last executing test programs: 1m50.916060585s ago: executing program 4 (id=231): socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20102) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m50.807496176s ago: executing program 4 (id=233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1m48.812475316s ago: executing program 4 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 1m48.405838712s ago: executing program 4 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@dellinkprop={0x20, 0x6d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0xc06, 0x41}}, 0x20}}, 0x0) 1m47.592165544s ago: executing program 4 (id=244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r4, &(0x7f0000000100)=""/107, 0x6b) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 1m47.326864228s ago: executing program 4 (id=247): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c00000000000000000000000700"], 0x38}, 0x0) unshare(0x2c020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) close(0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m31.791553417s ago: executing program 32 (id=247): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c00000000000000000000000700"], 0x38}, 0x0) unshare(0x2c020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) close(0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m7.627630803s ago: executing program 2 (id=359): r0 = socket(0x1e, 0x4, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x8, @pix_mp={0x3, 0x708, 0x0, 0x4, 0x1, [{0x6, 0x1}, {0x0, 0x75f7eb8a}, {0x4, 0x9ea9}, {0x6, 0x1}, {0xffffffdf, 0xffffffff}, {0x5, 0x20}, {0xe5a9, 0x5}, {0x3e92, 0x401}], 0x1f, 0x3, 0x4, 0x0, 0x3}}) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66801, 0x19d) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m0.028043265s ago: executing program 2 (id=375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000000), 0x5005) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.38290174s ago: executing program 2 (id=380): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 58.291915861s ago: executing program 2 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="9713ae65adb37ab634c035756268025b80b1959d665fb0cef2f5d3a1428e02079036613e40aeb92d6ec55cd955a698a6cc213c63211b61f4f956ccf327c2f58b13eb539826312e88008411bae4069430a78630f6d0ce62e048e6598168475aa648a7bf858b5c97a6fb20d500f17430be9f01fddd58e014906f7b8bb52410af8c4b534550fee4c38ab856cd85c340d23b4d67471be7c0c23b5e020bc38fd19a2af9ed79e3fba4f56eab1771414fcb98594e068306c21470754d8f56cea1cab96aa33bbc16da4fe8a2552dcfd20c8476598bbf3a19e03830724d1169650d42a691c959a8a16da68a3c3e9a7a2af20196e29b14657b50", @ANYRES32=r2], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 57.0295757s ago: executing program 2 (id=383): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x1e0000}, 0x18) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) 55.549185161s ago: executing program 2 (id=388): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r4, 0x0, 0x201f00) 40.113203949s ago: executing program 33 (id=388): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r4, 0x0, 0x201f00) 27.350144767s ago: executing program 5 (id=444): socket(0x1, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@nolazytime}, {@dax_always}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 25.461890725s ago: executing program 5 (id=447): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a5371a09bfd86a"], 0x24, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 25.321004487s ago: executing program 5 (id=450): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) sched_setattr(0x0, 0x0, 0x0) 23.853237579s ago: executing program 5 (id=454): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xd4, 0x3, 0xffff, 0xfdff, 0xe0, "6ace18e16f51000009faeeaf000000000400", 0x10}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xa) 23.632008842s ago: executing program 5 (id=456): socket(0x1, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@nolazytime}, {@dax_always}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 22.087531665s ago: executing program 5 (id=459): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40040d4) 20.294829772s ago: executing program 1 (id=462): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x68, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @broadcast, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x2f20, 0x4, {}, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x5, 0x0, {0x5, 0x5, 0x0, 0x5, 0x0, 0x1}, 0x1, 0xd, 0x81}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 19.388341625s ago: executing program 1 (id=465): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) close(r4) unshare(0x64000600) 17.771877539s ago: executing program 1 (id=471): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 14.98537036s ago: executing program 3 (id=473): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000001640)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000002100), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f0000000e00)={[{@discard}, {@time_offset={'time_offset', 0x3d, 0x7}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@namecase}, {@keep_last_dots}, {@gid={'gid', 0x3d, 0xee01}}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@errors_continue}], [{@audit}, {@hash}, {@obj_role}, {@subj_user={'subj_user', 0x3d, 'grpid'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") syz_mount_image$ext4(&(0x7f0000001600)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") write$UHID_INPUT(r1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x10) fdatasync(r4) 14.887884671s ago: executing program 1 (id=474): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000003c0)='./file1\x00', 0x240000, &(0x7f0000000700)={[{@minixdf}, {}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@dioread_lock}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@inlinecrypt}, {@test_dummy_encryption_v1}], [{@euid_gt}, {@obj_type={'obj_type', 0x3d, '!'}}, {@euid_eq}, {@fowner_gt}, {@obj_type={'obj_type', 0x3d, '\v\xfdR\x88\xc3\xda\x96\xcd,\x81L\xb4\r\xde_tcU\x96#\x8d\x94\x82\xf8\xa4|4nsm\xfbO\xa2\x84\xcc\xb17\'I\x18\b\xec\xa7\x93Q\xcbP\xf0\xbf\'\a\xf2\x04Y\xec\xd8\xb3\x19\x89a]\xbdhL\x0f&\xd6;\x10f\xcf?\x94eq\xa8\x1d\x8a\x91\xc6\xafF\x05`\xb1\xa5v\xae\xdc\x80\xee\x15\x9e\x97\x12\x1d\xe5\xad\x05\t\x00\x00\x00\x00\x00\x00\x00'}}]}, 0xfa, 0x571, &(0x7f0000001180)="$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") r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getresgid(&(0x7f0000000c40), &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r1, @ANYBLOB="7f630000000000000000000000000000000000f951567d61ba518cdf5713a98844437afa6c968a596785723d95dad79ed6a4dc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000040000000000"], 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) 14.561160506s ago: executing program 3 (id=476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000000), 0x5005) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.030570633s ago: executing program 1 (id=477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b900, 0x0) r5 = socket(0x11, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) setreuid(0x0, 0xee00) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 8.697412362s ago: executing program 3 (id=480): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) 8.464085226s ago: executing program 1 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000003700)=ANY=[], 0x0, 0x38, 0x0, 0x9, 0x3}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 7.343701643s ago: executing program 3 (id=484): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 7.017963857s ago: executing program 3 (id=486): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 6.994298257s ago: executing program 34 (id=459): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40040d4) 6.750286521s ago: executing program 3 (id=490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000000), 0x5005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.051974246s ago: executing program 6 (id=494): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000005c0)=0x1, 0x4) 4.933641038s ago: executing program 6 (id=495): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') syz_emit_vhci(0x0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0xde34) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 3.608420748s ago: executing program 0 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 3.484060969s ago: executing program 0 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 3.328204661s ago: executing program 6 (id=499): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x6c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.171996904s ago: executing program 0 (id=500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 3.171824964s ago: executing program 6 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 2.10568384s ago: executing program 6 (id=502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mprotect(&(0x7f0000660000/0x4000)=nil, 0x4000, 0x83a975551a4c0285) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getgroups(0x1, &(0x7f0000001080)=[0xee01]) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/134, 0x86) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) capset(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r4, 0x0, 0x40000) socket$inet(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}, @typed={0xfffffffffffffe78, 0x1, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817"]}]}, 0x114}], 0x1}, 0x140000c4) 2.10491612s ago: executing program 0 (id=511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1.131338274s ago: executing program 0 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000003700)=ANY=[], 0x0, 0x38, 0x0, 0x9, 0x3}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}}, 0x0) socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 23.99956ms ago: executing program 6 (id=504): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a001c2c01fe8000000000000000000000000000bb00000000000000000040"], 0x0) 0s ago: executing program 0 (id=505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) kernel console output (not intermixed with test programs): interface with an up link [ 41.373178][ T4037] team0: Port device team_slave_0 added [ 41.403215][ T4039] team0: Port device team_slave_0 added [ 41.412683][ T4037] team0: Port device team_slave_1 added [ 41.418063][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.422857][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.432315][ T4039] team0: Port device team_slave_1 added [ 41.459190][ T4042] team0: Port device team_slave_0 added [ 41.474263][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.476159][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.483175][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.487521][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.489365][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.496556][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.508021][ T4042] team0: Port device team_slave_1 added [ 41.516528][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.518568][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.526004][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.536389][ T4040] team0: Port device team_slave_0 added [ 41.564929][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.566772][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.574156][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.582206][ T4040] team0: Port device team_slave_1 added [ 41.599677][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.601578][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.608970][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.633149][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.635182][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.642258][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.687327][ T4037] device hsr_slave_0 entered promiscuous mode [ 41.724226][ T4037] device hsr_slave_1 entered promiscuous mode [ 41.764158][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.766435][ T4037] Cannot create hsr debugfs directory [ 41.775224][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.777084][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.784375][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.788613][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.790487][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.797926][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.813108][ T4033] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.895848][ T4039] device hsr_slave_0 entered promiscuous mode [ 41.954361][ T4039] device hsr_slave_1 entered promiscuous mode [ 41.993850][ T4039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.996094][ T4039] Cannot create hsr debugfs directory [ 42.011218][ T4033] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.079455][ T4033] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.130040][ T4033] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.236958][ T4042] device hsr_slave_0 entered promiscuous mode [ 42.275091][ T4042] device hsr_slave_1 entered promiscuous mode [ 42.313964][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.316008][ T4042] Cannot create hsr debugfs directory [ 42.334395][ T1959] Bluetooth: hci0: command 0x0409 tx timeout [ 42.375793][ T4040] device hsr_slave_0 entered promiscuous mode [ 42.414015][ T1959] Bluetooth: hci4: command 0x0409 tx timeout [ 42.415136][ T4040] device hsr_slave_1 entered promiscuous mode [ 42.416137][ T1959] Bluetooth: hci1: command 0x0409 tx timeout [ 42.423886][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 42.425679][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 42.453892][ T4040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.456015][ T4040] Cannot create hsr debugfs directory [ 42.694956][ T4039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.771478][ T4039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.826009][ T4039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.870788][ T4037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.910226][ T4039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.955702][ T4037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.015940][ T4037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.055847][ T4037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.153494][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.161724][ T4040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.190785][ T4040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.215952][ T4040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.272962][ T4040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.332386][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.336541][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.342682][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.367150][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.370040][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.373145][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.375241][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.401598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.409967][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.412802][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.422598][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.424636][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.432760][ T4042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.481104][ T4042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.562875][ T4042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.596934][ T4042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.629198][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.632261][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.662358][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.666529][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.677653][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.691264][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.697421][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.700343][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.703276][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.734459][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.737241][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.740216][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.743236][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.751814][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.755117][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.757851][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.760371][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.772738][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.783072][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.788618][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.796534][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.809798][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.812712][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.816815][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.818877][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.821477][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.826380][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.828893][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.841255][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.844276][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.846870][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.848998][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.851348][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.857109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.870640][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.888059][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.890711][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.893347][ T567] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.895342][ T567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.901392][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.905288][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.908258][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.911108][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.919769][ T567] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.921712][ T567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.925018][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.927971][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.930790][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.933362][ T567] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.935371][ T567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.938618][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.941289][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.944911][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.949183][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.952287][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.963898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.966917][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.970124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.981753][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.988835][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.991493][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.995032][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.996970][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.999367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.011891][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.024218][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.027074][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.030330][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.033243][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.037330][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.057123][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.060216][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.062949][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.067900][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.070560][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.073033][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.077126][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.080031][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.089206][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.091921][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.095148][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.097366][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.100150][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.103427][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.110546][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.119523][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.130098][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.132740][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.140510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.147907][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.155779][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.160988][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.165900][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.167844][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.178216][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.181727][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.188682][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.191395][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.193267][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.196973][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.199740][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.211895][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.223162][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.226866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.244271][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.247039][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.253655][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.282853][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.285221][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.287384][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.290289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.301796][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.312205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.317306][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.320058][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.333317][ T4033] device veth0_vlan entered promiscuous mode [ 44.350808][ T4033] device veth1_vlan entered promiscuous mode [ 44.357616][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.360237][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.362798][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.372934][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.377100][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.390682][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.393625][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.403520][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.413177][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.415667][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 44.424534][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.433229][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.437422][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.449005][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.451140][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.462194][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.470148][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.472991][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.477656][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.487531][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.492365][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.494062][ T4077] Bluetooth: hci2: command 0x041b tx timeout [ 44.496757][ T4077] Bluetooth: hci3: command 0x041b tx timeout [ 44.498424][ T4077] Bluetooth: hci1: command 0x041b tx timeout [ 44.499481][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.500117][ T4077] Bluetooth: hci4: command 0x041b tx timeout [ 44.517848][ T4033] device veth0_macvtap entered promiscuous mode [ 44.527512][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.530117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.532915][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.551805][ T4033] device veth1_macvtap entered promiscuous mode [ 44.579111][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.581808][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.585970][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.607843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.610465][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.613541][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.617632][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.621666][ T4037] device veth0_vlan entered promiscuous mode [ 44.627474][ T4040] device veth0_vlan entered promiscuous mode [ 44.633115][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.642398][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.646157][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.648579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.660800][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.662995][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.671288][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.681181][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.685346][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.689770][ T4037] device veth1_vlan entered promiscuous mode [ 44.701635][ T4040] device veth1_vlan entered promiscuous mode [ 44.712266][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.716213][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.718897][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.721687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.725278][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.729274][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.731828][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.737913][ T4039] device veth0_vlan entered promiscuous mode [ 44.748116][ T4033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.750630][ T4033] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.753071][ T4033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.757226][ T4033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.765011][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.790524][ T4039] device veth1_vlan entered promiscuous mode [ 44.817575][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.820191][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.822789][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.835924][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.841019][ T4037] device veth0_macvtap entered promiscuous mode [ 44.871005][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.873610][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.877570][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.894433][ T4037] device veth1_macvtap entered promiscuous mode [ 44.898132][ T4040] device veth0_macvtap entered promiscuous mode [ 44.900864][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.903465][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.915206][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.917981][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.923365][ T4039] device veth0_macvtap entered promiscuous mode [ 44.934676][ T4039] device veth1_macvtap entered promiscuous mode [ 44.940855][ T4040] device veth1_macvtap entered promiscuous mode [ 44.994903][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.998058][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.001932][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.009316][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.012320][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.015575][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.018380][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.022128][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.028126][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.030873][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.033431][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.036788][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.039539][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.042243][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.046221][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.049093][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.051751][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.057378][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.060359][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.067099][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.072656][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.075585][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.078183][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.080957][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.083567][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.086959][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.090775][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.095241][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.097989][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.100613][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.103481][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.108293][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.111108][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.113279][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.118422][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.120940][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.123569][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.126715][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.129586][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.132309][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.137530][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.142491][ T4037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.145680][ T4037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.148126][ T4037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.150459][ T4037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.155582][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.158324][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.160922][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.165305][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.168012][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.170745][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.176577][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.186378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.191079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.223363][ T4039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.226384][ T4039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.228795][ T4039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.231193][ T4039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.257950][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.258874][ T4042] device veth0_vlan entered promiscuous mode [ 45.260190][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.269994][ T4040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.272396][ T4040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.275033][ T4040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.277284][ T4040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.282157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.285421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.288150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.290719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.293327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.349885][ T4042] device veth1_vlan entered promiscuous mode [ 45.624041][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.626347][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.658173][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.661010][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.664866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.314237][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.316485][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.319519][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.346425][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.348700][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.351586][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.376857][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.379092][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.382192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.406265][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.408509][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.473264][ T4042] device veth0_macvtap entered promiscuous mode [ 46.476587][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.478858][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.487596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.490168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.492869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.494476][ T4086] Bluetooth: hci0: command 0x040f tx timeout [ 46.506702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.509331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.524997][ T4042] device veth1_macvtap entered promiscuous mode [ 46.577408][ T4077] Bluetooth: hci4: command 0x040f tx timeout [ 46.579200][ T4077] Bluetooth: hci1: command 0x040f tx timeout [ 46.588239][ T4077] Bluetooth: hci3: command 0x040f tx timeout [ 46.590052][ T4077] Bluetooth: hci2: command 0x040f tx timeout [ 46.665379][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.157885][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.234998][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.313504][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.403509][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.469561][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.472712][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.475631][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.478884][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.483679][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.536147][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.539767][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.300267][ T4160] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7'. [ 49.358198][ T4165] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 49.529025][ T25] Bluetooth: hci0: command 0x0419 tx timeout [ 49.531058][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 49.533015][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 49.543122][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 49.548133][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.564165][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.570203][ T25] Bluetooth: hci4: command 0x0419 tx timeout [ 49.574233][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.652582][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.670980][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.679903][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.682633][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.844020][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.424420][ T4178] binder: 4169:4178 Acquire 1 refcount change on invalid ref 0 ret -22 [ 50.594631][ T4178] udc-core: couldn't find an available UDC or it's busy [ 50.596773][ T4178] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.917904][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.924077][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.927207][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.180898][ T4042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.349297][ T4042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.355140][ T4042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.412530][ T4042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.433707][ C1] sched: RT throttling activated [ 59.725316][ T4232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 59.727756][ T4232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 59.888146][ T4232] device syz_tun entered promiscuous mode [ 59.944382][ T4232] device syz_tun left promiscuous mode [ 60.109964][ T333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.112433][ T333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.137126][ T4237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22'. [ 60.139873][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.254962][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.257206][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.261466][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.590985][ T4247] udc-core: couldn't find an available UDC or it's busy [ 60.592955][ T4247] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.358002][ T4245] [U]  [ 61.358897][ T4245] [U] K{‘ [ 61.359735][ T4245] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 61.362021][ T4245] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 61.408658][ T4245] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 61.411674][ T4245] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 61.571398][ T4254] binder: 4248:4254 tried to acquire reference to desc 0, got 1 instead [ 62.188432][ T4245] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 62.197185][ T1959] binder: send failed reply for transaction 5 to 4248:4254 [ 62.199624][ T1959] binder: undelivered TRANSACTION_COMPLETE [ 62.201414][ T1959] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.254112][ T4245] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 62.264571][ T4263] process 'syz.1.26' launched '/dev/fd/5' with NULL argv: empty string added [ 62.369368][ T4245] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 62.372904][ T4245] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 63.022030][ T4270] 9pnet_virtio: no channels available for device syz [ 63.419668][ T4245] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 63.425144][ T4245] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 63.452692][ T4245] [U] 22½“Æ©Ðû©x?0;3u± [ 63.454250][ T4245] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 64.308391][ T4245] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 64.311418][ T4245] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 64.325001][ T4245] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 64.342065][ T4245] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 64.357454][ T4245] [U] ¹ ec [ 64.358516][ T4245] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 64.431683][ T4261] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 66.549141][ T4285] loop2: detected capacity change from 0 to 128 [ 66.606933][ T4283] tipc: Enabling of bearer rejected, failed to enable media [ 67.725268][ T4303] loop3: detected capacity change from 0 to 128 [ 67.726508][ T4285] attempt to access beyond end of device [ 67.726508][ T4285] loop2: rw=2049, want=1041, limit=128 [ 67.830981][ T4303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.679045][ T4317] netlink: 664 bytes leftover after parsing attributes in process `syz.4.35'. [ 68.713107][ T26] audit: type=1326 audit(68.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 68.732161][ T26] audit: type=1326 audit(68.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 68.773808][ T26] audit: type=1326 audit(68.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 69.813663][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.815777][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.855491][ T4345] tipc: Started in network mode [ 71.877432][ T4345] tipc: Node identity ea60b318f8c4, cluster identity 4711 [ 71.879656][ T4345] tipc: Enabled bearer , priority 0 [ 71.885408][ T4344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 71.903910][ T4345] device syzkaller0 entered promiscuous mode [ 71.922689][ T4345] tipc: Resetting bearer [ 71.931760][ T4348] udc-core: couldn't find an available UDC or it's busy [ 71.934307][ T4341] tipc: Resetting bearer [ 71.941988][ T4341] tipc: Disabling bearer [ 71.944438][ T4348] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.692742][ T4360] loop1: detected capacity change from 0 to 128 [ 72.735678][ T4360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.462874][ T4372] binder: 4363:4372 tried to acquire reference to desc 0, got 1 instead [ 73.790862][ T3615] binder: release 4363:4372 transaction 10 out, still active [ 73.793116][ T3615] binder: undelivered TRANSACTION_COMPLETE [ 73.956469][ T4107] binder: send failed reply for transaction 10, target dead [ 73.999229][ T4375] loop4: detected capacity change from 0 to 1024 [ 74.750272][ T1534] cfg80211: failed to load regulatory.db [ 75.069874][ T4390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 75.159127][ T26] audit: type=1326 audit(75.130:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 75.175087][ T26] audit: type=1326 audit(75.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 75.183085][ T26] audit: type=1326 audit(75.150:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 75.270735][ T26] audit: type=1326 audit(75.150:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 75.290718][ T4394] tipc: Enabled bearer , priority 0 [ 75.310701][ T26] audit: type=1326 audit(75.150:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 75.319037][ T4394] device syzkaller0 entered promiscuous mode [ 75.357312][ T26] audit: type=1326 audit(75.150:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 75.393970][ T26] audit: type=1326 audit(75.150:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 77.122323][ T26] audit: type=1326 audit(75.150:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 77.146584][ T4106] tipc: Node number set to 312783640 [ 77.152285][ T26] audit: type=1326 audit(75.150:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 77.157291][ T4396] tipc: Resetting bearer [ 77.163629][ T26] audit: type=1326 audit(75.150:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 77.236659][ T4392] tipc: Resetting bearer [ 77.305237][ T1534] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.345941][ T4392] tipc: Disabling bearer [ 77.675162][ T4410] netlink: 664 bytes leftover after parsing attributes in process `syz.4.66'. [ 77.694119][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.697521][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.702469][ T1534] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 78.298229][ T4415] loop1: detected capacity change from 0 to 128 [ 78.355291][ T1534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.392229][ T1534] usb 1-1: config 0 descriptor?? [ 78.414087][ T1534] usb 1-1: can't set config #0, error -71 [ 78.433576][ T1534] usb 1-1: USB disconnect, device number 2 [ 78.732428][ T4415] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.625094][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 82.070698][ T4456] loop1: detected capacity change from 0 to 128 [ 82.611415][ T4466] attempt to access beyond end of device [ 82.611415][ T4466] loop1: rw=2049, want=673, limit=128 [ 82.642301][ T4461] tipc: Started in network mode [ 82.675054][ T4461] tipc: Node identity , cluster identity 4711 [ 82.676861][ T4461] tipc: Failed to obtain node identity [ 82.678379][ T4461] tipc: Enabling of bearer rejected, failed to enable media [ 82.815270][ T4465] device syzkaller0 entered promiscuous mode [ 83.156303][ T136] attempt to access beyond end of device [ 83.156303][ T136] loop1: rw=1, want=681, limit=128 [ 83.569034][ T4481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 85.128501][ T4503] loop2: detected capacity change from 0 to 128 [ 85.304692][ T4036] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 85.307532][ T4036] CPU: 0 PID: 4036 Comm: kworker/u5:2 Not tainted 5.15.188-syzkaller #0 [ 85.309923][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.312806][ T4036] Workqueue: hci4 hci_rx_work [ 85.314107][ T4036] Call trace: [ 85.314970][ T4036] dump_backtrace+0x0/0x43c [ 85.316167][ T4036] show_stack+0x2c/0x3c [ 85.317315][ T4036] __dump_stack+0x30/0x40 [ 85.318551][ T4036] dump_stack_lvl+0xf8/0x160 [ 85.319798][ T4036] dump_stack+0x1c/0x5c [ 85.320977][ T4036] sysfs_create_dir_ns+0x22c/0x24c [ 85.322421][ T4036] kobject_add_internal+0x590/0xc54 [ 85.323872][ T4036] kobject_add+0x134/0x1f8 [ 85.325082][ T4036] device_add+0x3f0/0xf94 [ 85.326273][ T4036] hci_conn_add_sysfs+0xbc/0x1cc [ 85.327686][ T4036] le_conn_complete_evt+0x9a4/0x11bc [ 85.329151][ T4036] hci_le_meta_evt+0x85c/0x3010 [ 85.330449][ T4036] hci_event_packet+0xd10/0x11bc [ 85.331754][ T4036] hci_rx_work+0x1cc/0x880 [ 85.333000][ T4036] process_one_work+0x79c/0x1140 [ 85.334394][ T4036] worker_thread+0x8f4/0x101c [ 85.335678][ T4036] kthread+0x374/0x454 [ 85.336818][ T4036] ret_from_fork+0x10/0x20 [ 85.340535][ T4036] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.344250][ T4036] Bluetooth: hci4: failed to register connection device [ 85.348559][ T4511] tipc: Started in network mode [ 85.350129][ T4511] tipc: Node identity , cluster identity 4711 [ 85.351757][ T4511] tipc: Failed to obtain node identity [ 85.353248][ T4511] tipc: Enabling of bearer rejected, failed to enable media [ 85.433296][ T4511] device syzkaller0 entered promiscuous mode [ 85.441896][ T4515] udc-core: couldn't find an available UDC or it's busy [ 85.448559][ T4515] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.485213][ T4503] attempt to access beyond end of device [ 85.485213][ T4503] loop2: rw=2049, want=1041, limit=128 [ 85.889935][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 85.992338][ T4530] tipc: Started in network mode [ 86.010553][ T4530] tipc: Node identity f2a86836a8f8, cluster identity 4711 [ 86.012902][ T4530] tipc: Enabled bearer , priority 0 [ 86.042514][ T4530] device syzkaller0 entered promiscuous mode [ 86.123466][ T4533] tipc: Resetting bearer [ 86.168775][ T4529] tipc: Resetting bearer [ 87.289655][ T3615] tipc: Node number set to 1515218998 [ 87.314520][ T4529] tipc: Disabling bearer [ 87.412521][ T4545] netlink: 664 bytes leftover after parsing attributes in process `syz.0.99'. [ 87.483056][ T4548] tipc: Started in network mode [ 87.485313][ T4548] tipc: Node identity , cluster identity 4711 [ 87.488682][ T4548] tipc: Failed to obtain node identity [ 87.490347][ T4548] tipc: Enabling of bearer rejected, failed to enable media [ 87.631821][ T4548] device syzkaller0 entered promiscuous mode [ 87.651245][ T4553] loop2: detected capacity change from 0 to 128 [ 87.770149][ T4557] binder: 4546:4557 tried to acquire reference to desc 0, got 1 instead [ 88.568295][ T4553] attempt to access beyond end of device [ 88.568295][ T4553] loop2: rw=2049, want=1041, limit=128 [ 89.594555][ T4578] netlink: 96 bytes leftover after parsing attributes in process `syz.0.121'. [ 89.598995][ T4580] udc-core: couldn't find an available UDC or it's busy [ 89.611470][ T4580] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.780929][ T4586] tipc: Enabled bearer , priority 0 [ 89.783675][ T4586] device syzkaller0 entered promiscuous mode [ 89.819452][ T4586] Zero length message leads to an empty skb [ 89.828356][ T4586] tipc: Resetting bearer [ 89.840582][ T4585] tipc: Resetting bearer [ 89.848521][ T4585] tipc: Disabling bearer [ 90.800917][ T4593] tipc: Enabled bearer , priority 0 [ 90.886608][ T4593] device syzkaller0 entered promiscuous mode [ 90.900630][ T4594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 90.939602][ T4599] tipc: Resetting bearer [ 91.017779][ T4601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.125'. [ 91.871777][ T4168] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 91.874794][ T4592] tipc: Resetting bearer [ 91.919134][ T4592] tipc: Disabling bearer [ 92.022175][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 92.139893][ T4617] loop2: detected capacity change from 0 to 128 [ 92.497892][ T1959] Bluetooth: hci4: command 0x0406 tx timeout [ 92.602655][ T4625] tipc: Enabled bearer , priority 0 [ 92.611947][ T4625] device syzkaller0 entered promiscuous mode [ 92.626435][ T4625] tipc: Resetting bearer [ 92.760439][ T4624] tipc: Resetting bearer [ 92.779995][ T4624] tipc: Disabling bearer [ 92.843341][ T4617] attempt to access beyond end of device [ 92.843341][ T4617] loop2: rw=2049, want=1041, limit=128 [ 93.173916][ T4168] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.176401][ T4168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.178571][ T4168] usb 1-1: Product: syz [ 93.179688][ T4168] usb 1-1: Manufacturer: syz [ 93.180953][ T4168] usb 1-1: SerialNumber: syz [ 93.209146][ T4168] usb 1-1: config 0 descriptor?? [ 94.076576][ T4642] udc-core: couldn't find an available UDC or it's busy [ 94.080111][ T4642] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.138239][ T4168] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 94.140498][ T4168] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 94.148980][ T4168] usb 1-1: USB disconnect, device number 3 [ 94.184055][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 94.184519][ T26] audit: type=1326 audit(94.140:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.4.141" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x0 [ 94.284351][ T4649] loop3: detected capacity change from 0 to 1024 [ 95.215810][ T26] audit: type=1326 audit(95.190:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 95.224351][ T26] audit: type=1326 audit(95.190:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 95.327476][ T26] audit: type=1326 audit(95.190:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 95.333656][ T26] audit: type=1326 audit(95.200:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 95.339672][ T26] audit: type=1326 audit(95.200:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 95.363757][ T26] audit: type=1326 audit(95.200:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 96.499185][ T26] audit: type=1326 audit(95.210:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 96.513781][ T26] audit: type=1326 audit(95.210:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 96.519932][ T26] audit: type=1326 audit(95.210:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 96.559970][ T4661] tipc: Started in network mode [ 96.561363][ T4661] tipc: Node identity , cluster identity 4711 [ 96.563079][ T4661] tipc: Failed to obtain node identity [ 96.593876][ T4661] tipc: Enabling of bearer rejected, failed to enable media [ 96.595035][ T4663] binder: tried to use weak ref as strong ref [ 96.619277][ T4663] binder: 4662:4663 Acquire 1 refcount change on invalid ref 0 ret -22 [ 96.624018][ T4663] binder: 4662:4663 got transaction to invalid handle, 1 [ 96.629496][ T4663] binder: 4662:4663 transaction failed 29201/-22, size 0-0 line 2917 [ 96.632557][ T4168] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.671749][ T4661] device syzkaller0 entered promiscuous mode [ 96.680871][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 96.703945][ T4669] tipc: Started in network mode [ 96.705336][ T4669] tipc: Node identity f6913dd84219, cluster identity 5 [ 96.707295][ T4669] tipc: Enabled bearer , priority 0 [ 96.721396][ T4667] device syzkaller0 entered promiscuous mode [ 97.835223][ T4086] tipc: Node number set to 3028827608 [ 97.881316][ T4669] tipc: Resetting bearer [ 97.937339][ T4666] tipc: Resetting bearer [ 97.945316][ T4666] tipc: Disabling bearer [ 99.672995][ T4703] binder: tried to use weak ref as strong ref [ 99.674906][ T4703] binder: 4701:4703 Acquire 1 refcount change on invalid ref 0 ret -22 [ 99.714390][ T4703] binder: 4701:4703 got transaction to invalid handle, 1 [ 99.716385][ T4703] binder: 4701:4703 transaction failed 29201/-22, size 0-0 line 2917 [ 99.719144][ T4704] syz.1.162 uses obsolete (PF_INET,SOCK_PACKET) [ 99.757264][ T4540] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.318745][ T4718] loop0: detected capacity change from 0 to 128 [ 101.645932][ T4723] tipc: Enabled bearer , priority 0 [ 101.669742][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 101.669754][ T26] audit: type=1326 audit(101.640:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 101.730854][ T4723] device syzkaller0 entered promiscuous mode [ 101.743852][ T26] audit: type=1326 audit(101.650:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 101.760159][ T26] audit: type=1326 audit(101.650:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94593ba8 code=0x7ffc0000 [ 101.862539][ T4723] tipc: Resetting bearer [ 101.881047][ T4722] tipc: Resetting bearer [ 101.899616][ T4718] attempt to access beyond end of device [ 101.899616][ T4718] loop0: rw=2049, want=1041, limit=128 [ 101.909590][ T4722] tipc: Disabling bearer [ 103.423838][ T26] audit: type=1326 audit(103.390:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 103.429981][ T26] audit: type=1326 audit(103.390:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 103.474716][ T26] audit: type=1326 audit(103.390:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 103.653402][ T26] audit: type=1326 audit(103.390:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 103.730856][ T26] audit: type=1326 audit(103.440:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9e2cb7fc code=0x7ffc0000 [ 103.753481][ T4754] binder: 4745:4754 tried to acquire reference to desc 0, got 1 instead [ 104.086605][ T26] audit: type=1326 audit(103.440:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9e2cb7fc code=0x7ffc0000 [ 104.253849][ T4753] binder: release 4745:4754 transaction 28 out, still active [ 104.256003][ T4753] binder: undelivered TRANSACTION_COMPLETE [ 104.303873][ T26] audit: type=1326 audit(103.620:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9e2cb7fc code=0x7ffc0000 [ 104.416379][ T4168] binder: send failed reply for transaction 28, target dead [ 104.514022][ T4762] loop0: detected capacity change from 0 to 1024 [ 104.575091][ T4762] ======================================================= [ 104.575091][ T4762] WARNING: The mand mount option has been deprecated and [ 104.575091][ T4762] and is ignored by this kernel. Remove the mand [ 104.575091][ T4762] option from the mount to silence this warning. [ 104.575091][ T4762] ======================================================= [ 104.786281][ T4762] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 104.788906][ T4762] EXT4-fs (loop0): Ignoring removed bh option [ 104.790699][ T4762] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 105.755468][ T4771] tipc: Enabled bearer , priority 0 [ 105.766273][ T4773] loop1: detected capacity change from 0 to 128 [ 105.852157][ T4771] device syzkaller0 entered promiscuous mode [ 106.724379][ T4771] tipc: Resetting bearer [ 106.785060][ T4773] attempt to access beyond end of device [ 106.785060][ T4773] loop1: rw=2049, want=1041, limit=128 [ 106.816815][ T4770] tipc: Resetting bearer [ 106.925637][ T4770] tipc: Disabling bearer [ 107.931675][ T4789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.188'. [ 109.142965][ T4806] binder: 4800:4806 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 112.225437][ T4835] loop4: detected capacity change from 0 to 128 [ 112.516542][ T4835] attempt to access beyond end of device [ 112.516542][ T4835] loop4: rw=2049, want=1041, limit=128 [ 112.577927][ T4842] capability: warning: `syz.3.203' uses deprecated v2 capabilities in a way that may be insecure [ 113.142795][ T4852] netlink: 68 bytes leftover after parsing attributes in process `syz.0.205'. [ 113.824769][ T4865] tipc: Enabled bearer , priority 0 [ 113.833318][ T4862] device syzkaller0 entered promiscuous mode [ 113.913537][ T4861] tipc: Resetting bearer [ 113.948917][ T4861] tipc: Disabling bearer [ 116.736151][ T4878] loop1: detected capacity change from 0 to 128 [ 116.867407][ T4878] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.372336][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.053823][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 118.991062][ T21] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 118.994332][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.996538][ T21] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 118.999025][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.023615][ T21] usb 1-1: config 0 descriptor?? [ 119.160069][ T4908] loop1: detected capacity change from 0 to 128 [ 119.212297][ T4909] tipc: Enabled bearer , priority 0 [ 119.626402][ T4908] attempt to access beyond end of device [ 119.626402][ T4908] loop1: rw=2049, want=1041, limit=128 [ 119.714607][ T4913] netlink: 68 bytes leftover after parsing attributes in process `syz.4.220'. [ 119.774603][ T21] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 119.795994][ T4909] device syzkaller0 entered promiscuous mode [ 119.859489][ T4907] tipc: Resetting bearer [ 119.875280][ T4907] tipc: Disabling bearer [ 120.857267][ T21] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -71 [ 120.888495][ T4929] [U] [ 120.889303][ T4929] [U] [ 120.890035][ T4929] [U] [ 120.890779][ T4929] [U] [ 120.891618][ T4929] [U] [ 120.892352][ T4929] [U] [ 120.893161][ T4929] [U] [ 120.893883][ T4929] [U] [ 120.915850][ T4929] [U] [ 120.916656][ T4929] [U] [ 120.917416][ T4929] [U] [ 120.918207][ T4929] [U] [ 120.936207][ T21] usb 1-1: USB disconnect, device number 4 [ 120.943198][ T4929] [U] [ 120.944047][ T4929] [U] [ 120.944804][ T4929] [U] [ 120.945528][ T4929] [U] [ 120.967656][ T4927] [U] [ 120.988209][ T4934] loop3: detected capacity change from 0 to 128 [ 121.050600][ T4934] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.177926][ T4925] netlink: 664 bytes leftover after parsing attributes in process `syz.2.227'. [ 122.363217][ T4948] binder: 4942:4948 tried to acquire reference to desc 0, got 1 instead [ 122.400854][ T4951] tipc: Started in network mode [ 122.409364][ T4951] tipc: Node identity , cluster identity 4711 [ 122.724752][ T4951] tipc: Failed to obtain node identity [ 122.726421][ T4951] tipc: Enabling of bearer rejected, failed to enable media [ 122.770982][ T4946] fido_id[4946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 122.862796][ T4957] device syzkaller0 entered promiscuous mode [ 122.909347][ T4962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 123.029131][ T4964] loop1: detected capacity change from 0 to 128 [ 123.320174][ T4964] attempt to access beyond end of device [ 123.320174][ T4964] loop1: rw=2049, want=1041, limit=128 [ 123.324284][ T4968] tipc: Started in network mode [ 123.332200][ T4968] tipc: Node identity 42700fe5d3f9, cluster identity 4711 [ 123.335513][ T4968] tipc: Enabled bearer , priority 0 [ 123.351032][ T4968] device syzkaller0 entered promiscuous mode [ 123.383550][ T4967] tipc: Resetting bearer [ 123.413179][ T4967] tipc: Disabling bearer [ 124.547419][ T4985] netlink: 'syz.4.244': attribute type 4 has an invalid length. [ 126.994718][ T5003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 127.264753][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 127.576707][ T5022] binder: 5009:5022 tried to acquire reference to desc 0, got 1 instead [ 128.358822][ T5019] netlink: 68 bytes leftover after parsing attributes in process `syz.4.247'. [ 130.347615][ T5048] binder: 5045:5048 got transaction to invalid handle, 1 [ 130.349748][ T5048] binder: 5045:5048 transaction failed 29201/-22, size 0-0 line 2917 [ 131.337357][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.339250][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.344760][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.183391][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.263'. [ 132.186386][ T5056] netlink: 72 bytes leftover after parsing attributes in process `syz.0.263'. [ 132.441043][ T5058] loop3: detected capacity change from 0 to 128 [ 133.040726][ T5072] binder: tried to use weak ref as strong ref [ 133.042991][ T5072] binder: 5064:5072 Acquire 1 refcount change on invalid ref 0 ret -22 [ 133.051640][ T5072] binder: 5064:5072 got transaction to invalid handle, 1 [ 133.053920][ T5072] binder: 5064:5072 transaction failed 29201/-22, size 0-0 line 2917 [ 133.480149][ T4077] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.382083][ T5058] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.416627][ T5080] loop2: detected capacity change from 0 to 128 [ 137.425604][ T5080] attempt to access beyond end of device [ 137.425604][ T5080] loop2: rw=2049, want=1041, limit=128 [ 138.004550][ T5095] binder: 5091:5095 got transaction to invalid handle, 1 [ 138.006665][ T5095] binder: 5091:5095 transaction failed 29201/-22, size 0-0 line 2917 [ 138.449964][ T4086] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.165325][ T5112] tipc: Enabled bearer , priority 0 [ 139.475883][ T5117] binder: tried to use weak ref as strong ref [ 139.477691][ T5117] binder: 5111:5117 Acquire 1 refcount change on invalid ref 0 ret -22 [ 139.486511][ T5117] binder: 5111:5117 got transaction to invalid handle, 1 [ 139.488613][ T5117] binder: 5111:5117 transaction failed 29201/-22, size 0-0 line 2917 [ 140.211708][ T4086] binder: undelivered TRANSACTION_ERROR: 29201 [ 140.351254][ T5112] device syzkaller0 entered promiscuous mode [ 140.584624][ T5112] tipc: Resetting bearer [ 141.356067][ T5110] tipc: Resetting bearer [ 141.565688][ T5110] tipc: Disabling bearer [ 141.625067][ T5134] binder: 5126:5134 got transaction to invalid handle, 1 [ 141.627143][ T5134] binder: 5126:5134 transaction failed 29201/-22, size 0-0 line 2917 [ 141.754967][ T4086] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.800477][ T5124] sctp: [Deprecated]: syz.3.287 (pid 5124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.800477][ T5124] Use struct sctp_sack_info instead [ 142.408917][ T5143] loop0: detected capacity change from 0 to 128 [ 143.782498][ T5143] attempt to access beyond end of device [ 143.782498][ T5143] loop0: rw=2049, want=1041, limit=128 [ 144.901142][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 147.046053][ T1534] Bluetooth: hci5: command 0x041b tx timeout [ 147.103270][ T5176] team0: No ports can be present during mode change [ 147.235485][ T5129] chnl_net:caif_netlink_parms(): no params data found [ 148.545797][ T5200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.307'. [ 148.548327][ T5200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.307'. [ 148.636858][ T5200] device syz_tun entered promiscuous mode [ 148.765107][ T5200] device syz_tun left promiscuous mode [ 148.773989][ T1534] libceph: connect (1)[c::]:6789 error -101 [ 148.776083][ T1534] libceph: mon0 (1)[c::]:6789 connect error [ 148.779666][ T5210] ceph: No mds server is up or the cluster is laggy [ 148.782586][ T1534] libceph: connect (1)[c::]:6789 error -101 [ 148.788094][ T1534] libceph: mon0 (1)[c::]:6789 connect error [ 148.862725][ T5215] binder: 5201:5215 tried to acquire reference to desc 0, got 1 instead [ 148.871264][ T5215] binder: 5201:5215 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 148.875130][ T5215] binder: 5215 RLIMIT_NICE not set [ 148.876719][ T5215] binder: 5215 RLIMIT_NICE not set [ 148.880658][ T5215] binder: release 5201:5215 transaction 64 in, still active [ 148.882952][ T5215] binder: send failed reply for transaction 64 to 5201:5215 [ 149.063111][ T1534] libceph: connect (1)[c::]:6789 error -101 [ 149.115302][ T1534] libceph: mon0 (1)[c::]:6789 connect error [ 149.164542][ T1534] Bluetooth: hci5: command 0x040f tx timeout [ 149.384233][ T1534] binder: undelivered TRANSACTION_COMPLETE [ 149.385904][ T1534] binder: undelivered TRANSACTION_ERROR: 29189 [ 149.693490][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.709658][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.729997][ T5129] device bridge_slave_0 entered promiscuous mode [ 149.744796][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.967609][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.025005][ T5129] device bridge_slave_1 entered promiscuous mode [ 151.085094][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.090071][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.107694][ T5129] team0: Port device team_slave_0 added [ 151.111634][ T5129] team0: Port device team_slave_1 added [ 151.127178][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.129802][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.142573][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.157918][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.159950][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.344269][ T5240] binder: 5227:5240 tried to acquire reference to desc 0, got 1 instead [ 151.466083][ T4077] binder: release 5227:5240 transaction 69 out, still active [ 151.468270][ T4077] binder: undelivered TRANSACTION_COMPLETE [ 151.472622][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.778450][ T1534] Bluetooth: hci5: command 0x0419 tx timeout [ 151.786269][ T1534] binder: send failed reply for transaction 69, target dead [ 151.897937][ T5129] device hsr_slave_0 entered promiscuous mode [ 152.149625][ T5129] device hsr_slave_1 entered promiscuous mode [ 152.203869][ T5129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.206134][ T5129] Cannot create hsr debugfs directory [ 153.395230][ T5271] overlayfs: empty lowerdir [ 153.719618][ T5273] loop0: detected capacity change from 0 to 1024 [ 153.767314][ T5275] loop2: detected capacity change from 0 to 1024 [ 153.781465][ T5129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.816446][ T5275] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 153.819003][ T5275] EXT4-fs (loop2): Ignoring removed bh option [ 153.820698][ T5275] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 153.849467][ T5129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.895489][ T5129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.913909][ T26] kauditd_printk_skb: 340 callbacks suppressed [ 153.913919][ T26] audit: type=1326 audit(153.890:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 153.931983][ T26] audit: type=1326 audit(153.890:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 153.946871][ T26] audit: type=1326 audit(153.890:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 153.952974][ T26] audit: type=1326 audit(153.890:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 153.967152][ T26] audit: type=1326 audit(153.890:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 153.973372][ T26] audit: type=1326 audit(153.890:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 153.989068][ T26] audit: type=1326 audit(153.910:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 154.000659][ T26] audit: type=1326 audit(153.910:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 154.010717][ T26] audit: type=1326 audit(153.910:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 154.063948][ T26] audit: type=1326 audit(153.990:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 154.088435][ T5129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.183631][ T5283] binder: 5276:5283 tried to acquire reference to desc 0, got 1 instead [ 155.361930][ T4753] binder: send failed reply for transaction 74 to 5276:5283 [ 155.374048][ T4753] binder: undelivered TRANSACTION_COMPLETE [ 155.375692][ T4753] binder: undelivered TRANSACTION_ERROR: 29189 [ 155.789870][ T5300] loop3: detected capacity change from 0 to 128 [ 155.855172][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.068359][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.646209][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.659454][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.689446][ T5300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.703401][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.708240][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.710930][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.712857][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.937119][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.950614][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.953456][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.971125][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.973089][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.001221][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.170599][ T5317] udc-core: couldn't find an available UDC or it's busy [ 158.172611][ T5317] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 158.205133][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.208366][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.215979][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.758786][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.781812][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.806977][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.819970][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.010540][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.024371][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.042821][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.111093][ T5332] binder: 5325:5332 tried to acquire reference to desc 0, got 1 instead [ 159.646810][ T4753] binder: release 5325:5332 transaction 79 out, still active [ 159.648935][ T4753] binder: undelivered TRANSACTION_COMPLETE [ 159.807979][ T1959] binder: send failed reply for transaction 79, target dead [ 159.906945][ T5341] loop1: detected capacity change from 0 to 1024 [ 159.912566][ T5346] loop0: detected capacity change from 0 to 128 [ 159.971535][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.986508][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.002805][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.043036][ T5350] loop3: detected capacity change from 0 to 128 [ 160.062512][ T5341] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 160.065051][ T5341] EXT4-fs (loop1): Ignoring removed bh option [ 160.066811][ T5341] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 160.306724][ T5355] 9pnet_virtio: no channels available for device syz [ 161.328082][ T5346] attempt to access beyond end of device [ 161.328082][ T5346] loop0: rw=2049, want=1041, limit=128 [ 161.329787][ T5350] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.039336][ T5378] binder: 5370:5378 tried to acquire reference to desc 0, got 1 instead [ 163.649847][ T21] binder: send failed reply for transaction 84 to 5370:5378 [ 163.713473][ T21] binder: undelivered TRANSACTION_COMPLETE [ 164.034140][ T21] binder: undelivered TRANSACTION_ERROR: 29189 [ 164.523855][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 164.655110][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.658205][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.077703][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.086954][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.454121][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.456784][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.462416][ T5129] device veth0_vlan entered promiscuous mode [ 165.504297][ T5129] device veth1_vlan entered promiscuous mode [ 165.582483][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.585317][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.594552][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.598085][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.602889][ T4086] Bluetooth: hci0: command 0x0406 tx timeout [ 165.605107][ T4086] Bluetooth: hci1: command 0x0406 tx timeout [ 165.606779][ T4086] Bluetooth: hci3: command 0x0406 tx timeout [ 165.685224][ T5129] device veth0_macvtap entered promiscuous mode [ 165.689318][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.693451][ T5129] device veth1_macvtap entered promiscuous mode [ 165.759680][ T5400] loop0: detected capacity change from 0 to 1024 [ 165.772957][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.778359][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.781167][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.781451][ T5403] loop1: detected capacity change from 0 to 128 [ 165.787163][ T5400] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 165.789528][ T5400] EXT4-fs (loop0): Ignoring removed bh option [ 165.791141][ T5400] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 165.801254][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.806237][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.809225][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.812816][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.817106][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.819776][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.822607][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.827955][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.830468][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.833337][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.848717][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.851659][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.863739][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.867144][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.870099][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.873235][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.900960][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.908635][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.911326][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.932513][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.938606][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.960469][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.964236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.985848][ T5129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.988254][ T5129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.990566][ T5129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.992961][ T5129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.063220][ T5403] attempt to access beyond end of device [ 167.063220][ T5403] loop1: rw=2049, want=1041, limit=128 [ 167.120920][ T4885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.123353][ T4885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.130755][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.270282][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.272703][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.277267][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.861094][ T5422] binder: 5416:5422 tried to acquire reference to desc 0, got 1 instead [ 169.747267][ T21] binder: send failed reply for transaction 89 to 5416:5422 [ 169.749419][ T21] binder: undelivered TRANSACTION_COMPLETE [ 169.751103][ T21] binder: undelivered TRANSACTION_ERROR: 29189 [ 170.833281][ T5437] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 171.517888][ T5441] udc-core: couldn't find an available UDC or it's busy [ 171.519975][ T5441] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 171.540844][ T5444] loop0: detected capacity change from 0 to 1024 [ 171.744802][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 171.744813][ T26] audit: type=1326 audit(171.720:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.761896][ T26] audit: type=1326 audit(171.730:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.792155][ T26] audit: type=1326 audit(171.730:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.821061][ T26] audit: type=1326 audit(171.730:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.841942][ T26] audit: type=1326 audit(171.730:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.888406][ T26] audit: type=1326 audit(171.730:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.909969][ T26] audit: type=1326 audit(171.730:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.929159][ T26] audit: type=1326 audit(171.740:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.935882][ T26] audit: type=1326 audit(171.740:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 171.942739][ T26] audit: type=1326 audit(171.740:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980beba8 code=0x7ffc0000 [ 173.620278][ T5461] loop1: detected capacity change from 0 to 128 [ 173.636355][ T5458] binder: 5451:5458 tried to acquire reference to desc 0, got 1 instead [ 174.224900][ T5473] netlink: 'syz.5.382': attribute type 4 has an invalid length. [ 174.893976][ T1534] binder: send failed reply for transaction 94 to 5451:5458 [ 174.896118][ T1534] binder: undelivered TRANSACTION_COMPLETE [ 174.897805][ T1534] binder: undelivered TRANSACTION_ERROR: 29189 [ 174.984323][ T5461] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.000891][ T5478] loop0: detected capacity change from 0 to 128 [ 176.784758][ T5478] attempt to access beyond end of device [ 176.784758][ T5478] loop0: rw=2049, want=1041, limit=128 [ 176.833279][ T5495] binder: 5490:5495 tried to acquire reference to desc 0, got 1 instead [ 176.912828][ T5498] loop1: detected capacity change from 0 to 1024 [ 176.918446][ T5498] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 176.920894][ T5498] EXT4-fs (loop1): Ignoring removed bh option [ 176.922480][ T5498] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 178.139644][ T4077] binder: send failed reply for transaction 99 to 5490:5495 [ 178.141799][ T4077] binder: undelivered TRANSACTION_COMPLETE [ 178.143483][ T4077] binder: undelivered TRANSACTION_ERROR: 29189 [ 178.461423][ T5507] binder: 5505:5507 tried to acquire reference to desc 0, got 1 instead [ 179.290816][ T4753] binder: send failed reply for transaction 104 to 5505:5507 [ 179.293016][ T4753] binder: undelivered TRANSACTION_COMPLETE [ 179.652711][ T4753] binder: undelivered TRANSACTION_ERROR: 29189 [ 181.890733][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 182.329152][ T5539] binder: 5536:5539 tried to acquire reference to desc 0, got 1 instead [ 182.834138][ T5548] loop2: detected capacity change from 0 to 7 [ 182.841793][ T5548] loop2: [ 182.841972][ T5547] loop3: detected capacity change from 0 to 1024 [ 182.842933][ T5548] loop2: partition table partially beyond EOD, truncated [ 182.907503][ T5549] binder: 5542:5549 tried to acquire reference to desc 0, got 1 instead [ 182.919378][ T5549] binder: 5542:5549 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 182.923014][ T5549] binder: 5549 RLIMIT_NICE not set [ 182.924627][ T5549] binder: 5549 RLIMIT_NICE not set [ 183.439549][ T4753] binder: release 5542:5549 transaction 114 out, still active [ 183.441701][ T4753] binder: undelivered TRANSACTION_COMPLETE [ 183.443425][ T4753] binder: send failed reply for transaction 109 to 5536:5539 [ 183.481572][ T5547] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 183.484113][ T5547] EXT4-fs (loop3): Ignoring removed bh option [ 183.485789][ T5547] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 183.501297][ T4753] binder: undelivered TRANSACTION_COMPLETE [ 183.502937][ T4753] binder: undelivered TRANSACTION_ERROR: 29189 [ 183.524221][ T4753] binder: release 5542:5549 transaction 114 in, still active [ 183.541776][ T4753] binder: send failed reply for transaction 114, target dead [ 184.933967][ T5557] binder: 5550:5557 tried to acquire reference to desc 0, got 1 instead [ 185.399985][ T3615] binder: release 5550:5557 transaction 119 out, still active [ 185.402182][ T3615] binder: undelivered TRANSACTION_COMPLETE [ 186.259477][ T4107] binder: send failed reply for transaction 119, target dead [ 190.433411][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 192.125446][ T5591] binder: 5585:5591 tried to acquire reference to desc 0, got 1 instead [ 192.290793][ T5594] loop5: detected capacity change from 0 to 1024 [ 192.412013][ T5594] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 192.414774][ T5594] EXT4-fs (loop5): Ignoring removed bh option [ 192.416507][ T5594] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 192.696438][ T3615] binder: release 5585:5591 transaction 124 out, still active [ 192.698866][ T3615] binder: undelivered TRANSACTION_COMPLETE [ 193.006743][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.008419][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.035499][ T1534] binder: send failed reply for transaction 124, target dead [ 193.205028][ T5603] serio: Serial port ptm0 [ 193.387491][ T5605] binder: 5599:5605 tried to acquire reference to desc 0, got 1 instead [ 194.115622][ T4107] binder: send failed reply for transaction 129 to 5599:5605 [ 194.115739][ T4107] binder: undelivered TRANSACTION_COMPLETE [ 194.115764][ T4107] binder: undelivered TRANSACTION_ERROR: 29189 [ 194.298610][ T5610] loop1: detected capacity change from 0 to 1024 [ 194.383953][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 194.383965][ T26] audit: type=1326 audit(194.310:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.399111][ T26] audit: type=1326 audit(194.320:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.423869][ T4753] Bluetooth: hci4: command 0x0409 tx timeout [ 194.430496][ T26] audit: type=1326 audit(194.330:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.458796][ T26] audit: type=1326 audit(194.330:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.492025][ T26] audit: type=1326 audit(194.330:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.519107][ T26] audit: type=1326 audit(194.330:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.545985][ T26] audit: type=1326 audit(194.330:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.553105][ T26] audit: type=1326 audit(194.330:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.566553][ T26] audit: type=1326 audit(194.330:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 194.572930][ T26] audit: type=1326 audit(194.330:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 196.796829][ T4753] Bluetooth: hci4: command 0x041b tx timeout [ 196.877952][ T5595] chnl_net:caif_netlink_parms(): no params data found [ 197.103914][ T5628] batman_adv: batadv0: Adding interface: dummy0 [ 197.105696][ T5628] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.122113][ T5628] batman_adv: batadv0: Interface activated: dummy0 [ 197.320264][ T5629] batadv0: mtu less than device minimum [ 197.326864][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.334577][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.341914][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.349268][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.356705][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.364160][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.371494][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.378854][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.386256][ T5629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.695725][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.697720][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.700492][ T5595] device bridge_slave_0 entered promiscuous mode [ 198.768593][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.770686][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.793944][ T5595] device bridge_slave_1 entered promiscuous mode [ 199.395004][ T1534] Bluetooth: hci4: command 0x040f tx timeout [ 199.769243][ T5651] loop0: detected capacity change from 0 to 1024 [ 199.785603][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.797191][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.971325][ T5651] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 199.973936][ T5651] EXT4-fs (loop0): Ignoring removed bh option [ 199.975791][ T5651] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 200.163869][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.432'. [ 200.172817][ T5649] ODEBUG: Out of memory. ODEBUG disabled [ 201.106445][ T5657] binder: 5654:5657 tried to acquire reference to desc 0, got 1 instead [ 201.264553][ T1534] binder: send failed reply for transaction 134 to 5654:5657 [ 201.266801][ T1534] binder: undelivered TRANSACTION_COMPLETE [ 201.268463][ T1534] binder: undelivered TRANSACTION_ERROR: 29189 [ 202.130199][ T4753] Bluetooth: hci4: command 0x0419 tx timeout [ 202.159154][ T5663] loop3: detected capacity change from 0 to 1024 [ 202.174861][ T5595] team0: Port device team_slave_0 added [ 202.193234][ T5595] team0: Port device team_slave_1 added [ 202.210172][ T5665] serio: Serial port ptm0 [ 202.261245][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.273847][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.301697][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.317188][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.319175][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.355814][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.409667][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 202.409679][ T26] audit: type=1326 audit(202.380:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 203.141157][ T26] audit: type=1326 audit(202.440:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 203.243744][ T26] audit: type=1326 audit(203.110:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 203.264938][ T26] audit: type=1326 audit(203.110:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 203.291261][ T26] audit: type=1326 audit(203.110:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 203.309023][ T26] audit: type=1326 audit(203.110:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 203.317321][ T26] audit: type=1326 audit(203.110:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 203.323385][ T26] audit: type=1326 audit(203.110:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 203.346116][ T5595] device hsr_slave_0 entered promiscuous mode [ 204.214996][ T26] audit: type=1326 audit(203.110:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 204.254589][ T5595] device hsr_slave_1 entered promiscuous mode [ 204.257164][ T26] audit: type=1326 audit(203.110:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 204.303856][ T5595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.305998][ T5595] Cannot create hsr debugfs directory [ 204.376558][ T5673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.410763][ T5673] bond0: (slave rose0): Enslaving as an active interface with an up link [ 204.423981][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 205.445575][ T5689] loop5: detected capacity change from 0 to 1024 [ 205.485002][ T5694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.520605][ T5689] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 205.523094][ T5689] EXT4-fs (loop5): Ignoring removed bh option [ 205.524785][ T5689] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 205.538363][ T5595] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.696017][ T5595] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.746326][ T5595] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 206.504576][ T5595] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 206.584625][ T5705] netlink: 10 bytes leftover after parsing attributes in process `syz.1.446'. [ 206.589517][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.447'. [ 206.716585][ T5722] udc-core: couldn't find an available UDC or it's busy [ 206.718525][ T5722] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 206.731896][ T5721] loop1: detected capacity change from 0 to 1024 [ 206.947676][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.998179][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.001004][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.012941][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.021521][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.878126][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 207.878139][ T26] audit: type=1326 audit(207.780:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 207.935197][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.966125][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.968262][ T5606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.001268][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.031794][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.052050][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.054132][ T5606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.089206][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.133796][ T5736] serio: Serial port ptm0 [ 208.144341][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 208.354120][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.436221][ T5748] loop5: detected capacity change from 0 to 1024 [ 208.444143][ T5748] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 208.446700][ T5748] EXT4-fs (loop5): Ignoring removed bh option [ 208.448447][ T5748] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 208.464065][ T5595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.473429][ T5595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.526349][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.529879][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.541045][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.914212][ T5760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.917815][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.936635][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.960599][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.981980][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.004592][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.024721][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.056061][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.077157][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.643349][ T5782] loop3: detected capacity change from 0 to 1024 [ 211.397410][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.407019][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.417610][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.450992][ T26] audit: type=1326 audit(211.420:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 211.457962][ T26] audit: type=1326 audit(211.420:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 211.489347][ T26] audit: type=1326 audit(211.420:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 211.542684][ T26] audit: type=1326 audit(211.420:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 211.572485][ T26] audit: type=1326 audit(211.420:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 211.622465][ T26] audit: type=1326 audit(211.420:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 211.666624][ T26] audit: type=1326 audit(211.430:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 211.673517][ T26] audit: type=1326 audit(211.430:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 211.684041][ T26] audit: type=1326 audit(211.430:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e1b7ba8 code=0x7ffc0000 [ 212.455765][ C0] Unknown status report in ack skb [ 212.822008][ T5811] binder: 5809:5811 ioctl c0306201 0 returned -14 [ 212.850491][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.635067][ T5811] binder: 5809:5811 ioctl 4018620d 0 returned -22 [ 213.640194][ T5811] binder: 5809:5811 ioctl c0306201 0 returned -14 [ 213.643586][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.723361][ T5595] device veth0_vlan entered promiscuous mode [ 213.764206][ T5595] device veth1_vlan entered promiscuous mode [ 213.801618][ T5820] loop0: detected capacity change from 0 to 1024 [ 213.832068][ T5595] device veth0_macvtap entered promiscuous mode [ 213.849988][ T5595] device veth1_macvtap entered promiscuous mode [ 213.877911][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.880735][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.883356][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.907640][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.910508][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.913264][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.930735][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.933610][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.950960][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.961070][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.971207][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.979135][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.992168][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.003856][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.006818][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.022336][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.029860][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.042799][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.050685][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.063745][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.066632][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.069309][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.094165][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.096931][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.109328][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.113287][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.119393][ T5820] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 214.121981][ T5820] EXT4-fs (loop0): Ignoring removed bh option [ 214.123608][ T5595] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.123614][ T5820] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 214.128744][ T5595] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.131172][ T5595] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.133529][ T5595] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.189026][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.195290][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.218378][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.228421][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.242058][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.260007][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.003541][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.037216][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.044523][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.062994][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.263320][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.276670][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.290946][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.758169][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.800420][ T5844] loop3: detected capacity change from 0 to 128 [ 217.031911][ T5841] lo speed is unknown, defaulting to 1000 [ 217.036691][ T5841] lo speed is unknown, defaulting to 1000 [ 217.040039][ T5841] lo speed is unknown, defaulting to 1000 [ 217.045595][ T5841] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.062683][ T5841] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 217.115478][ T5844] attempt to access beyond end of device [ 217.115478][ T5844] loop3: rw=2049, want=1041, limit=128 [ 217.126353][ T5841] lo speed is unknown, defaulting to 1000 [ 217.129021][ T5841] lo speed is unknown, defaulting to 1000 [ 217.131113][ T5841] lo speed is unknown, defaulting to 1000 [ 217.133239][ T5841] lo speed is unknown, defaulting to 1000 [ 217.166567][ T5841] lo speed is unknown, defaulting to 1000 [ 217.168829][ T5841] lo speed is unknown, defaulting to 1000 [ 217.184495][ T5841] lo speed is unknown, defaulting to 1000 [ 217.260326][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.262643][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.264960][ T5846] loop1: detected capacity change from 0 to 1024 [ 217.274771][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.327252][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.329730][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.333374][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.346483][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 217.346492][ T26] audit: type=1326 audit(217.320:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 217.355342][ T26] audit: type=1326 audit(217.330:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 219.981936][ T26] audit: type=1326 audit(217.330:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 219.990440][ T26] audit: type=1326 audit(217.330:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.285368][ T26] audit: type=1326 audit(217.330:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.291375][ T26] audit: type=1326 audit(217.330:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.353803][ T26] audit: type=1326 audit(217.330:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.433746][ T26] audit: type=1326 audit(217.330:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.439544][ T26] audit: type=1326 audit(217.330:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.493469][ T26] audit: type=1326 audit(217.330:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.561284][ T26] audit: type=1326 audit(217.330:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.620310][ T26] audit: type=1326 audit(217.380:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.647033][ T26] audit: type=1326 audit(217.380:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 223.652902][ T26] audit: type=1326 audit(217.380:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80940ba8 code=0x7ffc0000 [ 224.884319][ T5891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.311184][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.246320][ T5901] lo speed is unknown, defaulting to 1000 [ 226.583127][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 226.691219][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.695635][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.709885][ T5901] device bridge_slave_0 entered promiscuous mode [ 226.847745][ T5912] block nbd6: shutting down sockets [ 227.004059][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.006007][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.008755][ T5901] device bridge_slave_1 entered promiscuous mode [ 227.082761][ T5438] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.144086][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.153593][ T5936] device syzkaller1 entered promiscuous mode [ 227.177960][ T5438] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.197263][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.272950][ T5901] team0: Port device team_slave_0 added [ 227.281745][ T5438] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.301765][ T5901] team0: Port device team_slave_1 added [ 227.304785][ T4084] Bluetooth: hci1: command 0x0409 tx timeout [ 227.379711][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.381725][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.463990][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.501211][ T5438] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.527053][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.528965][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.555960][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.385944][ T5901] device hsr_slave_0 entered promiscuous mode [ 228.424088][ T5901] device hsr_slave_1 entered promiscuous mode [ 228.453805][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.455893][ T5901] Cannot create hsr debugfs directory [ 228.799521][ T5901] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 228.841945][ T5901] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 229.765464][ T4753] Bluetooth: hci1: command 0x041b tx timeout [ 229.802696][ T5901] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 230.109366][ T5901] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 230.112189][ T5977] binder: 5975:5977 tried to acquire reference to desc 0, got 1 instead [ 230.192313][ T5981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.251075][ T4107] binder: send failed reply for transaction 142 to 5975:5977 [ 230.267900][ T4107] binder: undelivered TRANSACTION_COMPLETE [ 230.270716][ T4107] binder: undelivered TRANSACTION_ERROR: 29189 [ 231.839355][ T4100] Bluetooth: hci1: command 0x040f tx timeout [ 232.115151][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.188955][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.191717][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.292766][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.309583][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.472543][ C1] ------------[ cut here ]------------ [ 232.474143][ C1] WARNING: CPU: 1 PID: 5999 at net/mac80211/tx.c:4851 __ieee80211_beacon_get+0x12ec/0x19dc [ 232.476884][ C1] Modules linked in: [ 232.477998][ C1] CPU: 1 PID: 5999 Comm: syz.0.505 Not tainted 5.15.188-syzkaller #0 [ 232.480228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.482954][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 232.485108][ C1] pc : __ieee80211_beacon_get+0x12ec/0x19dc [ 232.486812][ C1] lr : __ieee80211_beacon_get+0x12ec/0x19dc [ 232.488470][ C1] sp : ffff80001f347420 [ 232.489678][ C1] x29: ffff80001f347630 x28: dfff800000000000 x27: ffff80001f3474a0 [ 232.492103][ C1] x26: ffff0000c0cb8dc0 x25: ffff700003e68e94 x24: ffff0000ea6ecc80 [ 232.494281][ C1] x23: ffff80001f347590 x22: ffff80001f347690 x21: 0000000000000000 [ 232.496534][ C1] x20: ffff000102874c00 x19: ffff0000ea6ee298 x18: 0000000000000101 [ 232.498723][ C1] x17: 0000000000000000 x16: ffff8000082bf708 x15: 0000000000000007 [ 232.500949][ C1] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 232.503146][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : ffff800010b94c64 [ 232.505345][ C1] x8 : ffff0000d3520000 x7 : ffff800010b9dbe0 x6 : 0000000000000000 [ 232.507538][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 232.509756][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 232.511976][ C1] Call trace: [ 232.512947][ C1] __ieee80211_beacon_get+0x12ec/0x19dc [ 232.514450][ C1] ieee80211_beacon_get_tim+0x5c/0x790 [ 232.516003][ C1] mac80211_hwsim_beacon_tx+0x10c/0x7ac [ 232.517618][ C1] __iterate_interfaces+0x204/0x484 [ 232.519027][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 232.520867][ C1] mac80211_hwsim_beacon+0x90/0x174 [ 232.522311][ C1] __hrtimer_run_queues+0x428/0xb6c [ 232.523784][ C1] hrtimer_run_softirq+0x160/0x400 [ 232.525201][ C1] handle_softirqs+0x344/0xbf0 [ 232.526485][ C1] do_softirq+0xfc/0x1b0 [ 232.527639][ C1] __local_bh_enable_ip+0x250/0x380 [ 232.529106][ C1] local_bh_enable+0x28/0x34 [ 232.530392][ C1] fpsimd_restore_current_state+0xec/0x228 [ 232.531973][ C1] do_notify_resume+0x2220/0x3128 [ 232.533343][ C1] el0_svc+0xf0/0x1e0 [ 232.534442][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 232.535824][ C1] el0t_64_sync+0x1a0/0x1a4 [ 232.537054][ C1] irq event stamp: 5661 [ 232.538192][ C1] hardirqs last enabled at (5660): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 232.540966][ C1] hardirqs last disabled at (5661): [] el1_dbg+0x24/0x80 [ 232.543345][ C1] softirqs last enabled at (5638): [] local_bh_enable+0x10/0x34 [ 232.545901][ C1] softirqs last disabled at (5639): [] do_softirq+0xfc/0x1b0 [ 232.548417][ C1] ---[ end trace 35ee105738aca9c1 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.004797][ T5438] device hsr_slave_0 left promiscuous mode [ 234.044321][ T5438] device hsr_slave_1 left promiscuous mode [ 234.114067][ T5438] batman_adv: batadv0: Interface deactivated: dummy0 [ 234.116104][ T5438] batman_adv: batadv0: Removing interface: dummy0 [ 234.119142][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.121181][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.124030][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.126131][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.128614][ T5438] device bridge_slave_1 left promiscuous mode [ 234.131455][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.198853][ T5438] device bridge_slave_0 left promiscuous mode [ 234.200802][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.374190][ T5438] device veth1_macvtap left promiscuous mode [ 234.376157][ T5438] device veth0_macvtap left promiscuous mode [ 234.377840][ T5438] device veth1_vlan left promiscuous mode [ 234.379522][ T5438] device veth0_vlan left promiscuous mode [ 234.588047][ T5438] team0 (unregistering): Port device team_slave_1 removed [ 234.597106][ T5438] team0 (unregistering): Port device team_slave_0 removed [ 234.606155][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.636870][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.831167][ T5438] bond0 (unregistering): Released all slaves [ 237.675552][ T5438] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.709805][ T5438] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.765018][ T5438] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.800396][ T5438] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.909344][ T5438] device hsr_slave_0 left promiscuous mode [ 239.956088][ T5438] device hsr_slave_1 left promiscuous mode [ 240.044754][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.047265][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.051732][ T5438] device bridge_slave_1 left promiscuous mode [ 240.053496][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.105502][ T5438] device bridge_slave_0 left promiscuous mode [ 240.107310][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.157997][ T5438] device hsr_slave_0 left promiscuous mode [ 240.193955][ T5438] device hsr_slave_1 left promiscuous mode [ 240.273918][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.276062][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.280213][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.282309][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.284933][ T5438] device bridge_slave_1 left promiscuous mode [ 240.286711][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.334812][ T5438] device bridge_slave_0 left promiscuous mode [ 240.336602][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.475594][ T5438] device veth1_macvtap left promiscuous mode [ 240.477345][ T5438] device veth0_macvtap left promiscuous mode [ 240.478988][ T5438] device veth1_vlan left promiscuous mode [ 240.480540][ T5438] device veth0_vlan left promiscuous mode [ 240.709323][ T5438] team0 (unregistering): Port device team_slave_1 removed [ 240.719103][ T5438] team0 (unregistering): Port device team_slave_0 removed [ 240.726875][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.801421][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.952186][ T5438] bond0 (unregistering): Released all slaves [ 241.128715][ T5438] team0 (unregistering): Port device team_slave_1 removed [ 241.140228][ T5438] team0 (unregistering): Port device team_slave_0 removed [ 241.150645][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.182056][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.339879][ T5438] bond0 (unregistering): Released all slaves