last executing test programs: 1m29.174374201s ago: executing program 1 (id=115): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)="93bffce623851797a8dc7901f0048678cd35ef837c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e364c8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000000000000000000000000000000000e072049ea280ade357f667efa3f2602752f463d7687717beb1a2de8b084f9afabef15b0597996ced9da8afad5169efd16cdaaa362605c9904de56388bc3a570d", 0xc7}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xd, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1m29.174254371s ago: executing program 1 (id=116): bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc3, 0x5f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "9e45bed8bbec134cc320d2a5f1c7a2ce"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x63}, @NL80211_ATTR_PMK={0x14, 0xfe, "ef43f69aeabceaf28bfaf240cfd10829"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x61}, @NL80211_ATTR_PMK={0x14, 0xfe, "944123c59568436125030deab20fc349"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008804}, 0x20000840) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1m27.360321516s ago: executing program 1 (id=129): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20050, &(0x7f00000006c0)={0x2, 0x4e23, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x4, "5f881e1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x19, "8f91cb000b4c3f59559094b6cb78ec31958318de255d428835"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x84, 0x1, "d4"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "13c95b"}}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 1m26.785883666s ago: executing program 1 (id=132): unshare(0x62040200) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m26.674584128s ago: executing program 1 (id=133): preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}], 0x1, 0x9, 0xd, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x73a, 0x1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m26.350603365s ago: executing program 1 (id=139): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0x7ffffffe, 0x0, 0xc0000000, 0x7, 0x32, 0x5, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x12, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}}) 1m26.309722416s ago: executing program 32 (id=139): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0x7ffffffe, 0x0, 0xc0000000, 0x7, 0x32, 0x5, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x12, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}}) 1m2.102216327s ago: executing program 0 (id=297): socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)) 1m2.007078579s ago: executing program 0 (id=310): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1042, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 1m1.894370661s ago: executing program 0 (id=305): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='b *:'], 0xa) 1m1.851287772s ago: executing program 0 (id=308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1m1.733458664s ago: executing program 0 (id=315): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e030000000000000000000000003e000105000000120000000000000000000003000000000100000002100000010000800061"], 0x0, 0x53}, 0x28) 1m1.666522995s ago: executing program 0 (id=316): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r1, 0x4, r1}, 0x10) 45.833939107s ago: executing program 33 (id=316): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r1, 0x4, r1}, 0x10) 4.803440179s ago: executing program 2 (id=537): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) fstat(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r6, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000003c0)={{0x7, 0xb78a, 0x7, 0x400}, 'syz0\x00', 0x55}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x1, 0x70bd29, 0x9, {0x0, 0x0, 0x0, r10, 0x0, 0x1898}}, 0x20}, 0x1, 0x0, 0x0, 0x6040041}, 0x4000) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f00000005c0)=""/86, 0x56}], 0x202a, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18}}, @cred={{0x18}}], 0x5c}}, {{&(0x7f00000006c0), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000b80)=""/4096}, {&(0x7f0000000740)=""/89}, {&(0x7f00000007c0)=""/79}, {&(0x7f0000000880)=""/213}], 0x5, &(0x7f0000000a80)=[@rights={{0x14}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x3, 0x0, 0x0) 4.330491478s ago: executing program 6 (id=540): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) 4.242415679s ago: executing program 6 (id=541): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x6) 3.613210512s ago: executing program 2 (id=543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.534293393s ago: executing program 2 (id=544): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000001d01000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) 3.534137373s ago: executing program 3 (id=545): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.445226485s ago: executing program 3 (id=548): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x4, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32, @ANYBLOB], 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000000000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000001000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000a0010000100"/120], 0xc4}}, 0x4c050) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) 3.309846228s ago: executing program 5 (id=552): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20002000}) 3.245201879s ago: executing program 5 (id=553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="d9", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x100000}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 3.15452513s ago: executing program 6 (id=554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x9, 0x7fff0001}]}) io_setup(0x4, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, &(0x7f0000000600)}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 3.154285751s ago: executing program 5 (id=555): socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0xa4d, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x2, 0x24f}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x8003, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb5, 0x49e3, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000851}, 0x40008044) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x700}], 0x40000cf, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.123144731s ago: executing program 4 (id=557): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket(0x15, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, 0x0, 0x20008004) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000b00ff0f000010000200000000000000", @ANYBLOB, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000024a43dabb76f99655692a63fd967776"], 0x48) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2.433314624s ago: executing program 3 (id=558): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 2.364201695s ago: executing program 2 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 2.278606707s ago: executing program 5 (id=560): keyctl$get_keyring_id(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0xffffffff}) 2.278439577s ago: executing program 6 (id=561): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000001140)="0a86af", 0x3) 2.241771688s ago: executing program 4 (id=562): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0xfff, r0, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) 2.181218989s ago: executing program 2 (id=563): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x2, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3f7, 0x8000000000000000, 0x80000000, 0x9, 0x1000000000003, 0xf, 0x6}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x2007, &(0x7f0000000880)={0x0, 0x94eb, 0x8000, 0x2, 0x257}, 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, 0x0, 0x1) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r6, 0x20}, {r6, 0x13}], 0x2, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r7, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) 2.10651733s ago: executing program 5 (id=564): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0xc6c5, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) sendmmsg$unix(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)="50644044433b121e8b888d7604078835ede112eced241fd2b89d570e49fd6b842efffa4bf1b3c2beeb8121e7516c75579bda80a923e4d70902ea56fa7dcba07f23d9148f6145deb5862a7632bb6c1f7dcae898d7d4cf92a0f8a2f5a40f625545e6522e5fd6dba7543f400ff40bbaa5d5ae0855d660725999653e97f3d063ee2c4d4ada5c1f7a253e78e69744e4af47af1482e818b5df2d8fdbb95188bbb1e6fc2b4cd2dbc3c7957fd3786c3b4a", 0xad}], 0x1, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="4c4c145582", 0x5}], 0x1, 0x0, 0x0, 0x7ea0d378e1b5a421}}], 0x2, 0x20008000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 2.10642525s ago: executing program 6 (id=565): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x1, 0x40a, 0x0, 0x1003, 0x8004, 0x0, 0xffffffed, 0xb, 0x0, 0x0, 0x800001, 0x3}) 2.098271681s ago: executing program 4 (id=566): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$VT_RESIZEX(r0, 0x8008b70d, 0x0) 2.038503622s ago: executing program 4 (id=567): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x2, 0x0, 0x1000001000, 0x100000000006}, 0x0, &(0x7f00000002c0)={0x3f7, 0x8000000000000000, 0x80000000, 0x9, 0x1000000000006, 0xf, 0x6}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x2005, &(0x7f00000005c0)={0x0, 0x94f4, 0x2, 0x0, 0x99}, 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, 0x0, 0x1) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r5, 0x20}, {r5, 0x13}], 0x2, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r6, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000300)=@caif=@util, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1, &(0x7f0000000500)=""/129, 0x81}, 0x100) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) 966.493562ms ago: executing program 6 (id=568): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0xeff}, 0x10}, 0x1, 0x7}, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r5, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r5, 0x0, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8}]}, 0x8) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 875.445694ms ago: executing program 5 (id=569): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) ftruncate(r6, 0x6) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 348.685614ms ago: executing program 3 (id=570): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r0}) sendmmsg$unix(r1, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 222.505896ms ago: executing program 4 (id=571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffffffffffc, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x0, 0xce59}, 0x3fc, 0x80000000, 0x0, 0x1}}, 0xb4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 222.361066ms ago: executing program 3 (id=572): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e"], 0x7) 173.985498ms ago: executing program 2 (id=573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) 50.91281ms ago: executing program 4 (id=574): keyctl$get_keyring_id(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0xffffffff}) 0s ago: executing program 3 (id=575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) ftruncate(0xffffffffffffffff, 0xffff) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x4, 0x100000000100, 0x4}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 23.269624][ T4303] cgroup: Unknown subsys name 'net' [ 23.540303][ T4303] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.808466][ T4303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 24.583928][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 24.585591][ T4326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 24.590282][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 24.591982][ T4333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 24.593519][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 24.594652][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 24.595114][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 24.596084][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 24.597094][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 24.598311][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 24.599559][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 24.600558][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 24.601777][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 24.603039][ T4333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 24.603725][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 24.604364][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 24.605980][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 24.607105][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 24.608435][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 24.610225][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 24.611183][ T4333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 24.611913][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 24.613442][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 24.614166][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 24.620787][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 24.622420][ T4322] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 24.623549][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 24.629151][ T4326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 24.638733][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 24.640142][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 24.744337][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 24.775405][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 24.801736][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.802977][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.804475][ T4329] device bridge_slave_0 entered promiscuous mode [ 24.807374][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 24.815342][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 24.817369][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.818887][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.820427][ T4325] device bridge_slave_0 entered promiscuous mode [ 24.821932][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.822989][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.824512][ T4329] device bridge_slave_1 entered promiscuous mode [ 24.832169][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.833372][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.834885][ T4325] device bridge_slave_1 entered promiscuous mode [ 24.859768][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.865725][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.880037][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.889957][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.896641][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.898994][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.900486][ T4330] device bridge_slave_0 entered promiscuous mode [ 24.901998][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.903136][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.904594][ T4319] device bridge_slave_0 entered promiscuous mode [ 24.907176][ T4329] team0: Port device team_slave_0 added [ 24.909110][ T4329] team0: Port device team_slave_1 added [ 24.915124][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.916169][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.917806][ T4330] device bridge_slave_1 entered promiscuous mode [ 24.922334][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.923405][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.924880][ T4319] device bridge_slave_1 entered promiscuous mode [ 24.932747][ T4325] team0: Port device team_slave_0 added [ 24.940075][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 24.942253][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.943341][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.947370][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.950386][ T4325] team0: Port device team_slave_1 added [ 24.952342][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.964055][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.965200][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.969642][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.974574][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.979200][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.991241][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.995283][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.996411][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.998037][ T4323] device bridge_slave_0 entered promiscuous mode [ 25.000127][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.001175][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.004882][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.006685][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.008177][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.009649][ T4323] device bridge_slave_1 entered promiscuous mode [ 25.021294][ T4319] team0: Port device team_slave_0 added [ 25.023014][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.024032][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.028055][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.033551][ T4330] team0: Port device team_slave_0 added [ 25.037365][ T4319] team0: Port device team_slave_1 added [ 25.045865][ T4330] team0: Port device team_slave_1 added [ 25.053141][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.108757][ T4329] device hsr_slave_0 entered promiscuous mode [ 25.157920][ T4329] device hsr_slave_1 entered promiscuous mode [ 25.211111][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.212218][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.216045][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.219112][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.223820][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.224918][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.229066][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.233608][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.234621][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.238457][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.242981][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.244145][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.248400][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.288639][ T4325] device hsr_slave_0 entered promiscuous mode [ 25.337823][ T4325] device hsr_slave_1 entered promiscuous mode [ 25.377671][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.379026][ T4325] Cannot create hsr debugfs directory [ 25.392408][ T4323] team0: Port device team_slave_0 added [ 25.401572][ T4323] team0: Port device team_slave_1 added [ 25.458546][ T4330] device hsr_slave_0 entered promiscuous mode [ 25.507958][ T4330] device hsr_slave_1 entered promiscuous mode [ 25.557670][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.558917][ T4330] Cannot create hsr debugfs directory [ 25.608587][ T4319] device hsr_slave_0 entered promiscuous mode [ 25.667839][ T4319] device hsr_slave_1 entered promiscuous mode [ 25.707653][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.708980][ T4319] Cannot create hsr debugfs directory [ 25.710248][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.711213][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.715067][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.721695][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.722724][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.726431][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.848683][ T4323] device hsr_slave_0 entered promiscuous mode [ 25.887947][ T4323] device hsr_slave_1 entered promiscuous mode [ 25.927620][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.928786][ T4323] Cannot create hsr debugfs directory [ 25.994490][ T4325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.020240][ T4325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.049566][ T4325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.089163][ T4325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.141926][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.180575][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.221839][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.261546][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.309651][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.364317][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.399214][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.442796][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.493851][ T4323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.541256][ T4323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.579535][ T4323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.625526][ T4323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.638129][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 26.638140][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 26.639078][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 26.640000][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 26.695729][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.704084][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.717820][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 26.744187][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.792444][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.838819][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.902548][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.904375][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.911638][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.921818][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.923048][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.924895][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.926289][ T1610] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.927507][ T1610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.929599][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.931074][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.932710][ T1610] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.933799][ T1610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.935244][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.937515][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.942523][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.946334][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.947696][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.950019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.967395][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.970913][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.972423][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 26.975959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.977429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.980808][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.986918][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.990361][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.992894][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.994546][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.996045][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.997483][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.999211][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.000239][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.001912][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.009905][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.011520][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.013218][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.014723][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.016088][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.017084][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.020066][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.021540][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.027313][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.031900][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.033631][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.035006][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.036439][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.038729][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.040500][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.041654][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.043168][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.053186][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.054835][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.056524][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.058577][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.060043][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.061173][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.062520][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.071245][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.072883][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.074340][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.075464][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.076747][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.079563][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.081101][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.082623][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.084105][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.085220][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.086479][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.090904][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.097321][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.103482][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.105132][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.106562][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.110906][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.112929][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.114484][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.116040][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.122176][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.131108][ T4323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.133099][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.135853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.137210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.140122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.142328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.143830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.145257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.146702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.150962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.152230][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.153263][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.154504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.156090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.157499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.160197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.161582][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.162643][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.163886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.165216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.166656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.169302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.170834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.172523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.173958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.176743][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.181197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.183130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.194385][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.196064][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.203325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.204878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.206866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.214710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.216256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.218180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.222506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.224074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.225667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.227114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.236992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.239279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.248506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.254088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.255853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.257341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.264661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.266189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.271639][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.272948][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.275989][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.291063][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.299900][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.301241][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.312670][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.314222][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.326116][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.333848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.335716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.337317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.339188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.355407][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.364002][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.365743][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.367146][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.368872][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.370120][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.384100][ T4329] device veth0_vlan entered promiscuous mode [ 27.395762][ T4329] device veth1_vlan entered promiscuous mode [ 27.400064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.401441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.403032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.409854][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.411323][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.412965][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.429449][ T4325] device veth0_vlan entered promiscuous mode [ 27.434221][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.439100][ T4325] device veth1_vlan entered promiscuous mode [ 27.441730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.443323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.444843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.446127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.447324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.449796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.451315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.461286][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.462924][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.464403][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.465755][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.471541][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.473086][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.474571][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.476811][ T4330] device veth0_vlan entered promiscuous mode [ 27.486570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.488136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.490902][ T4329] device veth0_macvtap entered promiscuous mode [ 27.497124][ T4330] device veth1_vlan entered promiscuous mode [ 27.499949][ T4329] device veth1_macvtap entered promiscuous mode [ 27.511363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.512842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.514147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.515586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.517071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.519775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.522173][ T4325] device veth0_macvtap entered promiscuous mode [ 27.524548][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.525989][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.529060][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.533534][ T4325] device veth1_macvtap entered promiscuous mode [ 27.541213][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.542582][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.544024][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.545653][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.547417][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.553606][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.556196][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.558057][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.561781][ T4319] device veth0_vlan entered promiscuous mode [ 27.565055][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.568982][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.570599][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.572251][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.573762][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.575299][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.576593][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.581424][ T4323] device veth0_vlan entered promiscuous mode [ 27.584795][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.586457][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.589626][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.592531][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.593995][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.595304][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.596651][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.600616][ T4323] device veth1_vlan entered promiscuous mode [ 27.602402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.603902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.605435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.609920][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.611344][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.613344][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.616771][ T4319] device veth1_vlan entered promiscuous mode [ 27.619528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.620903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.622252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.623857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.625404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.626842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.639409][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.640714][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.642010][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.643438][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.647287][ T4330] device veth0_macvtap entered promiscuous mode [ 27.653884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.655391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.656821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.659270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.661700][ T4319] device veth0_macvtap entered promiscuous mode [ 27.665574][ T4330] device veth1_macvtap entered promiscuous mode [ 27.672453][ T4319] device veth1_macvtap entered promiscuous mode [ 27.693016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.694582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.695993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.697335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.700089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.702266][ T4323] device veth0_macvtap entered promiscuous mode [ 27.717125][ T4323] device veth1_macvtap entered promiscuous mode [ 27.724670][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.726398][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.728648][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.730333][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.732472][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.736037][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.738936][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.740405][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.741931][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.744600][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.746254][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.748160][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.749782][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.751380][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.752843][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.754436][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.756549][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.760046][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.760710][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.761212][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.762876][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.765465][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.767080][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.768966][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.770611][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.772695][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.773830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.775357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.776772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.778632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.780140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.781548][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.783149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.784712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.786235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.787979][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.789475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.802505][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.803810][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.805179][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.806289][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.812981][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.814216][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.816953][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.820446][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.821962][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.823369][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.824895][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.826653][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.829241][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.830817][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.833010][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.835088][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.836380][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.838883][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.840087][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.842379][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.843917][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.845407][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.854496][ T1610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.855876][ T1610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.857554][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.865467][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.867077][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.868760][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.870411][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.871954][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.873412][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.874878][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.876412][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.879285][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.891026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.892463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.909157][ T4323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.910575][ T4323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.911978][ T4323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.913332][ T4323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.915808][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.917089][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.921413][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.982447][ T380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.983743][ T380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.986314][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.995739][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.996986][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.002104][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.044300][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.045567][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.050070][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.070093][ T4440] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 28.071626][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.072999][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.075626][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.077011][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.096420][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.099064][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.104748][ T380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.104954][ T4438] loop3: detected capacity change from 0 to 128 [ 28.105894][ T380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.117364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.212888][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 28.219369][ T4447] loop1: detected capacity change from 0 to 512 [ 28.303059][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.307378][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.426749][ T4462] FAULT_INJECTION: forcing a failure. [ 28.426749][ T4462] name failslab, interval 1, probability 0, space 0, times 1 [ 28.428741][ T4462] CPU: 0 PID: 4462 Comm: syz.3.10 Not tainted syzkaller #0 [ 28.429954][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 28.431581][ T4462] Call trace: [ 28.432168][ T4462] dump_backtrace+0x1c8/0x1f4 [ 28.432961][ T4462] show_stack+0x2c/0x3c [ 28.433650][ T4462] __dump_stack+0x30/0x40 [ 28.434322][ T4462] dump_stack_lvl+0xf8/0x160 [ 28.435067][ T4462] dump_stack+0x1c/0x5c [ 28.435724][ T4462] should_fail_ex+0x3c4/0x520 [ 28.436446][ T4462] __should_failslab+0xc0/0x120 [ 28.437191][ T4462] should_failslab+0x10/0x28 [ 28.437980][ T4462] kmem_cache_alloc_node+0x8c/0x34c [ 28.438887][ T4462] __alloc_skb+0x128/0x718 [ 28.439593][ T4462] netlink_dump+0x190/0xafc [ 28.440238][ T4462] netlink_recvmsg+0x4e0/0xa90 [ 28.440998][ T4462] ____sys_recvmsg+0x254/0x71c [ 28.441753][ T4462] do_recvmmsg+0x364/0x96c [ 28.442428][ T4462] __arm64_sys_recvmmsg+0x17c/0x238 [ 28.443193][ T4462] invoke_syscall+0x98/0x2bc [ 28.443897][ T4462] el0_svc_common+0x138/0x258 [ 28.444680][ T4462] do_el0_svc+0x58/0x13c [ 28.445410][ T4462] el0_svc+0x58/0x138 [ 28.446078][ T4462] el0t_64_sync_handler+0x84/0xf0 [ 28.446938][ T4462] el0t_64_sync+0x18c/0x190 [ 28.608554][ T4312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.691447][ T4444] loop0: detected capacity change from 0 to 32768 [ 28.695561][ T4444] ======================================================= [ 28.695561][ T4444] WARNING: The mand mount option has been deprecated and [ 28.695561][ T4444] and is ignored by this kernel. Remove the mand [ 28.695561][ T4444] option from the mount to silence this warning. [ 28.695561][ T4444] ======================================================= [ 28.717111][ T4447] loop1: detected capacity change from 0 to 40427 [ 28.718360][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 28.718382][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 28.718400][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 28.718416][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 28.724317][ T4447] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 28.725428][ T4447] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 28.732660][ T4447] F2FS-fs (loop1): invalid crc value [ 28.755714][ T4444] XFS (loop0): Mounting V5 Filesystem [ 28.760800][ T4447] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 28.773313][ T4447] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 28.774493][ T4447] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.781583][ T4467] f2fs_ckpt-7:1: attempt to access beyond end of device [ 28.781583][ T4467] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 28.828033][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 28.848277][ T4444] XFS (loop0): Ending clean mount [ 28.853902][ T4444] XFS (loop0): Quotacheck needed: Please wait. [ 28.871720][ T4444] XFS (loop0): Quotacheck: Done. [ 28.998168][ T4319] XFS (loop0): Unmounting Filesystem [ 29.037259][ T4479] binder: 4478:4479 ERROR: BC_REGISTER_LOOPER called without request [ 29.042558][ T4479] binder: 4479 RLIMIT_NICE not set [ 29.045215][ T4479] binder: 4478:4479 got transaction to context manager from process owning it [ 29.047068][ T4479] binder: 4478:4479 transaction call to 4478:0 failed 2/29201/-22, size 0-0 line 3043 [ 29.061500][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 29.159427][ T4483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.160994][ T4483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.259158][ T4489] tipc: Started in network mode [ 29.260028][ T4489] tipc: Node identity 16619d27aeff, cluster identity 4711 [ 29.261219][ T4489] tipc: Enabled bearer , priority 0 [ 29.267196][ T4489] device syzkaller0 entered promiscuous mode [ 29.275902][ T4489] tipc: Resetting bearer [ 29.360757][ T4489] tipc: Disabling bearer [ 29.372840][ T4496] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 29.679922][ T4432] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.799968][ T4521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.801898][ T4521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.877647][ T4432] usb 1-1: Using ep0 maxpacket: 32 [ 29.880406][ T4432] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 29.881753][ T4432] usb 1-1: config 0 has no interface number 0 [ 29.884900][ T4432] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.886418][ T4432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.887999][ T4432] usb 1-1: Product: syz [ 29.888604][ T4432] usb 1-1: Manufacturer: syz [ 29.889297][ T4432] usb 1-1: SerialNumber: syz [ 29.892528][ T4432] usb 1-1: config 0 descriptor?? [ 29.895893][ T4432] smsc95xx v2.0.0 [ 29.992277][ T4529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.993710][ T4529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.699063][ T4432] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 30.797915][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 30.798212][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 30.798988][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 30.799899][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 30.819964][ T4545] process 'syz.3.43' launched '/dev/fd/3' with NULL argv: empty string added [ 30.877818][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 30.900409][ T4432] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 30.902461][ T4432] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 30.906372][ T4432] usb 1-1: USB disconnect, device number 2 [ 32.455949][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.457372][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.718097][ T4375] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.878906][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 32.879562][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 32.879926][ T4337] Bluetooth: hci1: command 0x0419 tx timeout [ 32.907696][ T4375] usb 1-1: Using ep0 maxpacket: 32 [ 32.909881][ T4375] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 32.911153][ T4375] usb 1-1: config 0 has no interface number 0 [ 32.912080][ T4375] usb 1-1: config 0 interface 184 has no altsetting 0 [ 32.914861][ T4375] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 32.916333][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.917553][ T4375] usb 1-1: Product: syz [ 32.918270][ T4375] usb 1-1: Manufacturer: syz [ 32.918908][ T4375] usb 1-1: SerialNumber: syz [ 32.920647][ T4375] usb 1-1: config 0 descriptor?? [ 32.923008][ T4375] smsc75xx v1.0.0 [ 32.958520][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 32.960918][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 32.983556][ T4603] binder: 4602:4603 ioctl 0 0 returned -22 [ 33.537808][ T4595] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 33.538905][ T4595] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 33.542803][ T4595] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 33.543952][ T4595] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 33.544902][ T4595] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 33.546234][ T4595] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 33.547436][ T4595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 33.548472][ T4595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 33.549747][ T4595] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 33.550886][ T4595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 33.551965][ T4595] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 33.553675][ T4595] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 33.554890][ T4595] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 33.555855][ T4595] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 33.558134][ T4595] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 33.559892][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.561395][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.098747][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.100266][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.117053][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.119981][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.331420][ T4375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 34.333291][ T4375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 34.335071][ T4375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.336892][ T4375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 34.340550][ T4375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 34.342295][ T4375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 34.343951][ T4375] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 34.346749][ T4375] usb 1-1: USB disconnect, device number 3 [ 34.735776][ T4640] binder: 4637:4640 BC_INCREFS_DONE u0000000000000002 no match [ 34.737085][ T4640] binder: 4637:4640 got transaction to invalid handle, 3 [ 34.738875][ T4640] binder: 4640:4637 cannot find target node [ 34.739892][ T4640] binder: 4637:4640 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3054 [ 34.743581][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.781352][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.782823][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.797715][ T4337] Bluetooth: hci0: command 0x0c1a tx timeout [ 34.810153][ T4648] Zero length message leads to an empty skb [ 34.893527][ T4654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.896238][ T4654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.985537][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.987108][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.164215][ T4662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.165955][ T4662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.428551][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.430068][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.520393][ T1610] Bluetooth: hci5: Frame reassembly failed (-84) [ 35.597625][ T4328] Bluetooth: hci4: command 0x0c1a tx timeout [ 35.597646][ T4335] Bluetooth: hci3: command 0x0c1a tx timeout [ 35.598660][ T4328] Bluetooth: hci2: command 0x0c1a tx timeout [ 35.599535][ T4335] Bluetooth: hci1: command 0x0c1a tx timeout [ 35.841945][ T4675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.843975][ T4675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.975990][ T4683] binder: 4682:4683 tried to acquire reference to desc 0, got 1 instead [ 35.978014][ T4683] binder: 4682:4683 got transaction to context manager from process owning it [ 35.979609][ T4683] binder: 4682:4683 transaction call to 4682:0 failed 8/29201/-22, size 72-24 line 3043 [ 35.981423][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.100863][ T4694] netlink: 'syz.1.106': attribute type 3 has an invalid length. [ 36.104218][ T4694] netlink: 944 bytes leftover after parsing attributes in process `syz.1.106'. [ 36.130388][ T4698] binder: 4697:4698 got transaction to context manager from process owning it [ 36.131734][ T4698] binder: 4697:4698 transaction call to 4697:0 failed 10/29201/-22, size 72-24 line 3043 [ 36.133564][ T4698] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.152585][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 36.187377][ T4704] netlink: 104 bytes leftover after parsing attributes in process `syz.4.112'. [ 36.379903][ T4717] binder: 4716:4717 got transaction to context manager from process owning it [ 36.381433][ T4717] binder: 4716:4717 transaction async to 4716:0 failed 12/29201/-22, size 0-0 line 3043 [ 36.383514][ T4717] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.384907][ T4717] binder: 4717 RLIMIT_NICE not set [ 36.887626][ T4328] Bluetooth: hci0: command 0x0406 tx timeout [ 37.600824][ T4326] Bluetooth: hci5: command 0x1003 tx timeout [ 37.602467][ T4337] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 37.677606][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 37.678639][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 37.687643][ T4328] Bluetooth: hci3: command 0x0406 tx timeout [ 37.688707][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 38.142505][ T4726] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 38.143800][ T4726] netlink: 'syz.4.120': attribute type 2 has an invalid length. [ 38.157441][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.164200][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.339388][ T4740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.346877][ T4740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.393200][ T4744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.396030][ T4744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.410386][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 38.589776][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.591649][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 38.593778][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.595502][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.599748][ T7] usb 1-1: string descriptor 0 read error: -22 [ 38.600659][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.602129][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.614734][ T7] usb 1-1: 0:2 : does not exist [ 38.952798][ T4754] can0: slcan on ptm0. [ 39.033332][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.035695][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.060770][ T4753] can0 (unregistered): slcan off ptm0. [ 39.250901][ T4337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 39.255929][ T4337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 39.258634][ T4337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 39.260509][ T4337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 39.262480][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 39.263906][ T4337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 39.424169][ T4764] chnl_net:caif_netlink_parms(): no params data found [ 39.484207][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.486688][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.489001][ T4764] device bridge_slave_0 entered promiscuous mode [ 39.491673][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.492947][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.494691][ T4764] device bridge_slave_1 entered promiscuous mode [ 39.506392][ T4764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.509569][ T4764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.520499][ T4764] team0: Port device team_slave_0 added [ 39.524094][ T4764] team0: Port device team_slave_1 added [ 39.800212][ T380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.804069][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.805128][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.809345][ T4764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.811920][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.813063][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.817379][ T4764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.893085][ T380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.949510][ T4764] device hsr_slave_0 entered promiscuous mode [ 39.965696][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.967294][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.988323][ T4764] device hsr_slave_1 entered promiscuous mode [ 40.027675][ T4764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.029012][ T4764] Cannot create hsr debugfs directory [ 40.042720][ T7] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 40.051870][ T7] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 40.070816][ T4786] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 40.072279][ T7] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 40.073770][ T4786] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.079985][ T380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.084487][ T7] usb 1-1: USB disconnect, device number 4 [ 40.140028][ T380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.253050][ T4764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.309525][ T4764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.361417][ T4764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.408962][ T4764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.534954][ T4764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.549264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.550810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.573771][ T4764] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.594642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.596323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.604499][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.605587][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.614295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.707743][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.709427][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.710893][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.712025][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.713381][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.715103][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.716700][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.737769][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.742647][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.746691][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.751868][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.755470][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.766049][ T4764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.777923][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.841902][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.843555][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.845109][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.954194][ T4844] binder: 4841:4844 ioctl c00c620f 200000c0 returned -22 [ 41.034049][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.035373][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.041798][ T4764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.100378][ T4855] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 41.101632][ T4855] netlink: 'syz.0.161': attribute type 2 has an invalid length. [ 41.207198][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.210885][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.236888][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 41.277818][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 41.341475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.343190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.349234][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.350967][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.353039][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.354897][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.358164][ T4764] device veth0_vlan entered promiscuous mode [ 41.367182][ T4764] device veth1_vlan entered promiscuous mode [ 41.433037][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.434737][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.449182][ T4764] device veth0_macvtap entered promiscuous mode [ 41.452207][ T4764] device veth1_macvtap entered promiscuous mode [ 41.459469][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.461150][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.462814][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.464563][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.466016][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.468776][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.470465][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.472312][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.473948][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.475628][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.478885][ T4764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.541525][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.543201][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.544615][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.546286][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.551835][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.553489][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.555077][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.556669][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.561218][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.562706][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.564021][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.565522][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.567022][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.573407][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.579382][ T4764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.580719][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.582501][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.633798][ T4764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.635062][ T4764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.636398][ T4764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.638130][ T4764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.668466][ T4432] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.699983][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.701442][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.703939][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.720247][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.721978][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.723958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.758353][ T4911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.759853][ T4911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.847675][ T4432] usb 1-1: Using ep0 maxpacket: 8 [ 41.849905][ T4432] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 41.851300][ T4432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.855683][ T4432] usb 1-1: config 0 descriptor?? [ 42.265928][ T4432] lenovo 0003:17EF:60B5.0001: unknown main item tag 0x0 [ 42.267119][ T4432] lenovo 0003:17EF:60B5.0001: unknown main item tag 0x0 [ 42.278874][ T4432] lenovo 0003:17EF:60B5.0001: unknown main item tag 0x0 [ 42.279991][ T4432] lenovo 0003:17EF:60B5.0001: unknown main item tag 0x0 [ 42.281025][ T4432] lenovo 0003:17EF:60B5.0001: unknown main item tag 0x0 [ 42.285885][ T4432] lenovo 0003:17EF:60B5.0001: hidraw0: USB HID v0.05 Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 42.480683][ T4432] usb 1-1: USB disconnect, device number 5 [ 42.515294][ T380] device hsr_slave_0 left promiscuous mode [ 42.531025][ T4954] vhci_hcd: invalid port number 96 [ 42.532494][ T4954] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 42.555844][ T380] device hsr_slave_1 left promiscuous mode [ 42.571054][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.572649][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.581282][ T4957] binder: 4956:4957 got transaction to context manager from process owning it [ 42.582805][ T4957] binder: 4956:4957 transaction call to 4956:0 failed 18/29201/-22, size 104-24 line 3043 [ 42.593982][ T4356] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.607474][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.609723][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.617974][ T380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.619035][ T380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.621643][ T380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.622824][ T380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.624181][ T380] device bridge_slave_1 left promiscuous mode [ 42.625933][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.678898][ T380] device bridge_slave_0 left promiscuous mode [ 42.679999][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.807956][ T380] device veth1_macvtap left promiscuous mode [ 42.809089][ T380] device veth0_macvtap left promiscuous mode [ 42.810529][ T380] device veth1_vlan left promiscuous mode [ 42.811882][ T380] device veth0_vlan left promiscuous mode [ 43.146046][ T4965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.147516][ T4965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.277632][ T4326] Bluetooth: hci5: command 0x1003 tx timeout [ 43.277927][ T4337] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 43.281341][ T4876] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 43.357726][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 44.460167][ T380] team0 (unregistering): Port device team_slave_1 removed [ 44.629632][ T380] team0 (unregistering): Port device team_slave_0 removed [ 44.788058][ T380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.988087][ T380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.438435][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 47.441777][ T380] bond0 (unregistering): Released all slaves [ 47.517603][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 47.644901][ T4969] wireguard: wg0: Could not create IPv4 socket [ 47.719133][ T4983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.720489][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.187'. [ 47.721980][ T4983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.911338][ T5008] netlink: 'syz.0.197': attribute type 4 has an invalid length. [ 47.956685][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.961135][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.360516][ T5044] raw_sendmsg: syz.4.202 forgot to set AF_INET. Fix it! [ 48.534491][ T5060] fuse: Unknown parameter 'fd0x00000000000000030000000000000000000000000000000000000000' [ 48.635643][ T5068] usb usb8: usbfs: process 5068 (syz.4.207) did not claim interface 0 before use [ 48.693677][ T5071] binder: 5070:5071 got transaction to context manager from process owning it [ 48.710790][ T5071] binder: 5070:5071 transaction async to 5070:0 failed 20/29201/-22, size 96-24 line 3043 [ 48.744169][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.745847][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.773534][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.775453][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.900828][ T4393] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.902102][ T4393] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.903298][ T4393] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.903998][ T5092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.905817][ T5092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.907536][ T5090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.910340][ T4393] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 48.912069][ T5090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.915057][ T5090] binder: 5089:5090 ioctl 4018620d 0 returned -22 [ 48.940497][ T5095] fido_id[5095]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.359439][ T5109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.361243][ T5109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.505663][ T5123] overlayfs: unrecognized mount option "verity=on" or missing value [ 49.574699][ T5130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.576189][ T5130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.654949][ T380] Bluetooth: hci5: Frame reassembly failed (-84) [ 49.697399][ T4414] Bluetooth: hci6: Frame reassembly failed (-84) [ 49.704388][ T4398] Bluetooth: hci7: Frame reassembly failed (-84) [ 49.887330][ T5141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.890133][ T5141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.138302][ T5135] Bluetooth: hci0: Opcode 0x080f failed: -112 [ 50.940685][ T5151] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.942505][ T5151] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.943528][ T5151] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.946100][ T5151] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 50.947492][ T5151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.948601][ T5151] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.950010][ T5151] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 50.951217][ T5151] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.952126][ T5151] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.953304][ T5151] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 50.954495][ T5151] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 50.955369][ T5151] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 50.956654][ T5151] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 50.961775][ T5153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.963156][ T5153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.975343][ T5163] netlink: 76 bytes leftover after parsing attributes in process `syz.3.242'. [ 51.037526][ T5169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.041270][ T5169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.540954][ T5181] overlayfs: unrecognized mount option "verity=require" or missing value [ 51.677863][ T4328] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 51.729599][ T5195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.731051][ T5195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.757743][ T4335] Bluetooth: hci7: command 0x1003 tx timeout [ 51.757772][ T4337] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 51.759276][ T4335] Bluetooth: hci6: command 0x1003 tx timeout [ 51.760312][ T4326] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 52.439890][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 52.968417][ T4326] Bluetooth: hci4: command 0x0c1a tx timeout [ 52.969501][ T4326] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.970413][ T4326] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.971391][ T4326] Bluetooth: hci1: command 0x0c1a tx timeout [ 54.477661][ T5244] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 54.477694][ T4328] Bluetooth: hci5: command 0x1003 tx timeout [ 54.480462][ T4337] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 55.037621][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 55.037756][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 55.038613][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 55.039530][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 63.507528][ T5317] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 63.561566][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 64.480433][ T1514] cfg80211: failed to load regulatory.db [ 64.492095][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493391][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.597692][ T4328] Bluetooth: hci5: command 0x1003 tx timeout [ 65.597735][ T5322] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 65.599576][ T4326] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 74.995352][ T1610] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.037735][ T5405] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 77.040207][ T4326] Bluetooth: hci5: command 0x1003 tx timeout [ 77.040562][ T4337] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.695441][ T4328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.697427][ T4328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.699701][ T4328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.701232][ T4328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.702488][ T4328] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.703696][ T4328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.768030][ T4337] Bluetooth: hci5: command 0x0409 tx timeout [ 83.847675][ T4337] Bluetooth: hci5: command 0x041b tx timeout [ 85.917878][ T4337] Bluetooth: hci5: command 0x040f tx timeout [ 86.216969][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.218829][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.222475][ T5425] device bridge_slave_1 left promiscuous mode [ 86.223899][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.259945][ T5425] device bridge_slave_0 left promiscuous mode [ 86.261354][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.664884][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 86.948484][ T5501] block device autoloading is deprecated and will be removed. [ 87.997958][ T4337] Bluetooth: hci5: command 0x0419 tx timeout [ 97.742612][ T5490] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 97.743792][ T5490] netlink: 'syz.3.353': attribute type 3 has an invalid length. [ 97.744791][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 97.882841][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.884360][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.895733][ T5436] chnl_net:caif_netlink_parms(): no params data found [ 98.083888][ T5436] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.097348][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.123920][ T5436] device bridge_slave_0 entered promiscuous mode [ 98.141786][ T5436] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.151969][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.161911][ T5436] device bridge_slave_1 entered promiscuous mode [ 98.271954][ T5436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.286527][ T5436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.403240][ T5436] team0: Port device team_slave_0 added [ 98.418338][ T5436] team0: Port device team_slave_1 added [ 98.453480][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.455839][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.466549][ T5436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.476866][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.495067][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.511189][ T5436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.602538][ T5436] device hsr_slave_0 entered promiscuous mode [ 98.644842][ T5436] device hsr_slave_1 entered promiscuous mode [ 98.681028][ T5436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.682301][ T5436] Cannot create hsr debugfs directory [ 98.815294][ T5436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 98.867250][ T5436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 98.919597][ T5436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 98.961927][ T5436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.099453][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.106924][ T5436] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.146417][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.148934][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.150209][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.152922][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.156970][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.158114][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.174368][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.186368][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.191349][ T5609] syz.5.376 uses obsolete (PF_INET,SOCK_PACKET) [ 99.194868][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.196059][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.208127][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.216647][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.231440][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.248782][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.264976][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.294607][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 99.304087][ T5608] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 99.321862][ T5436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.323701][ T5436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.326177][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.328262][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.329809][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.331365][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.343202][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.346838][ T5609] netdevsim netdevsim5: Direct firmware load for lookup_extent_enter failed with error -2 [ 99.354338][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.361741][ T5609] netdevsim netdevsim5: Falling back to sysfs fallback for: lookup_extent_enter [ 99.365281][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.380942][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.434361][ T5608] device wireguard0 entered promiscuous mode [ 99.576535][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.034552][ T27] audit: type=1326 audit(100.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.038198][ T27] audit: type=1326 audit(100.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.042510][ T27] audit: type=1326 audit(100.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.053850][ T27] audit: type=1326 audit(100.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.057098][ T27] audit: type=1326 audit(100.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.062277][ T27] audit: type=1326 audit(100.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.065517][ T27] audit: type=1326 audit(100.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.072191][ T27] audit: type=1326 audit(100.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.080040][ T27] audit: type=1326 audit(100.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.085605][ T27] audit: type=1326 audit(100.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=15 compat=0 ip=0xffffb475b3a8 code=0x7ffc0000 [ 100.153926][ T4398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.179835][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.181294][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.186734][ T5436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.245677][ T4398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.261863][ T5653] netlink: 'syz.5.387': attribute type 1 has an invalid length. [ 100.293307][ T5653] bond1: (slave geneve2): making interface the new active one [ 100.295345][ T5653] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.349605][ T4398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.479109][ T5669] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 100.502347][ T4398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.507117][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 100.515432][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 100.522527][ T5668] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 100.685298][ T5668] device wireguard0 entered promiscuous mode [ 100.847115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.848926][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.933764][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.935772][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.940356][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.946884][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.955258][ T5436] device veth0_vlan entered promiscuous mode [ 101.061692][ T5436] device veth1_vlan entered promiscuous mode [ 101.087657][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.092427][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.094086][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.096607][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.168501][ T5436] device veth0_macvtap entered promiscuous mode [ 101.171299][ T5436] device veth1_macvtap entered promiscuous mode [ 101.175655][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.206831][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.213847][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.225048][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.236722][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.236745][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.236755][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.236762][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.236787][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.236792][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.237665][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.238148][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.238478][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.238678][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.238889][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.239495][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.239506][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.239513][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.239521][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.239526][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.239532][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.239537][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.239542][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.239547][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.239552][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.239983][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.240288][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.240504][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.241241][ T5436] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.241284][ T5436] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.241295][ T5436] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.241306][ T5436] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.326702][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.326730][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.331884][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.413285][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.413315][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.414907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.507937][ T4337] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 101.649525][ T4337] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 102.624365][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.650293][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 102.651620][ T5750] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 103.563080][ T4398] device hsr_slave_0 left promiscuous mode [ 103.600803][ T4398] device hsr_slave_1 left promiscuous mode [ 103.677899][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.679337][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.708963][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.712584][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.716203][ T4398] device bridge_slave_1 left promiscuous mode [ 103.718805][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.751715][ T4398] device bridge_slave_0 left promiscuous mode [ 103.752725][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.860530][ T4398] device veth1_macvtap left promiscuous mode [ 103.861653][ T4398] device veth0_macvtap left promiscuous mode [ 103.862736][ T4398] device veth1_vlan left promiscuous mode [ 103.863715][ T4398] device veth0_vlan left promiscuous mode [ 105.678689][ T4337] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 105.680219][ T4337] Bluetooth: hci4: Injecting HCI hardware error event [ 105.685797][ T4337] Bluetooth: hci4: hardware error 0x00 [ 106.979643][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 107.139929][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 107.308034][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.508019][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.837640][ T4337] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 109.932300][ T4398] bond0 (unregistering): Released all slaves [ 110.173553][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.176458][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 110.177761][ T5815] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 110.180232][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.421'. [ 110.285867][ T5853] netlink: 'syz.5.426': attribute type 10 has an invalid length. [ 110.392465][ T5853] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.411249][ T5852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.522212][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.523737][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.526721][ T4337] Bluetooth: hci1: Unknown advertising packet type: 0x18 [ 110.526763][ T4337] Bluetooth: hci1: Malformed LE Event: 0x0d [ 110.725480][ T5897] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.829507][ T5905] block device autoloading is deprecated and will be removed. [ 110.841923][ T5900] md: md2 stopped. [ 110.853650][ T5900] md2: error: failed to get bitmap file [ 111.042031][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.441'. [ 111.780666][ T5945] netlink: 'syz.6.444': attribute type 10 has an invalid length. [ 111.795497][ T5945] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 112.027674][ T5969] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.457'. [ 112.097892][ T5976] capability: warning: `syz.3.449' uses deprecated v2 capabilities in a way that may be insecure [ 112.452684][ T6018] futex_wake_op: syz.5.461 tries to shift op by -1; fix this program [ 113.734831][ T6082] 9p: Unknown Cache mode readahead [ 114.362247][ T6093] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 114.440809][ T6113] netlink: 72 bytes leftover after parsing attributes in process `syz.3.482'. [ 114.598327][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.484'. [ 114.620020][ T4328] Bluetooth: hci1: Malformed Event: 0x2f [ 114.898964][ T6120] device hsr_slave_1 left promiscuous mode [ 114.941727][ T6130] netlink: 14 bytes leftover after parsing attributes in process `syz.4.488'. [ 115.614054][ T6130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.653676][ T6130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.695431][ T6130] bond0 (unregistering): Released all slaves [ 115.881867][ T6113] 9pnet_virtio: no channels available for device syz [ 115.961942][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.972051][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.503638][ T6171] netlink: 52 bytes leftover after parsing attributes in process `syz.3.499'. [ 117.424969][ T6196] netlink: 72 bytes leftover after parsing attributes in process `syz.4.508'. [ 118.554882][ T6216] 9pnet_virtio: no channels available for device syz [ 118.693628][ T6234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.521'. [ 119.188283][ T6252] netlink: 72 bytes leftover after parsing attributes in process `syz.2.536'. [ 119.761601][ T6257] 9pnet_virtio: no channels available for device syz [ 121.827673][ T6277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.829674][ T6277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.830579][ T6277] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.847828][ T6277] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 121.849085][ T6277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.850133][ T6277] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 121.851036][ T6277] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 121.857503][ T6277] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 122.239968][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 122.394488][ T6349] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.396062][ T6349] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.451476][ T6353] lo speed is unknown, defaulting to 1000 [ 122.452599][ T6353] lo speed is unknown, defaulting to 1000 [ 122.456220][ T6353] lo speed is unknown, defaulting to 1000 [ 122.464004][ T6353] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.473068][ T6353] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 122.510575][ T6353] lo speed is unknown, defaulting to 1000 [ 122.515608][ T6353] lo speed is unknown, defaulting to 1000 [ 122.517996][ T6353] lo speed is unknown, defaulting to 1000 [ 122.520383][ T6353] lo speed is unknown, defaulting to 1000 [ 122.523471][ T6353] lo speed is unknown, defaulting to 1000 [ 122.526900][ T6353] lo speed is unknown, defaulting to 1000 [ 123.837647][ T4328] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.838628][ T4328] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.917600][ T4337] Bluetooth: hci5: command 0x0c1a tx timeout [ 123.918545][ T4337] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.234223][ T6396] ubi31: attaching mtd0 [ 125.265805][ T6396] ubi31: scanning is finished [ 125.266559][ T6396] ubi31: empty MTD device detected [ 125.374126][ T4328] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 125.506310][ T6417] [ 125.506722][ T6417] ====================================================== [ 125.507819][ T6417] WARNING: possible circular locking dependency detected [ 125.508974][ T6417] syzkaller #0 Not tainted [ 125.509795][ T6417] ------------------------------------------------------ [ 125.510939][ T6417] syz.3.575/6417 is trying to acquire lock: [ 125.511784][ T6417] ffff0000d5691458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 125.513853][ T6417] [ 125.513853][ T6417] but task is already holding lock: [ 125.515004][ T6417] ffff0000d5690130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 125.516346][ T6417] [ 125.516346][ T6417] which lock already depends on the new lock. [ 125.516346][ T6417] [ 125.518078][ T6417] [ 125.518078][ T6417] the existing dependency chain (in reverse order) is: [ 125.519615][ T6417] [ 125.519615][ T6417] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 125.520853][ T6417] lock_sock_nested+0x70/0x130 [ 125.521715][ T6417] smc_listen_out+0x114/0x3b0 [ 125.522494][ T6417] smc_listen_work+0x1d0/0xde0 [ 125.523298][ T6417] process_one_work+0x7f4/0x13a8 [ 125.524210][ T6417] worker_thread+0x8c8/0xfbc [ 125.524989][ T6417] kthread+0x250/0x2d8 [ 125.525672][ T6417] ret_from_fork+0x10/0x20 [ 125.526436][ T6417] [ 125.526436][ T6417] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 125.527975][ T6417] __lock_acquire+0x293c/0x6544 [ 125.528762][ T6417] lock_acquire+0x20c/0x644 [ 125.529503][ T6417] __flush_work+0xf4/0x1bc [ 125.530246][ T6417] __cancel_work_timer+0x2ec/0x448 [ 125.531219][ T6417] cancel_work_sync+0x24/0x38 [ 125.532124][ T6417] smc_clcsock_release+0x64/0xe8 [ 125.533008][ T6417] __smc_release+0x568/0x6c4 [ 125.533818][ T6417] smc_close_non_accepted+0xd8/0x260 [ 125.534804][ T6417] smc_close_active+0x954/0xcc8 [ 125.535665][ T6417] __smc_release+0x48c/0x6c4 [ 125.536529][ T6417] smc_release+0x258/0x51c [ 125.537420][ T6417] sock_close+0xb4/0x1f8 [ 125.538205][ T6417] __fput+0x1bc/0x7c0 [ 125.538883][ T6417] ____fput+0x20/0x30 [ 125.539604][ T6417] task_work_run+0x1ec/0x270 [ 125.540444][ T6417] do_notify_resume+0x1f70/0x2b0c [ 125.541332][ T6417] el0_svc+0x98/0x138 [ 125.542104][ T6417] el0t_64_sync_handler+0x84/0xf0 [ 125.542977][ T6417] el0t_64_sync+0x18c/0x190 [ 125.543734][ T6417] [ 125.543734][ T6417] other info that might help us debug this: [ 125.543734][ T6417] [ 125.545225][ T6417] Possible unsafe locking scenario: [ 125.545225][ T6417] [ 125.546466][ T6417] CPU0 CPU1 [ 125.547366][ T6417] ---- ---- [ 125.548231][ T6417] lock(sk_lock-AF_SMC/1); [ 125.548951][ T6417] lock((work_completion)(&new_smc->smc_listen_work)); [ 125.550457][ T6417] lock(sk_lock-AF_SMC/1); [ 125.551590][ T6417] lock((work_completion)(&new_smc->smc_listen_work)); [ 125.552823][ T6417] [ 125.552823][ T6417] *** DEADLOCK *** [ 125.552823][ T6417] [ 125.554095][ T6417] 2 locks held by syz.3.575/6417: [ 125.554850][ T6417] #0: ffff0000e23e3210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 125.556472][ T6417] #1: ffff0000d5690130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 125.558065][ T6417] [ 125.558065][ T6417] stack backtrace: [ 125.558996][ T6417] CPU: 0 PID: 6417 Comm: syz.3.575 Not tainted syzkaller #0 [ 125.560141][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.561680][ T6417] Call trace: [ 125.562246][ T6417] dump_backtrace+0x1c8/0x1f4 [ 125.563011][ T6417] show_stack+0x2c/0x3c [ 125.563660][ T6417] __dump_stack+0x30/0x40 [ 125.564381][ T6417] dump_stack_lvl+0xf8/0x160 [ 125.565159][ T6417] dump_stack+0x1c/0x5c [ 125.565825][ T6417] print_circular_bug+0x148/0x1b0 [ 125.566616][ T6417] check_noncircular+0x240/0x2d4 [ 125.567377][ T6417] __lock_acquire+0x293c/0x6544 [ 125.568107][ T6417] lock_acquire+0x20c/0x644 [ 125.568824][ T6417] __flush_work+0xf4/0x1bc [ 125.569540][ T6417] __cancel_work_timer+0x2ec/0x448 [ 125.570285][ T6417] cancel_work_sync+0x24/0x38 [ 125.571029][ T6417] smc_clcsock_release+0x64/0xe8 [ 125.571772][ T6417] __smc_release+0x568/0x6c4 [ 125.572443][ T6417] smc_close_non_accepted+0xd8/0x260 [ 125.573238][ T6417] smc_close_active+0x954/0xcc8 [ 125.573973][ T6417] __smc_release+0x48c/0x6c4 [ 125.574739][ T6417] smc_release+0x258/0x51c [ 125.575413][ T6417] sock_close+0xb4/0x1f8 [ 125.576118][ T6417] __fput+0x1bc/0x7c0 [ 125.576751][ T6417] ____fput+0x20/0x30 [ 125.577345][ T6417] task_work_run+0x1ec/0x270 [ 125.578056][ T6417] do_notify_resume+0x1f70/0x2b0c [ 125.578869][ T6417] el0_svc+0x98/0x138 [ 125.579451][ T6417] el0t_64_sync_handler+0x84/0xf0 [ 125.580240][ T6417] el0t_64_sync+0x18c/0x190 [ 125.668761][ T6396] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 125.917989][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.919059][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.997608][ T4328] Bluetooth: hci5: command 0x0406 tx timeout [ 129.437611][ T4337] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 129.438967][ T4337] Bluetooth: hci2: Injecting HCI hardware error event [ 129.440027][ T4337] Bluetooth: hci2: hardware error 0x00 [ 131.517581][ T4337] Bluetooth: hci2: Opcode 0x0c03 failed: -110