last executing test programs: 15.298770815s ago: executing program 0 (id=226): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x4000) recvmmsg(r7, 0x0, 0x0, 0x2020, 0x0) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) 10.294286436s ago: executing program 0 (id=239): syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x79bf}, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 9.624126326s ago: executing program 2 (id=241): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 9.344064061s ago: executing program 0 (id=243): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1000000000000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xecb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xdb, 0x8, 0x9}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7f, 0x0, 0x3, 0x0, 0xd}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}, {0x7d, &(0x7f0000000140)=ANY=[@ANYBLOB="7d03f80a5af8232bec78d6cfe88d8fedf60ffdd7f3c7427c778eb8179aab7713c7e4bda355405e7c6cf4bb53d808e25ac974dd004fd221e5d3c28cca4152a5e6298e102909a9f18e044948764bbb66756179aabe6281fe700bf1bdab67b8190e24aa7f1f8469259f99cecf6be0b265526f8e0ee399b0"]}]}) r4 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x7fffffff, 0x1) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) listen(r5, 0x4) listen(r5, 0xbc3) 9.342257991s ago: executing program 2 (id=253): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x54}}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0xc000) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000), 0x3, 0x2c8900) 8.13480791s ago: executing program 2 (id=246): r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x7000) mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x7, 0x12, r0, 0x30003000) 6.443647467s ago: executing program 4 (id=251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802e"], 0x1c}], 0x1}, 0x300) syz_io_uring_setup(0x24fa, 0x0, &(0x7f0000000100), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x1, 0x8, 0x0, 0x0, 0x6, 0xf799ab692c18ca67}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x30}}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r4, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) socket$kcm(0x10, 0x2, 0x4) 6.388187527s ago: executing program 2 (id=252): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x6bdd, 0x2e4}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.513633561s ago: executing program 3 (id=256): syz_io_uring_setup(0x1c51, &(0x7f0000000980)={0x0, 0x915a, 0x10180, 0x2000, 0x3aa}, &(0x7f0000000280), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) 5.461800272s ago: executing program 1 (id=257): syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f8420100103a00fe80000000000000000000000000001a000000000000000000080000000000018c"], 0x0) 5.420074973s ago: executing program 2 (id=258): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 5.391597964s ago: executing program 4 (id=259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000003c0)="e22b9a1661b1118d33fbaf2ea1abf1c3ea3e5a4ab12575a43a0b72c6f82fa2ea2a0d32327f5da6c847ff50b77008ab4481a4c3de549fc583143cf48c45a3c8c0c22ed47332edcb9b5cc1f839c39f33503a0379ec7883dd2f47c187b67553d3a808d141ce0e0a55a041edbc09b51e223ef307cd91a0ff0f60572564d7e9f6ec45cb48b331b4fd855efff6ce338139dc59c27f9abfe2bfdb567e9543549ad9e67c6d2da162933dbd48a037374b19558008cedcc015c3ee", 0xb6, 0x80c0, 0x0, 0x0) 5.302058955s ago: executing program 3 (id=260): syz_emit_ethernet(0x1ac, &(0x7f0000000200)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x2, 0x0, 0x19e, 0x64, 0x0, 0xbf, 0x2f, 0x0, @local, @multicast1, {[@rr={0x7, 0xb, 0x3a, [@multicast2, @remote]}, @ssrr={0x89, 0x1f, 0xfe, [@dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @remote, @loopback]}, @ssrr={0x89, 0xf, 0x34, [@multicast1, @empty, @multicast2]}, @lsrr={0x83, 0x3, 0x6a}, @timestamp={0x44, 0x4, 0x3c, 0x0, 0x1}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x3, 0x0, [], "d69364"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x401, 0xaf, 0x81], "1ce63770b8ed929fe98954197a2450960130c4459b334e92ecef1c178f1b7e0befa0669fd5bd9c21ed814c87652dc247f9d8b958b1d38917286217c759b8b049c10ec891395cb2c40324274bab0c79e84a"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0x100f, 0x3554], "b6cce5efc5b6a85f2f0716b6c80bf7930bf160237c5d92468ad91df1bbbc468a97c279029fec05b042dea4b62d3fac713215c85f29fadc0cb78242386ccced6221f7c5caa14bfffddd612fd3e9b52c3aea01db1b75b9624c8d636c8393dafa67007b0150cc0f994ea512ce6630678787f097ff159a59f604fad9f54bb3bd2b0401d2c9d6a4d1aa56b50cc530bbab571c7530e867f15812403450a7e2793850c726"}, {0x8, 0x88be, 0x2, {{0xd, 0x1, 0xf0, 0x0, 0x0, 0x3, 0x2, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x5, 0x3, 0x0, 0x1, 0x7}, 0x2, {0x2, 0xf, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "6198c6714e"}}}}}}, 0x0) 5.243943816s ago: executing program 3 (id=261): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000046000/0x2000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(r5, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000045c0)={0x57, 0x0, 0x6, 0x4, 0x7fffffff, 0x81}) 5.243751766s ago: executing program 4 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) open(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) r1 = dup(r0) socket$inet(0x2, 0x2000000080002, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4733, 0x10100, 0x0, 0x24d, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1200}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='(', 0x1}], 0x1}}], 0x1, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 5.243188586s ago: executing program 2 (id=271): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000800) 5.184900927s ago: executing program 1 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) 5.091825608s ago: executing program 0 (id=264): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x2, {@in6_addr=@private2, 0x86dd}}}]}, 0x38}}, 0x20044050) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) tkill(0x0, 0x7) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) r7 = openat$qrtrtun(0xffffff9c, &(0x7f0000000200), 0x40080) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r7, 0xe) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x13f, 0x5}}, 0x20) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 4.9681635s ago: executing program 1 (id=265): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ptrace(0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4f6d, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x800001, 0x2d7, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ppoll(&(0x7f0000002040), 0x0, &(0x7f0000002080)={0x77359400}, &(0x7f00000020c0)={[0x1]}, 0x8) 4.012092085s ago: executing program 0 (id=266): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000004c0)={0x0, 0x310, 0x4000, 0xffffffff, 0x10b}, &(0x7f0000000340), 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000d000000000000002564000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f000000000000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ffffffe) socket$inet_tcp(0x2, 0x1, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 3.762616679s ago: executing program 1 (id=267): epoll_create1(0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x20}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x4000) 3.72309706s ago: executing program 3 (id=268): syz_emit_ethernet(0x105, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180"], 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.664188421s ago: executing program 4 (id=269): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041d"], 0x8) 3.547262713s ago: executing program 4 (id=270): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x4, 0x24, &(0x7f0000000600)=ANY=[], 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.969719698s ago: executing program 0 (id=272): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) getsockopt(r3, 0x0, 0x5, &(0x7f0000000140)=""/181, &(0x7f0000000000)=0xb5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x58565559}}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$VIDIOC_QBUF(r0, 0xc058565d, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x151202, 0x0) 1.969468418s ago: executing program 3 (id=273): r0 = socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc84}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.360041407s ago: executing program 1 (id=274): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000200)={[{@dyn}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={0x0, 0x40000000, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r4, 0x701}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.092137462s ago: executing program 3 (id=275): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB="0a000200bbbbbbbbbbbb00"], 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 54.747719ms ago: executing program 4 (id=276): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 1 (id=277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xec}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 40.293625][ T4022] cgroup: Unknown subsys name 'net' [ 40.577416][ T4022] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 40.911276][ T4022] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 42.844662][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 42.926962][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 42.935803][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 42.956840][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 42.974646][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.976684][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.979234][ T4049] device bridge_slave_0 entered promiscuous mode [ 42.983800][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.985782][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.988526][ T4049] device bridge_slave_1 entered promiscuous mode [ 43.051990][ T4040] chnl_net:caif_netlink_parms(): no params data found [ 43.058296][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.077462][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.134505][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.136528][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.139164][ T4037] device bridge_slave_0 entered promiscuous mode [ 43.149606][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.151620][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.154305][ T4032] device bridge_slave_0 entered promiscuous mode [ 43.164455][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.166455][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.169324][ T4044] device bridge_slave_0 entered promiscuous mode [ 43.174498][ T4049] team0: Port device team_slave_0 added [ 43.176467][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.178392][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.181056][ T4037] device bridge_slave_1 entered promiscuous mode [ 43.186424][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.188431][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.191177][ T4032] device bridge_slave_1 entered promiscuous mode [ 43.206163][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.208144][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.211017][ T4044] device bridge_slave_1 entered promiscuous mode [ 43.221065][ T4049] team0: Port device team_slave_1 added [ 43.241231][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.267878][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.281928][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.284024][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.286606][ T4040] device bridge_slave_0 entered promiscuous mode [ 43.291256][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.298463][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.309365][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.314103][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.317113][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.318989][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.326479][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.330475][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.332892][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.335395][ T4040] device bridge_slave_1 entered promiscuous mode [ 43.361049][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.363350][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.370427][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.389562][ T4032] team0: Port device team_slave_0 added [ 43.394373][ T4032] team0: Port device team_slave_1 added [ 43.411113][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.422384][ T4037] team0: Port device team_slave_0 added [ 43.425796][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.435259][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.437180][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.444699][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.450078][ T4044] team0: Port device team_slave_0 added [ 43.459059][ T4037] team0: Port device team_slave_1 added [ 43.462287][ T4044] team0: Port device team_slave_1 added [ 43.471072][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.473584][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.480751][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.514652][ T4040] team0: Port device team_slave_0 added [ 43.518001][ T4040] team0: Port device team_slave_1 added [ 43.535434][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.537487][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.544931][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.584033][ T4049] device hsr_slave_0 entered promiscuous mode [ 43.621775][ T4049] device hsr_slave_1 entered promiscuous mode [ 43.675248][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.677228][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.684420][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.688465][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.690361][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.697736][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.706877][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.708825][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.716535][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.724107][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.726020][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.733664][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.737708][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.739633][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.747117][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.813692][ T4032] device hsr_slave_0 entered promiscuous mode [ 43.851664][ T4032] device hsr_slave_1 entered promiscuous mode [ 43.891468][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.893758][ T4032] Cannot create hsr debugfs directory [ 44.013388][ T4037] device hsr_slave_0 entered promiscuous mode [ 44.051789][ T4037] device hsr_slave_1 entered promiscuous mode [ 44.091848][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.094089][ T4037] Cannot create hsr debugfs directory [ 44.173483][ T4044] device hsr_slave_0 entered promiscuous mode [ 44.221824][ T4044] device hsr_slave_1 entered promiscuous mode [ 44.261407][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.263674][ T4044] Cannot create hsr debugfs directory [ 44.333334][ T4040] device hsr_slave_0 entered promiscuous mode [ 44.371747][ T4040] device hsr_slave_1 entered promiscuous mode [ 44.411441][ T4040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.413501][ T4040] Cannot create hsr debugfs directory [ 44.529115][ T4033] Bluetooth: hci0: command 0x0409 tx timeout [ 44.591398][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 44.598232][ T4033] Bluetooth: hci1: command 0x0409 tx timeout [ 44.627272][ T4049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.671503][ T4033] Bluetooth: hci4: command 0x0409 tx timeout [ 44.671578][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 44.680883][ T4049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.723404][ T4049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.763664][ T4049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.847353][ T4032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.883557][ T4032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.937444][ T4032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.973735][ T4032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.080204][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.099255][ T4044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.173566][ T4044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.224322][ T4044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.285441][ T4044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.329120][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.343540][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.347246][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.355577][ T4037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.392013][ T4037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.434687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.437488][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.440492][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.442577][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.446404][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.463409][ T4037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.505008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.508226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.511984][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.513976][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.516376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.519244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.524437][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.535818][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.538686][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.544104][ T4037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.580367][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.591507][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.594297][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.609204][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.617321][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.620307][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.623521][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.626210][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.646342][ T4049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.650326][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.654619][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.657507][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.660109][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.662090][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.665550][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.668343][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.670984][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.693469][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.696376][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.700093][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.702084][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.711123][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.722277][ T4040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.764642][ T4040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.814513][ T4040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.856531][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.871504][ T4040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.935093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.938562][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.941875][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.967055][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.970171][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.973248][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.975795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.984328][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.986950][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.991208][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.006426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.008633][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.049582][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.068055][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.117683][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.120473][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.124313][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.127043][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.135785][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.147865][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.150881][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.154712][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.156956][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.159444][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.163208][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.165808][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.167868][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.184926][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.187203][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.189782][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.192250][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.205652][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.210570][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.215955][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.220002][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.240461][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.243806][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.246698][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.249949][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.260895][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.264536][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.267416][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.270062][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.276524][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.280058][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.289153][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.293437][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.295641][ T4049] device veth0_vlan entered promiscuous mode [ 46.313093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.315810][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.329852][ T4049] device veth1_vlan entered promiscuous mode [ 46.335572][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.338296][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.341037][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.350707][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.371841][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.374512][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.378323][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.381031][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.383146][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.393084][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.395743][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.413101][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.416074][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.418716][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.422897][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.425418][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.427346][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.434090][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.436883][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.457117][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.459908][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.464372][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.466348][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.468823][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.472561][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.484783][ T4049] device veth0_macvtap entered promiscuous mode [ 46.497706][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.500474][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.510120][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.514687][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.516668][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.519083][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.528725][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.544035][ T4049] device veth1_macvtap entered promiscuous mode [ 46.557263][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.559918][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.564018][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.566934][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.569866][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.573678][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.576477][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.591775][ T4100] Bluetooth: hci0: command 0x041b tx timeout [ 46.595177][ T4032] device veth0_vlan entered promiscuous mode [ 46.602049][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.606356][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.609003][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.612748][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.615596][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.618431][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.621248][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.624860][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.627829][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.630597][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.635292][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.637886][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.646631][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.648909][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.667316][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.669878][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.672921][ T4100] Bluetooth: hci1: command 0x041b tx timeout [ 46.674849][ T4100] Bluetooth: hci2: command 0x041b tx timeout [ 46.677336][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.680221][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.684190][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.686890][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.689602][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.694550][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.697465][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.704517][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.712383][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.715120][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.718496][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.727132][ T4032] device veth1_vlan entered promiscuous mode [ 46.734743][ T4049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.737383][ T4049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.739736][ T4049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.743875][ T4049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.751884][ T4091] Bluetooth: hci3: command 0x041b tx timeout [ 46.754722][ T4091] Bluetooth: hci4: command 0x041b tx timeout [ 46.757936][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.760627][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.766693][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.769845][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.773487][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.789889][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.847959][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.850668][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.858219][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.866673][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.869312][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.874352][ T4044] device veth0_vlan entered promiscuous mode [ 46.880623][ T4044] device veth1_vlan entered promiscuous mode [ 46.930779][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.937997][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.940775][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.944746][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.946909][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.986392][ T4032] device veth0_macvtap entered promiscuous mode [ 47.002503][ T410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.004850][ T410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.014136][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.018144][ T4032] device veth1_macvtap entered promiscuous mode [ 47.021245][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.024004][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.026650][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.029227][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.059170][ T410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.061792][ T410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.064433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.067194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.070018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.075160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.093369][ T4044] device veth0_macvtap entered promiscuous mode [ 47.095859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.098388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.102468][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.105381][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.109335][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.119468][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.123529][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.126296][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.143379][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.146153][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.149716][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.154629][ T4044] device veth1_macvtap entered promiscuous mode [ 47.157187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.159785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.164497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.167361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.170057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.187536][ T4032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.189885][ T4032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.198849][ T4032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.201210][ T4032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.241234][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.244820][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.247444][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.250600][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.278886][ T4143] loop2: detected capacity change from 0 to 1024 [ 47.282774][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.300009][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.303207][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.310458][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.318665][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.326804][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.329911][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.337313][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.354232][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.356949][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.359711][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.366891][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.374603][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.377325][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.386234][ T4143] loop2: detected capacity change from 0 to 1024 [ 47.396825][ T4037] device veth0_vlan entered promiscuous mode [ 47.409774][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.415103][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.418373][ T4044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.420909][ T4044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.424904][ T4143] ======================================================= [ 47.424904][ T4143] WARNING: The mand mount option has been deprecated and [ 47.424904][ T4143] and is ignored by this kernel. Remove the mand [ 47.424904][ T4143] option from the mount to silence this warning. [ 47.424904][ T4143] ======================================================= [ 47.427455][ T4044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.437619][ T4044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.471587][ T4143] EXT4-fs (loop2): Ignoring removed oldalloc option [ 47.473473][ T4143] EXT4-fs (loop2): Ignoring removed bh option [ 47.475200][ T4143] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.525892][ T4143] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 47.529842][ T4037] device veth1_vlan entered promiscuous mode [ 47.540162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.549672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.549723][ T4143] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6: bg 0: block 129: padding at end of block bitmap is not set [ 47.557494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.570449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.575743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.579796][ T4040] device veth0_vlan entered promiscuous mode [ 47.659328][ T4040] device veth1_vlan entered promiscuous mode [ 47.674086][ T294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.676344][ T294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.679407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.690560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.695140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.711215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.738108][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.745176][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.800146][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.803383][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.821558][ T4040] device veth0_macvtap entered promiscuous mode [ 47.821868][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.825588][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.828349][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.841084][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.847028][ T4037] device veth0_macvtap entered promiscuous mode [ 47.871331][ T4040] device veth1_macvtap entered promiscuous mode [ 47.911063][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.918406][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.921137][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.925133][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.929943][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.931967][ T4157] loop3: detected capacity change from 0 to 8 [ 47.934188][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.938688][ T4026] Dev loop3: unable to read RDB block 8 [ 47.939815][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.940334][ T4026] loop3: unable to read partition table [ 47.947080][ T4026] loop3: partition table beyond EOD, truncated [ 47.949077][ T4037] device veth1_macvtap entered promiscuous mode [ 47.954656][ T4157] Dev loop3: unable to read RDB block 8 [ 47.956247][ T4157] loop3: unable to read partition table [ 47.957988][ T4157] loop3: partition table beyond EOD, truncated [ 47.971161][ T4157] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 47.971491][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.977807][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.980433][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.982958][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.985369][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.018040][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.020776][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.025549][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.070440][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.080753][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.084322][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.087254][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.090005][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.100932][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.108277][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.121365][ T4040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.123928][ T4040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.126627][ T4040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.129254][ T4040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.147953][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.150871][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.165452][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.168671][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.185093][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.187914][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.190617][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.193822][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.196510][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.199338][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.203777][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.224279][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.227256][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.252729][ T4163] loop4: detected capacity change from 0 to 1024 [ 48.267346][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.270162][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.279065][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.283601][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.286466][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.289314][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.300751][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.309378][ T4165] ipt_CLUSTERIP: unknown mode 1932691638 [ 48.313899][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.318352][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.320521][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.336816][ T4163] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.344548][ T4163] Injecting memory failure for pfn 0x116b46 at process virtual address 0x20000000 [ 48.349863][ T4163] Memory failure: 0x116b46: recovery action for dirty LRU page: Recovered [ 48.358482][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.374682][ T4037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.379613][ T4037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.384555][ T4037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.388219][ T4037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.397388][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.399824][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.405964][ T4165] loop2: detected capacity change from 0 to 4096 [ 48.429479][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.447615][ T4165] ntfs: (device loop2): parse_ntfs_boot_sector(): Cannot handle 64-bit clusters. Sorry. [ 48.450282][ T4165] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 48.606801][ T294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.610515][ T294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.628192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.673108][ T4091] Bluetooth: hci0: command 0x040f tx timeout [ 48.678841][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.683127][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.701454][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.704755][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.714791][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.732616][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.753206][ T4091] Bluetooth: hci2: command 0x040f tx timeout [ 48.759699][ T4091] Bluetooth: hci1: command 0x040f tx timeout [ 48.793604][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.795956][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.799110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.832752][ T4100] Bluetooth: hci4: command 0x040f tx timeout [ 48.835161][ T4100] Bluetooth: hci3: command 0x040f tx timeout [ 48.976409][ T4188] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 49.089537][ T4179] loop9: detected capacity change from 0 to 7 [ 49.216036][ T4179] loop9: [ 49.216824][ T4179] loop9: partition table partially beyond EOD, truncated [ 49.591886][ T4203] loop0: detected capacity change from 0 to 2048 [ 49.797069][ T4203] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 50.075886][ T4203] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 50.476794][ T26] audit: type=1326 audit(50.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.0.27" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82ee6be8 code=0x0 [ 50.876914][ T1959] Bluetooth: hci0: command 0x0419 tx timeout [ 50.886102][ T4121] Bluetooth: hci1: command 0x0419 tx timeout [ 50.887909][ T4121] Bluetooth: hci2: command 0x0419 tx timeout [ 50.913256][ T4121] Bluetooth: hci3: command 0x0419 tx timeout [ 50.921506][ T4121] Bluetooth: hci4: command 0x0419 tx timeout [ 51.690543][ T4263] device syzkaller1 entered promiscuous mode [ 52.086207][ T4277] block device autoloading is deprecated and will be removed. [ 52.190420][ T4279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 52.330794][ T4286] tipc: Started in network mode [ 52.336398][ T4286] tipc: Node identity 3661051b8a72, cluster identity 4711 [ 52.338572][ T4286] tipc: Enabled bearer , priority 0 [ 52.409702][ T4281] tipc: Resetting bearer [ 52.634723][ T4281] tipc: Disabling bearer [ 55.396096][ T4305] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 55.517252][ T4306] IPVS: stopping backup sync thread 4305 ... [ 56.093620][ T4314] syz.1.51 uses obsolete (PF_INET,SOCK_PACKET) [ 57.551644][ T4331] ceph: No mds server is up or the cluster is laggy [ 57.576661][ T4121] libceph: connect (1)[c::]:6789 error -101 [ 57.579677][ T4121] libceph: mon0 (1)[c::]:6789 connect error [ 57.599872][ T4339] input: syz1 as /devices/virtual/input/input2 [ 57.867825][ T4343] netlink: 160 bytes leftover after parsing attributes in process `syz.0.61'. [ 58.197869][ T4033] Bluetooth: hci4: command 0x0405 tx timeout [ 58.947388][ T4355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 58.990878][ T4352] nvme_fabrics: missing parameter 'transport=%s' [ 58.992937][ T4352] nvme_fabrics: missing parameter 'nqn=%s' [ 62.182407][ T4379] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 64.784417][ T4410] netlink: 830 bytes leftover after parsing attributes in process `syz.3.76'. [ 65.979314][ T4425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 65.998264][ T4425] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.000987][ T4425] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.003559][ T4425] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.005860][ T4425] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.058435][ T4425] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.060985][ T4425] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.063969][ T4425] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.066319][ T4425] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.326283][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.562127][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 66.869928][ T4450] netlink: 160 bytes leftover after parsing attributes in process `syz.4.91'. [ 67.686873][ T4452] nvme_fabrics: missing parameter 'transport=%s' [ 67.688720][ T4452] nvme_fabrics: missing parameter 'nqn=%s' [ 67.921890][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.925473][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.928137][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.930831][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.941359][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.943774][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.260245][ T26] audit: type=1326 audit(68.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f2fbe8 code=0x7ffc0000 [ 68.280765][ T26] audit: type=1326 audit(68.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff92f2fbe8 code=0x7ffc0000 [ 69.196733][ T26] audit: type=1326 audit(69.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f2fbe8 code=0x7ffc0000 [ 69.202894][ T7] usb 1-1: GET_CAPABILITIES returned 0 [ 69.204666][ T7] usbtmc 1-1:16.0: can't read capabilities [ 69.235010][ T26] audit: type=1326 audit(69.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f2fbe8 code=0x7ffc0000 [ 69.591595][ T4091] usb 1-1: USB disconnect, device number 2 [ 69.634713][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.636761][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.652908][ T1533] cfg80211: failed to load regulatory.db [ 70.631408][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.911647][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 70.959034][ T4363] Set syz1 is full, maxelem 65536 reached [ 71.111665][ T4472] block device autoloading is deprecated and will be removed. [ 71.111694][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 71.116227][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.118956][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.134671][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.152606][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.156140][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.162729][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.451504][ T25] usb 1-1: usb_control_msg returned -32 [ 71.453187][ T25] usbtmc 1-1:16.0: can't read capabilities [ 72.032128][ T4478] vxfs: WRONG superblock magic 00000000 at 1 [ 72.034350][ T4478] vxfs: WRONG superblock magic 00000000 at 8 [ 72.036006][ T4478] vxfs: can't find superblock. [ 73.412551][ T4091] usb 1-1: USB disconnect, device number 3 [ 74.393510][ T4512] udc-core: couldn't find an available UDC or it's busy [ 74.403377][ T4512] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.629654][ T4512] udc-core: couldn't find an available UDC or it's busy [ 74.632093][ T4512] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.747409][ T4525] netlink: 56 bytes leftover after parsing attributes in process `syz.2.113'. [ 79.012448][ T4534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 79.048189][ T4534] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.050620][ T4534] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.053113][ T4534] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.055391][ T4534] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.099527][ T4534] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.102267][ T4534] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.104750][ T4534] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.107222][ T4534] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.130355][ T4540] udc-core: couldn't find an available UDC or it's busy [ 79.151410][ T4540] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.169615][ T4541] Zero length message leads to an empty skb [ 81.801262][ T4583] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.737213][ T4598] udc-core: couldn't find an available UDC or it's busy [ 82.739318][ T4598] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.231495][ T4597] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 83.568859][ T4609] netlink: 'syz.2.134': attribute type 4 has an invalid length. [ 83.965570][ T4612] kAFS: unparsable volume name [ 84.429060][ T4621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'. [ 84.435342][ T4621] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.437719][ T4621] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.440094][ T4621] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.442611][ T4621] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.454148][ T4042] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 84.466407][ T4621] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.468854][ T4621] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.471580][ T4621] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.474045][ T4621] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.511066][ T4626] udc-core: couldn't find an available UDC or it's busy [ 84.527631][ T4626] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.238763][ T4648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'. [ 88.608956][ T26] audit: type=1326 audit(88.070:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.620294][ T26] audit: type=1326 audit(88.080:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.636474][ T26] audit: type=1326 audit(88.570:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.651350][ T26] audit: type=1326 audit(88.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.689945][ T26] audit: type=1326 audit(88.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.696394][ T26] audit: type=1326 audit(88.640:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.702580][ T26] audit: type=1326 audit(88.640:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.708404][ T26] audit: type=1326 audit(88.640:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.714984][ T26] audit: type=1326 audit(88.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.720845][ T26] audit: type=1326 audit(88.650:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82ee6be8 code=0x7ffc0000 [ 88.951727][ T4677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.156'. [ 89.113896][ T4683] udc-core: couldn't find an available UDC or it's busy [ 89.115905][ T4683] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.148046][ T4683] udc-core: couldn't find an available UDC or it's busy [ 89.221553][ T4683] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.886599][ T4690] 9pnet: Insufficient options for proto=fd [ 91.424052][ T4695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'. [ 93.367855][ T4718] udc-core: couldn't find an available UDC or it's busy [ 93.370003][ T4718] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.998858][ T4731] tipc: Started in network mode [ 94.000330][ T4731] tipc: Node identity 4e72344ab0b6, cluster identity 4711 [ 94.008398][ T4731] tipc: Enabled bearer , priority 0 [ 94.010961][ T4731] device syzkaller0 entered promiscuous mode [ 94.050661][ T4731] tipc: Resetting bearer [ 94.086554][ T4730] tipc: Resetting bearer [ 94.095000][ T4730] tipc: Disabling bearer [ 95.590320][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.603436][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.616675][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.618820][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.621040][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.623387][ T4778] udc-core: couldn't find an available UDC or it's busy [ 95.630958][ T4778] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.639244][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.642725][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.644891][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.647180][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.649155][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.651250][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.664482][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.666574][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.674619][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.678944][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.681133][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.688112][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.694099][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.698135][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.706473][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.708668][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.710791][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.726318][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.731202][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.737683][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.744154][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.748558][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.754368][ T4784] netlink: 'syz.4.196': attribute type 8 has an invalid length. [ 95.766694][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.774910][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.784035][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.790429][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.797089][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.802485][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.808858][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.815301][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.821804][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.828231][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.834612][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.840988][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.847464][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.853920][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.861578][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.867975][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.874357][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.880882][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.887383][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.894943][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.909531][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.919223][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: unknown main item tag 0x0 [ 95.942091][ T4121] hid-generic 0000:007B:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.098206][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 96.152796][ T4792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.199'. [ 96.278373][ T4799] binder: 4798:4799 ioctl 4018620d 0 returned -22 [ 96.376713][ T4799] binder: 4798:4799 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 96.380417][ T4799] binder: 4799 RLIMIT_NICE not set [ 96.435687][ T4790] fido_id[4790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.797721][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.580175][ T4822] capability: warning: `syz.3.209' uses deprecated v2 capabilities in a way that may be insecure [ 98.018612][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 98.021736][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.025257][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.027674][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.043731][ T25] usb 1-1: config 0 descriptor?? [ 98.061637][ T4810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.083869][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 99.584807][ T4845] 9pnet_virtio: no channels available for device syz [ 100.943638][ T25] usb 1-1: USB disconnect, device number 4 [ 102.113606][ T1533] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 102.117657][ T1533] Bluetooth: hci2: Injecting HCI hardware error event [ 102.430445][ T4042] Bluetooth: hci2: hardware error 0x00 [ 104.078905][ T4887] netlink: 160 bytes leftover after parsing attributes in process `syz.4.229'. [ 104.631834][ T4890] nvme_fabrics: missing parameter 'transport=%s' [ 104.633599][ T4890] nvme_fabrics: missing parameter 'nqn=%s' [ 105.494192][ T4902] netlink: 'syz.3.232': attribute type 10 has an invalid length. [ 105.541408][ T4902] device macvlan0 entered promiscuous mode [ 105.565181][ T4902] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 106.361611][ T4908] "syz.2.233" (4908) uses obsolete ecb(arc4) skcipher [ 107.586682][ T4033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.605426][ T4033] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.337655][ T4934] process 'syz.2.241' launched './file1' with NULL argv: empty string added [ 109.722598][ T4090] Bluetooth: hci3: command 0x2016 tx timeout [ 109.779656][ T4091] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.031451][ T4091] usb 1-1: Using ep0 maxpacket: 32 [ 110.151597][ T4091] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 110.153865][ T4091] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 110.156995][ T4091] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 110.194740][ T4091] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 110.198258][ T4091] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.738876][ T4955] "syz.4.245" (4955) uses obsolete ecb(arc4) skcipher [ 111.161649][ T4091] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 111.164615][ T4091] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 111.166967][ T4091] usb 1-1: Product: syz [ 111.168098][ T4091] usb 1-1: Manufacturer: syz [ 111.169309][ T4091] usb 1-1: SerialNumber: syz [ 111.194017][ T4091] usb 1-1: config 0 descriptor?? [ 111.201624][ T4960] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 111.234746][ T4091] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 111.249997][ T4091] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 111.269386][ T4960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.419039][ T4963] bond1: (slave ip6erspan0): making interface the new active one [ 111.433484][ T4963] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 111.436074][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 111.571053][ T1959] usb 1-1: USB disconnect, device number 5 [ 111.573086][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 111.580701][ T4942] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 111.597205][ T1959] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 111.624544][ T4971] udc-core: couldn't find an available UDC or it's busy [ 111.651576][ T4971] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.891527][ T1959] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.594192][ T5014] "syz.3.261" (5014) uses obsolete ecb(arc4) skcipher [ 114.759205][ T5029] usb usb8: usbfs: process 5029 (syz.4.270) did not claim interface 0 before use [ 118.010529][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 118.039746][ T5048] ================================================================== [ 118.042191][ T5048] BUG: KASAN: use-after-free in ax25_release+0x4c8/0x814 [ 118.044168][ T5048] Read of size 8 at addr ffff0000f64a1c08 by task syz.4.276/5048 [ 118.046310][ T5048] [ 118.046912][ T5048] CPU: 1 PID: 5048 Comm: syz.4.276 Not tainted 5.15.189-syzkaller #0 [ 118.049178][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.051901][ T5048] Call trace: [ 118.052818][ T5048] dump_backtrace+0x0/0x43c [ 118.054154][ T5048] show_stack+0x2c/0x3c [ 118.055361][ T5048] __dump_stack+0x30/0x40 [ 118.056562][ T5048] dump_stack_lvl+0xf8/0x160 [ 118.058014][ T5048] print_address_description+0x78/0x30c [ 118.059608][ T5048] kasan_report+0xec/0x15c [ 118.060950][ T5048] __asan_report_load8_noabort+0x44/0x50 [ 118.062546][ T5048] ax25_release+0x4c8/0x814 [ 118.063825][ T5048] sock_close+0xb4/0x1f8 [ 118.065053][ T5048] __fput+0x1c0/0x7f8 [ 118.066091][ T5048] ____fput+0x20/0x30 [ 118.067118][ T5048] task_work_run+0x12c/0x1e0 [ 118.068423][ T5048] do_notify_resume+0x24b4/0x3128 [ 118.069808][ T5048] el0_svc+0xf0/0x1e0 [ 118.070903][ T5048] el0t_64_sync_handler+0xcc/0xe4 [ 118.072262][ T5048] el0t_64_sync+0x1a0/0x1a4 [ 118.073561][ T5048] [ 118.074172][ T5048] Allocated by task 5049: [ 118.075374][ T5048] __kasan_kmalloc+0xb0/0xf0 [ 118.076620][ T5048] kmem_cache_alloc_trace+0x274/0x3fc [ 118.078270][ T5048] ax25_dev_device_up+0x5c/0x540 [ 118.079649][ T5048] ax25_device_event+0x504/0x590 [ 118.081022][ T5048] raw_notifier_call_chain+0xd4/0x164 [ 118.082475][ T5048] __dev_notify_flags+0x250/0x46c [ 118.083908][ T5048] dev_change_flags+0xc8/0x154 [ 118.085164][ T5048] dev_ifsioc+0x504/0xef4 [ 118.086383][ T5048] dev_ioctl+0x4d0/0xc94 [ 118.087626][ T5048] sock_do_ioctl+0x18c/0x240 [ 118.088789][ T5048] sock_ioctl+0x5c8/0x87c [ 118.089908][ T5048] __arm64_sys_ioctl+0x14c/0x1c8 [ 118.091302][ T5048] invoke_syscall+0x98/0x2b8 [ 118.092544][ T5048] el0_svc_common+0x138/0x258 [ 118.093898][ T5048] do_el0_svc+0x58/0x14c [ 118.095111][ T5048] el0_svc+0x78/0x1e0 [ 118.096264][ T5048] el0t_64_sync_handler+0xcc/0xe4 [ 118.097662][ T5048] el0t_64_sync+0x1a0/0x1a4 [ 118.099016][ T5048] [ 118.099659][ T5048] Freed by task 5049: [ 118.100741][ T5048] kasan_set_track+0x4c/0x84 [ 118.102048][ T5048] kasan_set_free_info+0x28/0x4c [ 118.103417][ T5048] ____kasan_slab_free+0x118/0x164 [ 118.104809][ T5048] __kasan_slab_free+0x18/0x28 [ 118.106144][ T5048] slab_free_freelist_hook+0x128/0x1e8 [ 118.107718][ T5048] kfree+0x170/0x40c [ 118.108847][ T5048] ax25_dev_device_down+0x468/0x67c [ 118.110170][ T5048] ax25_device_event+0x538/0x590 [ 118.111541][ T5048] raw_notifier_call_chain+0xd4/0x164 [ 118.113040][ T5048] __dev_notify_flags+0x250/0x46c [ 118.114363][ T5048] dev_change_flags+0xc8/0x154 [ 118.115755][ T5048] dev_ifsioc+0x504/0xef4 [ 118.117004][ T5048] dev_ioctl+0x4d0/0xc94 [ 118.118229][ T5048] sock_do_ioctl+0x18c/0x240 [ 118.119592][ T5048] sock_ioctl+0x5c8/0x87c [ 118.120793][ T5048] __arm64_sys_ioctl+0x14c/0x1c8 [ 118.122208][ T5048] invoke_syscall+0x98/0x2b8 [ 118.123443][ T5048] el0_svc_common+0x138/0x258 [ 118.124782][ T5048] do_el0_svc+0x58/0x14c [ 118.125969][ T5048] el0_svc+0x78/0x1e0 [ 118.127140][ T5048] el0t_64_sync_handler+0xcc/0xe4 [ 118.128594][ T5048] el0t_64_sync+0x1a0/0x1a4 [ 118.129880][ T5048] [ 118.130612][ T5048] The buggy address belongs to the object at ffff0000f64a1c00 [ 118.130612][ T5048] which belongs to the cache kmalloc-256 of size 256 [ 118.134741][ T5048] The buggy address is located 8 bytes inside of [ 118.134741][ T5048] 256-byte region [ffff0000f64a1c00, ffff0000f64a1d00) [ 118.138566][ T5048] The buggy address belongs to the page: [ 118.140161][ T5048] page:00000000553c4e9f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1364a0 [ 118.143087][ T5048] head:00000000553c4e9f order:1 compound_mapcount:0 [ 118.144959][ T5048] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 118.147307][ T5048] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002480 [ 118.149797][ T5048] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 118.152243][ T5048] page dumped because: kasan: bad access detected [ 118.154000][ T5048] [ 118.154681][ T5048] Memory state around the buggy address: [ 118.156263][ T5048] ffff0000f64a1b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.158405][ T5048] ffff0000f64a1b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.160955][ T5048] >ffff0000f64a1c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.163264][ T5048] ^ [ 118.164430][ T5048] ffff0000f64a1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.166636][ T5048] ffff0000f64a1d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.168906][ T5048] ================================================================== [ 118.171333][ T5048] Disabling lock debugging due to kernel taint [ 118.230255][ T5048] Unable to handle kernel paging request at virtual address a2a003c300001961 [ 118.242092][ T5048] Mem abort info: [ 118.243024][ T5048] ESR = 0x0000000096000021 [ 118.244206][ T5048] EC = 0x25: DABT (current EL), IL = 32 bits [ 118.245799][ T5048] SET = 0, FnV = 0 [ 118.246820][ T5048] EA = 0, S1PTW = 0 [ 118.247823][ T5048] FSC = 0x21: alignment fault [ 118.249059][ T5048] Data abort info: [ 118.249987][ T5048] ISV = 0, ISS = 0x00000021 [ 118.251184][ T5048] CM = 0, WnR = 0 [ 118.279974][ T5048] [a2a003c300001961] address between user and kernel address ranges [ 118.288263][ T5048] Internal error: Oops: 0000000096000021 [#1] PREEMPT SMP [ 118.290199][ T5048] Modules linked in: [ 118.291280][ T5048] CPU: 1 PID: 5048 Comm: syz.4.276 Tainted: G B 5.15.189-syzkaller #0 [ 118.293976][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.297192][ T5048] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 118.299554][ T5048] pc : ax25_release+0x4f4/0x814 [ 118.301074][ T5048] lr : ax25_release+0x4ec/0x814 [ 118.302432][ T5048] sp : ffff80001feb7a00 [ 118.303672][ T5048] x29: ffff80001feb7a20 x28: dfff800000000000 x27: ffff0000cd54c080 [ 118.306219][ T5048] x26: ffff0000cdf63028 x25: 0000000000000002 x24: 00000000ffffffff [ 118.308745][ T5048] x23: a2a003c300001961 x22: ffff0000f64a1c00 x21: ffff0000debdc218 [ 118.311275][ T5048] x20: ffff0000cd54c000 x19: 1fffe00019bec605 x18: 1fffe0003421cd96 [ 118.313578][ T5048] x17: 1fffe0003421cd96 x16: ffff8000082d6448 x15: ffff80001420eda0 [ 118.315799][ T5048] x14: ffff0001a10e6cc0 x13: ffff0001a10e6cbc x12: 0000000000ff0100 [ 118.317919][ T5048] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff80001045ef30 [ 118.320168][ T5048] x8 : ffff0000d3c4b680 x7 : 0000000000000000 x6 : ffff80000824599c [ 118.322494][ T5048] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001045ef24 [ 118.324744][ T5048] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 118.327203][ T5048] Call trace: [ 118.328203][ T5048] ax25_release+0x4f4/0x814 [ 118.329571][ T5048] sock_close+0xb4/0x1f8 [ 118.330894][ T5048] __fput+0x1c0/0x7f8 [ 118.331964][ T5048] ____fput+0x20/0x30 [ 118.333084][ T5048] task_work_run+0x12c/0x1e0 [ 118.334433][ T5048] do_notify_resume+0x24b4/0x3128 [ 118.335865][ T5048] el0_svc+0xf0/0x1e0 [ 118.337121][ T5048] el0t_64_sync_handler+0xcc/0xe4 [ 118.338653][ T5048] el0t_64_sync+0x1a0/0x1a4 [ 118.340026][ T5048] Code: d503201f 96006935 52800038 4b1803f8 (b87802f8) [ 118.342108][ T5048] ---[ end trace 9265f55d1267dded ]--- [ 118.489914][ T5048] Kernel panic - not syncing: Oops: Fatal exception [ 118.491834][ T5048] SMP: stopping secondary CPUs [ 118.493298][ T5048] Kernel Offset: disabled [ 118.494518][ T5048] CPU features: 0x8,000081c1,21302e40 [ 118.496112][ T5048] Memory Limit: none [ 118.617792][ T5048] Rebooting in 86400 seconds..