binder: 4169:4170 got transaction with invalid data ptr [ 52.911823][ T4170] binder: 4169:4170 transaction failed 29201/-14, size 0-24 line 3186 [ 53.132420][ T4182] udc-core: couldn't find an available UDC or it's busy [ 53.144977][ T4182] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.434632][ T4093] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.554429][ T4089] Bluetooth: hci2: command 0x0419 tx timeout [ 53.556481][ T4089] Bluetooth: hci1: command 0x0419 tx timeout [ 53.558243][ T4089] Bluetooth: hci3: command 0x0419 tx timeout [ 53.560123][ T4089] Bluetooth: hci4: command 0x0419 tx timeout [ 53.650895][ T4190] udc-core: couldn't find an available UDC or it's busy [ 53.652989][ T4190] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.674296][ T4093] usb 1-1: Using ep0 maxpacket: 32 [ 53.773933][ T4197] device syzkaller1 entered promiscuous mode [ 53.777928][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.796753][ T4093] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.902038][ T4170] syz.1.13 (4170): drop_caches: 2 [ 53.949399][ T4202] binder: BINDER_SET_CONTEXT_MGR already set [ 53.951326][ T4202] binder: 4200:4202 ioctl 4018620d 20000040 returned -16 [ 53.954810][ T4202] binder: tried to use weak ref as strong ref [ 53.956830][ T4202] binder: 4200:4202 Acquire 1 refcount change on invalid ref 0 ret -22 [ 53.959585][ T4202] binder: 4200:4202 got transaction to invalid handle, 1 [ 53.961662][ T4202] binder: 4200:4202 transaction failed 29201/-22, size 0-0 line 2917 [ 53.964597][ T4093] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 53.967475][ T4093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.969601][ T4093] usb 1-1: Product: syz [ 53.970723][ T4093] usb 1-1: Manufacturer: syz [ 53.972031][ T4093] usb 1-1: SerialNumber: syz [ 53.981495][ T4093] usb 1-1: config 0 descriptor?? [ 54.017948][ T4093] usb 1-1: no audio or video endpoints found [ 54.120680][ T4212] udc-core: couldn't find an available UDC or it's busy [ 54.134571][ T4212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.235163][ T4025] usb 1-1: USB disconnect, device number 2 [ 54.254928][ T4215] netlink: 'syz.3.32': attribute type 29 has an invalid length. [ 54.263201][ T4215] netlink: 'syz.3.32': attribute type 29 has an invalid length. [ 54.431145][ T4230] binder: 4229:4230 tried to acquire reference to desc 0, got 1 instead [ 54.436949][ T4230] binder: 4229:4230 got transaction with invalid data ptr [ 54.439169][ T4230] binder: 4229:4230 transaction failed 29201/-14, size 0-24 line 3186 [ 54.747648][ T4230] syz.2.36 (4230): drop_caches: 2 [ 54.812537][ T4092] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.879992][ T4238] udc-core: couldn't find an available UDC or it's busy [ 54.887917][ T4238] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.362329][ T4251] udc-core: couldn't find an available UDC or it's busy [ 55.371611][ T4251] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.399329][ T4253] udc-core: couldn't find an available UDC or it's busy [ 55.402233][ T4253] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.405968][ T4092] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 55.408452][ T4092] Bluetooth: hci0: Injecting HCI hardware error event [ 55.411167][ T4034] Bluetooth: hci0: hardware error 0x00 [ 55.577897][ T4261] device syzkaller1 entered promiscuous mode [ 55.715910][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 55.716250][ T4263] device syzkaller1 entered promiscuous mode [ 55.927533][ T4269] udc-core: couldn't find an available UDC or it's busy [ 55.929979][ T4269] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.997100][ T4273] binder: 4271:4273 tried to acquire reference to desc 0, got 1 instead [ 56.000491][ T4273] binder: 4271:4273 got transaction with invalid data ptr [ 56.002804][ T4273] binder: 4271:4273 transaction failed 29201/-14, size 0-24 line 3186 [ 56.015951][ T4273] syz.3.57 (4273): drop_caches: 2 [ 56.027257][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.072146][ T4275] device syzkaller0 entered promiscuous mode [ 56.075405][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.078465][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 56.080878][ T25] usb 1-1: config 1 has no interface number 0 [ 56.082580][ T25] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.094198][ T25] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 56.098823][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.101512][ T25] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 56.104326][ T25] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.189378][ T4280] binder: 4279:4280 tried to acquire reference to desc 0, got 1 instead [ 56.192657][ T4280] binder: 4279:4280 got transaction with invalid data ptr [ 56.212642][ T4280] binder: 4279:4280 transaction failed 29201/-14, size 0-24 line 3186 [ 56.227084][ T4280] syz.3.60 (4280): drop_caches: 2 [ 56.245383][ T4282] usb usb8: usbfs: process 4282 (syz.4.61) did not claim interface 0 before use [ 56.247231][ T4069] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.266964][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.269690][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.272785][ T25] usb 1-1: Product: syz [ 56.280915][ T25] usb 1-1: Manufacturer: syz [ 56.282563][ T25] usb 1-1: SerialNumber: syz [ 56.317464][ T4285] device syzkaller1 entered promiscuous mode [ 56.384812][ T4288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.64'. [ 56.422315][ T26] audit: type=1326 audit(56.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4289 comm="syz.3.65" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7d09a8 code=0x0 [ 56.835853][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 56.839498][ T4035] Bluetooth: hci5: sending frame failed (-49) [ 57.235382][ T25] cdc_ncm 1-1:1.1: bind() failure [ 57.315940][ T4308] syz.3.73 (4308): drop_caches: 2 [ 57.365594][ T4311] input: syz1 as /devices/virtual/input/input2 [ 57.472614][ T13] usb 1-1: USB disconnect, device number 3 [ 57.775161][ T4313] udc-core: couldn't find an available UDC or it's busy [ 57.777457][ T4313] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.176875][ T4321] tmpfs: Bad value for 'mpol' [ 58.303583][ T4325] udc-core: couldn't find an available UDC or it's busy [ 58.306317][ T4325] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.320275][ T4327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 58.354237][ T4069] Bluetooth: hci4: command 0x0411 tx timeout [ 58.377811][ T4330] syz.0.85 (4330): drop_caches: 2 [ 58.486949][ T4337] udc-core: couldn't find an available UDC or it's busy [ 58.488943][ T4337] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.631460][ T4341] netlink: 'syz.0.90': attribute type 39 has an invalid length. [ 58.640499][ T4341] device lo entered promiscuous mode [ 58.853831][ T4344] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 58.867120][ T4345] tmpfs: Bad value for 'mpol' [ 58.868701][ T4344] Â: renamed from pim6reg1 [ 58.914363][ T4069] Bluetooth: hci5: command 0x1001 tx timeout [ 58.916401][ T4035] Bluetooth: hci5: sending frame failed (-49) [ 58.992763][ T4349] udc-core: couldn't find an available UDC or it's busy [ 59.015055][ T4349] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.063437][ T4353] udc-core: couldn't find an available UDC or it's busy [ 59.066895][ T4353] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.397485][ T4069] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.575133][ T4357] syz.3.97 (4357): drop_caches: 2 [ 59.626333][ T4361] device syzkaller1 left promiscuous mode [ 59.644255][ T4069] usb 1-1: Using ep0 maxpacket: 32 [ 59.925500][ T4069] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 59.928045][ T4069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.930275][ T4069] usb 1-1: Product: syz [ 59.931366][ T4069] usb 1-1: Manufacturer: syz [ 59.932575][ T4069] usb 1-1: SerialNumber: syz [ 59.956238][ T4069] usb 1-1: config 0 descriptor?? [ 59.995004][ T4069] usb 1-1: ucan: probing device on interface #0 [ 59.996850][ T4069] usb 1-1: ucan: invalid endpoint configuration [ 59.998550][ T4069] usb 1-1: ucan: probe failed; try to update the device firmware [ 60.099184][ T4394] Zero length message leads to an empty skb [ 60.119114][ T4392] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 60.224946][ T25] usb 1-1: USB disconnect, device number 4 [ 60.240640][ T4402] udc-core: couldn't find an available UDC or it's busy [ 60.242970][ T4402] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.258040][ T4403] binder: 4398:4403 tried to acquire reference to desc 0, got 1 instead [ 60.261402][ T4403] binder: 4398:4403 got transaction with invalid data ptr [ 60.263432][ T4403] binder: 4398:4403 transaction failed 29201/-14, size 0-24 line 3186 [ 60.271935][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.312387][ T4405] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 60.323510][ T4405] Â: renamed from pim6reg1 [ 60.456823][ T4407] udc-core: couldn't find an available UDC or it's busy [ 60.458876][ T4407] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.902894][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 60.909436][ T4415] tipc: Started in network mode [ 60.910917][ T4415] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 60.913386][ T4415] tipc: Enabled bearer , priority 10 [ 60.916971][ T4415] netlink: 14 bytes leftover after parsing attributes in process `syz.2.119'. [ 60.919754][ T4415] tipc: Resetting bearer [ 60.947602][ T4415] tipc: Disabling bearer [ 60.994216][ T4069] Bluetooth: hci5: command 0x1009 tx timeout [ 61.008314][ T4419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.023837][ T4419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.080039][ T4419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.086004][ T4419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.174224][ T4092] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.258754][ T4421] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 61.330518][ T4424] udc-core: couldn't find an available UDC or it's busy [ 61.332582][ T4424] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.414177][ T4092] usb 1-1: Using ep0 maxpacket: 32 [ 61.534207][ T4092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.537432][ T4092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.540325][ T4092] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 61.542754][ T4092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.548295][ T4092] usb 1-1: config 0 descriptor?? [ 61.624715][ T4427] binder: 4426:4427 tried to acquire reference to desc 0, got 1 instead [ 61.627767][ T4427] binder: 4426:4427 got transaction with invalid data ptr [ 61.629908][ T4427] binder: 4426:4427 transaction failed 29201/-14, size 0-24 line 3186 [ 61.633775][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.664837][ T4429] udc-core: couldn't find an available UDC or it's busy [ 61.666812][ T4429] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.028430][ T4092] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 62.044941][ T4092] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 62.244244][ T4092] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 62.469563][ T4092] Unable to handle kernel paging request at virtual address dfff8000000000fd [ 62.472334][ T4092] Mem abort info: [ 62.473763][ T4092] ESR = 0x0000000096000006 [ 62.475324][ T4092] EC = 0x25: DABT (current EL), IL = 32 bits [ 62.477136][ T4092] SET = 0, FnV = 0 [ 62.478185][ T4092] EA = 0, S1PTW = 0 [ 62.479320][ T4092] FSC = 0x06: level 2 translation fault [ 62.480908][ T4092] Data abort info: [ 62.481925][ T4092] ISV = 0, ISS = 0x00000006 [ 62.483157][ T4092] CM = 0, WnR = 0 [ 62.484289][ T4092] [dfff8000000000fd] address between user and kernel address ranges [ 62.486700][ T4092] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 62.488678][ T4092] Modules linked in: [ 62.489780][ T4092] CPU: 0 PID: 4092 Comm: kworker/0:5 Not tainted 5.15.186-syzkaller #0 [ 62.492033][ T4092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.494839][ T4092] Workqueue: usb_hub_wq hub_event [ 62.496192][ T4092] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.498329][ T4092] pc : ft260_smbus_xfer+0x6c/0x1220 [ 62.499700][ T4092] lr : ft260_smbus_xfer+0x48/0x1220 [ 62.501161][ T4092] sp : ffff80001fb060c0 [ 62.502296][ T4092] x29: ffff80001fb060e0 x28: dfff800000000000 x27: 0000000000000000 [ 62.504493][ T4092] x26: 0000000000000000 x25: 1fffe0001b0b3035 x24: 0000000000000000 [ 62.506750][ T4092] x23: ffff0000d85981a8 x22: 0000000000000018 x21: ffff0000d85981ac [ 62.508974][ T4092] x20: 00000000000007e8 x19: 0000000000000000 x18: 0000000000000000 [ 62.511160][ T4092] x17: ffff800016cf2000 x16: ffff8000111b2714 x15: ffff8000167d2500 [ 62.513455][ T4092] x14: ffff0000e9894080 x13: dfff800000000000 x12: 0000000000100000 [ 62.515742][ T4092] x11: 00000000000fe324 x10: ffff8000201d9000 x9 : ffff80000ed2add4 [ 62.517980][ T4092] x8 : 00000000000000fd x7 : 0000000000000000 x6 : 0000000000000000 [ 62.520184][ T4092] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 62.522422][ T4092] x2 : 0000000000000000 x1 : 0000000000000018 x0 : ffff0000d8598080 [ 62.524704][ T4092] Call trace: [ 62.525633][ T4092] ft260_smbus_xfer+0x6c/0x1220 [ 62.527004][ T4092] __i2c_smbus_xfer+0x558/0x1fbc [ 62.528363][ T4092] i2c_smbus_xfer+0x1f0/0x314 [ 62.529848][ T4092] i2c_default_probe+0x1bc/0x240 [ 62.531255][ T4092] i2c_do_add_adapter+0x388/0x7a0 [ 62.532671][ T4092] __process_new_adapter+0x28/0x3c [ 62.534191][ T4092] bus_for_each_drv+0x150/0x1d8 [ 62.535554][ T4092] i2c_register_adapter+0xd80/0x103c [ 62.537126][ T4092] i2c_add_adapter+0x16c/0x248 [ 62.538565][ T4092] ft260_probe+0x3bc/0x4f0 [ 62.539786][ T4092] hid_device_probe+0x230/0x338 [ 62.541197][ T4092] really_probe+0x26c/0xaec [ 62.542434][ T4092] __driver_probe_device+0x180/0x314 [ 62.543951][ T4092] driver_probe_device+0x78/0x34c [ 62.545368][ T4092] __device_attach_driver+0x274/0x4c4 [ 62.546878][ T4092] bus_for_each_drv+0x150/0x1d8 [ 62.548247][ T4092] __device_attach+0x2a8/0x3d4 [ 62.549623][ T4092] device_initial_probe+0x24/0x34 [ 62.551035][ T4092] bus_probe_device+0xbc/0x1c4 [ 62.552390][ T4092] device_add+0xb04/0xf94 [ 62.553639][ T4092] hid_add_device+0x310/0x4d4 [ 62.554968][ T4092] usbhid_probe+0x858/0xba4 [ 62.556195][ T4092] usb_probe_interface+0x4fc/0x994 [ 62.557673][ T4092] really_probe+0x26c/0xaec [ 62.558949][ T4092] __driver_probe_device+0x180/0x314 [ 62.560429][ T4092] driver_probe_device+0x78/0x34c [ 62.561909][ T4092] __device_attach_driver+0x274/0x4c4 [ 62.563413][ T4092] bus_for_each_drv+0x150/0x1d8 [ 62.564786][ T4092] __device_attach+0x2a8/0x3d4 [ 62.566092][ T4092] device_initial_probe+0x24/0x34 [ 62.567506][ T4092] bus_probe_device+0xbc/0x1c4 [ 62.568788][ T4092] device_add+0xb04/0xf94 [ 62.570005][ T4092] usb_set_configuration+0x15b8/0x1b2c [ 62.571577][ T4092] usb_generic_driver_probe+0x8c/0x144 [ 62.573183][ T4092] usb_probe_device+0x120/0x25c [ 62.574538][ T4092] really_probe+0x26c/0xaec [ 62.575772][ T4092] __driver_probe_device+0x180/0x314 [ 62.577251][ T4092] driver_probe_device+0x78/0x34c [ 62.578666][ T4092] __device_attach_driver+0x274/0x4c4 [ 62.580186][ T4092] bus_for_each_drv+0x150/0x1d8 [ 62.581512][ T4092] __device_attach+0x2a8/0x3d4 [ 62.582892][ T4092] device_initial_probe+0x24/0x34 [ 62.584284][ T4092] bus_probe_device+0xbc/0x1c4 [ 62.585587][ T4092] device_add+0xb04/0xf94 [ 62.586799][ T4092] usb_new_device+0x7ec/0x1164 [ 62.588132][ T4092] hub_event+0x20cc/0x4188 [ 62.589414][ T4092] process_one_work+0x79c/0x1140 [ 62.590821][ T4092] worker_thread+0x8f4/0x101c [ 62.592257][ T4092] kthread+0x374/0x454 [ 62.593410][ T4092] ret_from_fork+0x10/0x20 [ 62.594644][ T4092] Code: 966c8ce6 f9400273 911fa274 d343fe88 (387c6908) [ 62.596579][ T4092] ---[ end trace 372caa40b82d7c94 ]--- [ 62.987946][ T4092] Kernel panic - not syncing: Oops: Fatal exception [ 62.989966][ T4092] SMP: stopping secondary CPUs [ 62.991411][ T4092] Kernel Offset: disabled [ 62.992595][ T4092] CPU features: 0x8,000081c1,21302e40 [ 62.994087][ T4092] Memory Limit: none [ 63.368167][ T4092] Rebooting in 86400 seconds..