last executing test programs: 9.557741537s ago: executing program 1 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000dc0)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000e80)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000ec0)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000f00)={0x0, 0x200, 0x0, &(0x7f0000000f40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x36, 0xffffffffffffffff, 0x7fffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x23fa7c4c, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8000000000000000, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) 9.557305537s ago: executing program 2 (id=36): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x301040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f00000003c0)={r1, r4, 0x1}) symlink(0x0, &(0x7f0000000540)='./file0/file0\x00') r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='status\x00') symlinkat(&(0x7f0000000600)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mount$nfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x80000, &(0x7f0000000700)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}]}) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xa0044d07, &(0x7f0000001c40)) 8.642572009s ago: executing program 1 (id=39): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'pcl816\x00', [0x300, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) pwritev(r2, 0x0, 0x0, 0x739, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x10, 0x2710, 0x2, 0x1, 0x1, 0x0, &(0x7f0000010b80)=[0x9], 0x1, 0x0}) 8.115478182s ago: executing program 3 (id=41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8.115229422s ago: executing program 1 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) 8.038984804s ago: executing program 2 (id=44): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x20000080) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, 0x0, 0x8002, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x3, 0x0, @pic={0x8, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000240)={0x7, 0xfffff60b, 0xfffffff9, 0x9, 0x2}) r4 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) 7.81365457s ago: executing program 1 (id=45): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0xda, 0xffffffffffffffff, 0x200, 0x1}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0xfdef) 6.434464513s ago: executing program 3 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000000100)=""/28, 0xffd2) 6.423179494s ago: executing program 2 (id=48): timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000280)) 6.210654719s ago: executing program 0 (id=49): r0 = fsopen(&(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='j\x95\'\x8aC\x16\xca\\', &(0x7f00000001c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x01\x00\x00\xf7\xff\x1e\x10\xff\xff2', &(0x7f00000002c0)='%F*.\x00\x00\x00\x00\x00\xb8\xcc[\xdet\xa1\x9a\xacg\xb0\xd0K?U\x02\xf6^\xda\b|\xc5,\xa0v2\xb4\x10\xda\xd8E\x8b\xc7\a?\x02\xfb\xa0\x93\xa3\xc23;M\x1a\xa1\xec\x05T$\x17q\x9a\x97\xb6\xe7*\xc0\xdb\xc8\xf1\x90Q\xb3\xef\xa3o|\x0e\xae\xf3\x17\x88\x00\xb2\xbcC\xb2;U/\x9cAf\x98\xb7\x17\x82\xff\xd6\'%\xf1p\x95Y\xe1\'\x94\xf3kB\xa1\xd6\x96\xdd.H\xb30\xc5\xb7\x172^i\xc7\x14@q\xe4W\xbd\xe2Z\a\xf3W\x8c1\xa6n\xcb\xd3\xb44vU\x93\xa9\xd7\x03\xae\x83\np4\xf1@p\xc6\xea\xc0,F\xf8\f\xe4\xa9\x8es\x03k\xa74\x13\x94\v\x06`\x87\xfc\x9eY\xa1Z1\xbevz\x83\xe4\x88g\xd8\xcb\x95i\x1c\x8bx\t\x81\xf1&\xd9\x10\xf8\x959\x94\x1f\x9ft-V9\x9d`\x01\xad\x87\xa9\xe7\x9a\xab\xd1B&\x83@\xf7w%\xf7\xe6\xe88\xd3\xad\x12\nt\xc1\xf0\xac\xcf\xb6E-\x14\xb4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00\xdf\xdbKA\xb6+7\xe1\xb0@\x10\x00\xfdb\x9f\x91\xd5\x056\xc9\xb2S/\xdfX\xed\x8fG\xba\xd3<\xf9Q\x92\xdb\xc5&\x8b\xb1p>.\x1aV\xc5\xce\xfa\xf1Q\x1f\xccb\xc33\xbd\xb3\xf2h-o\xe1\xfb\x7f\xadT\x16zp\xa6\x1d\x97\xbc`\x82`j\x0f\x9a\xf6\xe1\bS\x17H\x16Q\x88\xed\xa5\xd0\xe7Y\x9d\xe0\xb8\xd7\x95\xdbf|\r\x00'/118, &(0x7f0000000900)='(!\xefh.(\\-\x02\x00h\xbb\xfby\x00\xc9 bE\x10\x18\xf9\x06\xf8\xb2\xc9\xcc\xf3\x1cy\x8d\xae\xa1?\x05\xc7bw\x828\xfem\xf5\xe4\xf4\tW5\b\x8e\xad\xb0\xee@\xab\xb7\xb2r\x12z4\xb6\xfe\xb3\xea\x11R\xd2\x9d~\x11\xe7\x05|\xbd\xba\x10{\xfb\xacS\x10\xae\x7fr\xf4aG!x\xcc*\x98\xbau\x9c\xf1\xf7\xecPV\xd9\xf8\xf8\xc2\xdc\xaf\xb8\xaa6\xadk\xd0\x9d\xd1\x82\xf2\x18\x83\'\xab\xa3~J\x14^A\x8f,C\xcf\xe0f<\xbc\xe1jP B\x83\xe0v\x8a\xd8\x04\xb4<\xfe/\xd8\xc3Q@W\x95\x05\xdd\b\x18N\xaa\xee\x9a\x1a\xa9\xff\xfd\xbc%\xee\x9c=N\x89\xd7b\xfe{\x04\xcf_>\xbc<\x03\xb32\xb7*P\x0e\xfc\xeaN\x9a\xf5\x05^\xb6Y\xff\xc6\xaa*\xbbC\x05;\xc2\xf5\xef}\t\xab\xd6\xd9\xa5\xc1\x18\xe5e\x9a\x1d|\xfei\xdc\xc4\xd8\x10\xae\x06H\x91b8D\x044\xd9/\tE\x97\xf4\xda\rl\x87\xe1N\x1d\xce\x16%\x13I\a-\x1c\x81\x9c\x83:\xd8\x91\xaa\xf2Y\xd0\x8e\xb6\x88\xed\xe3\xf0\f\x80r?\xb3\xc3|:b\xbe\xf0\x90\xf8\xac:awX\xb0\xb1\xb5,\\\xd7J\xf8\\7\xf2i\xa3\b\xa5h5\x81\xb6\xb1\xbc\xce\x12\xd7\xaa5\xf6\x01\xd6\x83\xaf;@\xf5\x93\x9fTd\x1c\xe6\xb6\x11p\x189\xbe\\\x8a\xab\x9e+G\x84\xfe\xbe0\xd5B\xe0:\x7f\xa2\xed\xf4&ImS\x16\xfc\x90\x12\xae`\x03\x8e\x10d\x17\xa9\x9bR\xbdU\xa3T\x17\xd9\xafjX\x91\xa9*\x96)R\xcc@\xfd\xa1\xb0i\x1b\xaah\xaa\xce\x99\xaa\xc2\xfc\xfawx\x8e\xb0\xc2I\xc5-\xe7D\xeb:!l\xef/gn\x8eS\xcb\x15\xe2RI1\\CW\xccG\xfb\x9d2p\xe5\xabi0k\x14b`\xcf\x89\xcc\xac\xdc\n\xdbt\x13\x0fB\xa6\xd6\x0fS\xb3\xba4\xeaQ\xc4*$\xa3\x03={\xd4\x81V\x91\t\xccTC\xd4\xbd\x9a\xec^\xbe\xf2\xc7\x10\xa4\x15\xa2\x05[\xff!\xc8\xbe', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000b00)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000b40)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r6, 0x1}}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x180, 0x0) socket(0xa, 0x3, 0xff) r7 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x401) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="141bdf0030"], 0xb2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x8800) 5.398618798s ago: executing program 0 (id=54): r0 = syz_open_dev$video4linux(&(0x7f0000000640), 0x1, 0x2000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000006c0)={0xfffffffb, 0x272, "9bc218fbe0b6ae13048c3788250359382d98001300", 0xf5, 0x400, 0x0, 0x8, 0x614}) 5.396883188s ago: executing program 1 (id=55): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000001000000000000010400000020"], 0x0, 0x2d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x20, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) 3.841327756s ago: executing program 3 (id=56): r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/rt_cache\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) mkdir(&(0x7f00000027c0)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00', 0x138) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4004010, 0xffffffffffffffff, 0x42795000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000004940)={0x90, 0xffffffffffffffda, r2, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r3, r4, 0x3, 0x5}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000002800)='./config\x00', &(0x7f0000002840), 0x4000000, &(0x7f0000004a00)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x4}}, {@noxattr}], [{@dont_appraise}]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4440) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') recvfrom$unix(r0, &(0x7f0000002680)=""/135, 0x87, 0x40002040, &(0x7f0000002740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(0x0, 0xffffffffffffff9c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.034225146s ago: executing program 0 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 2.815325901s ago: executing program 4 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.651107566s ago: executing program 0 (id=59): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9) 2.268918025s ago: executing program 1 (id=60): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf2500000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000bf0000", @ANYRES32=0x0], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@migrate={0xa0, 0x21, 0x1, 0x4, 0xff80, {{@in=@local, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x32, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 2.267989535s ago: executing program 4 (id=61): r0 = socket$key(0xf, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x3}) fsopen(&(0x7f00000002c0)='9p\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000380)={0x500, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) 2.181145917s ago: executing program 3 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 2.180940547s ago: executing program 2 (id=63): mount(0x0, 0x0, &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0000001000010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0100140003006e657464657673696d3000000000000034001680300001802c000c"], 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) 1.757984547s ago: executing program 2 (id=64): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16=r0], 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0}) r2 = syz_open_dev$audion(&(0x7f0000003f00), 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) syz_usb_disconnect(r1) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r3) 545.292137ms ago: executing program 4 (id=65): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000680)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000006c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x8000000, 0x4}) close(r0) 474.269778ms ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007060108000000000000e5ff0a00000405000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 269.003354ms ago: executing program 4 (id=67): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r0, &(0x7f00000000c0)=""/220, 0xdc) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x14c, &(0x7f0000000000)=[{0x6, 0x5, 0x6, 0x1ff}, {0x8001, 0x8, 0x7, 0xfffffff4}]}, 0xc7d28bca222f76a3) syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100200086dd60f70000001c2c00fe8000000000000000000000000000aaff0200000000000000000000000000013a00000000000000870090780f00"/85], 0x0) r5 = syz_open_dev$video(&(0x7f0000000540), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0xff00) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000006c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$dvb_frontend(0x0, 0x20ffffffff, 0x8a543) 194.381875ms ago: executing program 3 (id=68): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x7}, {0xa7, 0xc9}}}, 0x6) 189.546705ms ago: executing program 0 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa0380, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000016c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x3c, 0x88a}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001980)={'syzkaller0\x00', @multicast}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448d4, &(0x7f0000000340)={0x3, 0x1, 'Ho\x00', 0x0, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001900010700000000fcdbdf250000000000000000000001070000000000000000000000000000ffffe000000200000000000004000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000030000000044000500fc010000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r9, &(0x7f00000006c0)={&(0x7f0000000700)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c777b95ca109f", 0x1b}], 0x1, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @remote}}}], 0x20}, 0x400c804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = accept$unix(r7, &(0x7f0000000180), &(0x7f0000000240)=0x6e) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000280)={'macvlan0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x8, @remote}}, 0x0, 0x0, 0x4e, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc0300000000000000fd7e55d0345bce051890e3db00"}, 0xd8) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r12, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x4, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0xc3}}}}}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 0s ago: executing program 4 (id=70): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7fffffff]}, 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000019580), 0x4eb34, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000195c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000019540)='.\x00', 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000019b00)={0x0, 0x0, &(0x7f0000019b40)={&(0x7f0000019b80)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8082) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000019c40)={&(0x7f0000019500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000019c00)={&(0x7f0000019bc0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019640), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000019a80)={&(0x7f0000019600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000019680)={&(0x7f0000019c80)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYRESHEX], 0x39c}, 0x1, 0x0, 0x0, 0x8041}, 0x80) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) r7 = syz_open_dev$usbfs(&(0x7f00000193c0), 0x203, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000019400)=@urb_type_control={0x2, {}, 0x0, 0x84, &(0x7f0000019440)={0x60, 0x5, 0x0, 0x0, 0x7996}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0xd6, 0x0}) r9 = socket$inet6(0xa, 0x3, 0xff) openat(r8, &(0x7f0000019480)='./proc\x00', 0x400040, 0x10) sendto$inet6(r9, &(0x7f0000000080)="600000040014334000000000000000000000000000000001000000000000000000000200a52af834", 0x28, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002f000d0027bd9f00000000000b"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 62.375184][ T4172] cgroup: Unknown subsys name 'net' [ 62.490588][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.960643][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.712313][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.722131][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 65.726171][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 65.742698][ T4195] rdma_rxe: failed to add rxe_eth0 [ 65.750450][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.769017][ T4186] rdma_rxe: failed to add rxe_eth0 [ 65.789548][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.797822][ T4194] rdma_rxe: rxe_register_device failed with error -23 [ 65.822406][ T4194] rdma_rxe: failed to add rxe_eth0 [ 65.832941][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 65.864458][ T4193] rdma_rxe: failed to add rxe_eth0 [ 65.995828][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.995183][ T4185] infiniband rxe0: set active [ 66.019079][ T4185] infiniband rxe0: added rxe_eth0 [ 66.085248][ T4185] RDS/IB: rxe0: added [ 66.090306][ T4185] smc: adding ib device rxe0 with port count 1 [ 66.101501][ T4185] smc: ib device rxe0 port 1 has pnetid [ 66.120857][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.130986][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.253574][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.264895][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 66.299755][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.322185][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 66.452565][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.556187][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.622853][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.643382][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.656772][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.693153][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.716810][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.724980][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.732670][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.739866][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.748599][ T4194] device bridge_slave_0 entered promiscuous mode [ 66.756922][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.764328][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.772370][ T4194] device bridge_slave_1 entered promiscuous mode [ 66.780307][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.787760][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.796132][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.807640][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.828462][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.835651][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.843719][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.866906][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.874415][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.896668][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.948970][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.965279][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.981977][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.989238][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.997772][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.012444][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.023909][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.052158][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.070299][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.090228][ T4194] team0: Port device team_slave_0 added [ 67.096878][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.129627][ T4194] team0: Port device team_slave_1 added [ 67.138345][ T4186] team0: Port device team_slave_0 added [ 67.154893][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.174457][ T4186] team0: Port device team_slave_1 added [ 67.182667][ T4195] team0: Port device team_slave_0 added [ 67.191649][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.217933][ T4195] team0: Port device team_slave_1 added [ 67.248792][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.257172][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.283559][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.309035][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.317838][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.345224][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.372820][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.382255][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.422621][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.441262][ T4193] team0: Port device team_slave_0 added [ 67.448380][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.455790][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.482462][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.499128][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.506628][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.537585][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.552023][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.563710][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.594872][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.617030][ T4193] team0: Port device team_slave_1 added [ 67.645244][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 67.723842][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.724384][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 67.730277][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 67.742786][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 67.746652][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 67.765351][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.795455][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.807584][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.814719][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.822634][ T4195] Cannot create hsr debugfs directory [ 67.829722][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.841155][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.867427][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.881957][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.889071][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.915037][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.929469][ T4194] device hsr_slave_0 entered promiscuous mode [ 67.936773][ T4194] device hsr_slave_1 entered promiscuous mode [ 67.943657][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.951529][ T4194] Cannot create hsr debugfs directory [ 68.018138][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.070943][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.079150][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.087560][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.099660][ T4193] Cannot create hsr debugfs directory [ 68.281638][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.484755][ T3850] infiniband rxe0: set active [ 68.489921][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.499279][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.541193][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.572002][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.581166][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.588671][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.597060][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.611089][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.625034][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.632111][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.640644][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.676353][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.689646][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.703741][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.736929][ T4185] team0: Port device team_slave_0 added [ 68.745383][ T4185] team0: Port device team_slave_1 added [ 68.751217][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.798038][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.811964][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.841428][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.848795][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.876763][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.918497][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.926079][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.952761][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.970551][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.981087][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.998451][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.010511][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.067429][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.075446][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.082133][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.090237][ T4185] Cannot create hsr debugfs directory [ 69.107808][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.177713][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.191878][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.202437][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.218154][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.252508][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.262263][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.289902][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.327280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.342196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.352088][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.359578][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.371198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.410807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.420116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.431772][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.438884][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.449052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.459119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.477267][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.487325][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.508203][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.524668][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.539151][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.576317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.584753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.592589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.603039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.612117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.621303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.646064][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.661191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.671450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.680250][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.687383][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.697807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.707110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.715654][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.722736][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.730545][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 69.738663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.748184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.760434][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.771901][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.782117][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.792148][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.813044][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.824060][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 69.830592][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 69.837348][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 69.843438][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 69.849875][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.867816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.877723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.889460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.901760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.911134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.920150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.929242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.938154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.946863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.955791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.964320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.981308][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.988959][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.012550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.022934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.041533][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.067414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.076270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.098235][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.118062][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.127556][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.150405][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.178922][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.188066][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.196942][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.204080][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.212152][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.236282][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.254855][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.273073][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.280230][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.290138][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.299024][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.308007][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.315149][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.332262][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.381026][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.397329][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.411625][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.420644][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.427812][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.437941][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.448143][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.457181][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.467144][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.478275][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.492021][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.500077][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.515072][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.525940][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.551593][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.574842][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.581880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.592410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.603093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.620252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.629012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.637543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.646121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.654629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.662105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.685144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.693358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.706471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.715862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.725103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.740019][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.748525][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.761798][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.776451][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.814243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.822716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.833814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.850078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.861155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.875407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.883216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.892326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.918984][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.942407][ T4186] device veth0_vlan entered promiscuous mode [ 70.963265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.990674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.026543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.041060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.049615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.066316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.078089][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.085234][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.094663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.103801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.112611][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.119704][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.132768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.144765][ T4186] device veth1_vlan entered promiscuous mode [ 71.157348][ T4193] device veth0_vlan entered promiscuous mode [ 71.176722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.190213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.199793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.216702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.226118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.235940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.243454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.253377][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.260039][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.283765][ T4193] device veth1_vlan entered promiscuous mode [ 71.315578][ T4186] device veth0_macvtap entered promiscuous mode [ 71.322868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.333107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.341841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.350092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.358992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.368583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.377360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.386953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.423317][ T4186] device veth1_macvtap entered promiscuous mode [ 71.433927][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.443205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.454887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.463040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.478338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.491589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.501355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.511556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.520865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.538210][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.555933][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.570184][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.579886][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.589763][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.599523][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.607218][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.626869][ T4193] device veth0_macvtap entered promiscuous mode [ 71.655189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.687546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.705357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.736461][ T4193] device veth1_macvtap entered promiscuous mode [ 71.751103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.760390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.770252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.782871][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.818286][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.830746][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 71.840149][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.877935][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.892150][ T4195] device veth0_vlan entered promiscuous mode [ 71.898572][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 71.907764][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 71.920271][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.920289][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 71.943594][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.945166][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 71.966684][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.986372][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.996838][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.006746][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.017220][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.026238][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.035462][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.045371][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.054427][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.063334][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.072197][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.083037][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.092365][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.101348][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.110245][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.123655][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.136023][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.148068][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.158332][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.167274][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.176692][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.185893][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.210190][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.219359][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.250009][ T4195] device veth1_vlan entered promiscuous mode [ 72.266653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.275423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.282877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.316193][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.328993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.337986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.350536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.389892][ T4195] device veth0_macvtap entered promiscuous mode [ 72.410171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.418452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.427576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.436676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.483137][ T4194] device veth0_vlan entered promiscuous mode [ 72.492209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.505347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.514816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.550301][ T4195] device veth1_macvtap entered promiscuous mode [ 72.571680][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.579585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.589441][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.602074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.612458][ T4194] device veth1_vlan entered promiscuous mode [ 72.635915][ T4185] device veth0_vlan entered promiscuous mode [ 72.648253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.657491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.666882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.681721][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.693664][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.704317][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.715111][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.726911][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.744989][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.752849][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.763511][ T4185] device veth1_vlan entered promiscuous mode [ 72.773004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.788651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.800549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.810043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.820795][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.831940][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.844276][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.855899][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.868458][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.895975][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.906865][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.929186][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.938278][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.948887][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.958205][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.970886][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.983985][ T4194] device veth0_macvtap entered promiscuous mode [ 72.994907][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.008134][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.018171][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.025711][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.040004][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.048260][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.057270][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.066873][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.075411][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.091179][ T4194] device veth1_macvtap entered promiscuous mode [ 73.130292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.150609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.160053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.179338][ T4185] device veth0_macvtap entered promiscuous mode [ 73.217029][ T4185] device veth1_macvtap entered promiscuous mode [ 73.259711][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.276382][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.290696][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.303887][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.315931][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.328980][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.346117][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.392017][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.414666][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.425647][ T4315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 73.434859][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.434882][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.434892][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.434905][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.434919][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.434932][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.439669][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.510468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.520955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.530014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.548643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.558194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.568665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.580680][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.592158][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.603171][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.614744][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.625219][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.636693][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.651237][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.669271][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.681192][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.706982][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.719059][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.731783][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.743114][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.760289][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.771192][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.781492][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.792630][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.805694][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.814316][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.823770][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.839752][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.854902][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.863688][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.873421][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.905142][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 73.913442][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.923413][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.941159][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.974381][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 73.982407][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 73.988678][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 73.996016][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.005450][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.016604][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.027066][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.044267][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 74.062904][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.117119][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.164637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.226455][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.254137][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.279228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.291322][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.325387][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.347674][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.359874][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.399644][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.408375][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.416532][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.457957][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.485714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.650876][ T4338] Zero length message leads to an empty skb [ 74.934809][ T4357] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 74.942676][ T4357] netlink: 'syz.3.18': attribute type 2 has an invalid length. [ 75.205016][ T4368] device syzkaller0 entered promiscuous mode [ 75.263127][ T4368] tipc: Started in network mode [ 75.273295][ T4368] tipc: Node identity bafd1802eeb4, cluster identity 4711 [ 75.291339][ T4368] tipc: Enabled bearer , priority 0 [ 75.301761][ T4372] FAULT_INJECTION: forcing a failure. [ 75.301761][ T4372] name fail_futex, interval 1, probability 0, space 0, times 1 [ 75.321247][ T4372] CPU: 0 PID: 4372 Comm: syz.3.26 Not tainted syzkaller #0 [ 75.328509][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.338617][ T4372] Call Trace: [ 75.342025][ T4372] [ 75.344987][ T4372] dump_stack_lvl+0x188/0x250 [ 75.349730][ T4372] ? show_regs_print_info+0x20/0x20 [ 75.354969][ T4372] ? load_image+0x410/0x410 [ 75.359521][ T4372] should_fail+0x383/0x4b0 [ 75.363979][ T4372] get_futex_key+0x1a1/0x12d0 [ 75.368713][ T4372] ? __lock_acquire+0x13b3/0x7d40 [ 75.373769][ T4372] ? futex_wait_restart+0x250/0x250 [ 75.379012][ T4372] futex_wake+0x101/0x540 [ 75.383398][ T4372] ? futex_wait+0x680/0x680 [ 75.387940][ T4372] ? verify_lock_unused+0x140/0x140 [ 75.393182][ T4372] ? verify_lock_unused+0x140/0x140 [ 75.399113][ T4372] do_futex+0xd83/0x12b0 [ 75.403413][ T4372] ? lock_chain_count+0x20/0x20 [ 75.408354][ T4372] ? futex_exit_release+0x1c0/0x1c0 [ 75.413603][ T4372] ? __context_tracking_exit+0x4c/0x80 [ 75.419101][ T4372] __se_sys_futex+0x389/0x420 [ 75.423820][ T4372] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.429846][ T4372] ? __x64_sys_futex+0xf0/0xf0 [ 75.434664][ T4372] ? __x64_sys_futex+0x1d/0xf0 [ 75.439561][ T4372] do_syscall_64+0x4c/0xa0 [ 75.444011][ T4372] ? clear_bhb_loop+0x30/0x80 [ 75.448727][ T4372] ? clear_bhb_loop+0x30/0x80 [ 75.453476][ T4372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.459426][ T4372] RIP: 0033:0x7fd53fa39559 [ 75.463873][ T4372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.475541][ T4279] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.483505][ T4372] RSP: 002b:00007fd53dc900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.483532][ T4372] RAX: ffffffffffffffda RBX: 00007fd53fcbffa8 RCX: 00007fd53fa39559 [ 75.483549][ T4372] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd53fcbffac [ 75.483563][ T4372] RBP: 00007fd53fcbffa0 R08: 000f07bb9c7941ac R09: 0000000000000000 [ 75.483577][ T4372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.531579][ T4372] R13: 00007fd53fcc0038 R14: 00007fffc4f7b5f0 R15: 00007fffc4f7b6d8 [ 75.539607][ T4372] [ 75.560029][ T4367] tipc: Resetting bearer [ 75.606055][ T4367] tipc: Disabling bearer [ 75.769361][ T4372] mmap: syz.3.26 (4372) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 75.984397][ T4279] usb 1-1: Using ep0 maxpacket: 32 [ 77.123220][ T4200] Bluetooth: Wrong link type (-22) [ 77.323174][ T4394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 77.410200][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.573990][ C1] sched: RT throttling activated [ 77.577822][ T4279] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 77.859727][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 78.414633][ T4279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.422771][ T4279] usb 1-1: Product: syz [ 78.427105][ T4279] usb 1-1: Manufacturer: syz [ 78.431784][ T4279] usb 1-1: SerialNumber: syz [ 78.734257][ T4279] usb 1-1: can't set config #91, error -71 [ 78.770113][ T4279] usb 1-1: USB disconnect, device number 2 [ 79.003288][ T4419] device syzkaller0 entered promiscuous mode [ 79.068570][ T4425] tipc: Started in network mode [ 79.080351][ T4425] tipc: Node identity 622bef862d9, cluster identity 4711 [ 79.088501][ T4425] tipc: Enabled bearer , priority 0 [ 79.123649][ T4418] tipc: Resetting bearer [ 79.183450][ T4418] tipc: Disabling bearer [ 79.200979][ T4174] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 79.253920][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.904006][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 79.923992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 79.943992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 79.963993][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 79.984003][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.003995][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.013990][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.023992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.033992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.043993][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.082999][ T4432] netlink: 36 bytes leftover after parsing attributes in process `syz.2.44'. [ 80.244630][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.304649][ T4174] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.474966][ T4174] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 80.545206][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.639333][ T4174] usb 5-1: SerialNumber: syz [ 80.830438][ T4174] usb 5-1: 0:2 : does not exist [ 81.549912][ T4174] usb 5-1: USB disconnect, device number 2 [ 83.002289][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.289484][ T4469] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 83.289484][ T4469] program syz.4.53 not setting count and/or reply_len properly [ 84.379848][ T4477] device syzkaller0 entered promiscuous mode [ 84.446079][ T4481] tipc: Enabled bearer , priority 0 [ 84.503074][ T4476] tipc: Resetting bearer [ 84.648933][ T4476] tipc: Disabling bearer [ 85.040841][ T4492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 86.607469][ T7] cfg80211: failed to load regulatory.db [ 86.933405][ T4519] device syzkaller0 entered promiscuous mode [ 86.994784][ T4279] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 87.034251][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 87.070990][ T4192] [ 87.073375][ T4192] ====================================================== [ 87.080441][ T4192] WARNING: possible circular locking dependency detected [ 87.087496][ T4192] syzkaller #0 Not tainted [ 87.092029][ T4192] ------------------------------------------------------ [ 87.099068][ T4192] kworker/u5:3/4192 is trying to acquire lock: [ 87.105244][ T4192] ffffffff8e3b4048 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 87.114505][ T4192] [ 87.114505][ T4192] but task is already holding lock: [ 87.121876][ T4192] ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 87.131733][ T4192] [ 87.131733][ T4192] which lock already depends on the new lock. [ 87.131733][ T4192] [ 87.142137][ T4192] [ 87.142137][ T4192] the existing dependency chain (in reverse order) is: [ 87.151165][ T4192] [ 87.151165][ T4192] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 87.158912][ T4192] __mutex_lock_common+0x1e5/0x2400 [ 87.164677][ T4192] mutex_lock_nested+0x17/0x20 [ 87.169975][ T4192] hci_remote_features_evt+0x5d9/0xa10 [ 87.175964][ T4192] hci_event_packet+0x600/0x1310 [ 87.181426][ T4192] hci_rx_work+0x255/0xa10 [ 87.186387][ T4192] process_one_work+0x867/0xff0 [ 87.191798][ T4192] worker_thread+0xad7/0x12a0 [ 87.197195][ T4192] kthread+0x42e/0x520 [ 87.201790][ T4192] ret_from_fork+0x1f/0x30 [ 87.206746][ T4192] [ 87.206746][ T4192] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 87.214060][ T4192] __mutex_lock_common+0x1e5/0x2400 [ 87.219783][ T4192] mutex_lock_nested+0x17/0x20 [ 87.225078][ T4192] l2cap_chan_connect+0xfb/0xe20 [ 87.230564][ T4192] l2cap_sock_connect+0x5a3/0x770 [ 87.236155][ T4192] kernel_connect+0x11c/0x180 [ 87.241360][ T4192] rfcomm_dlc_open+0x600/0x10c0 [ 87.246735][ T4192] rfcomm_sock_connect+0x2e9/0x600 [ 87.252376][ T4192] __sys_connect+0x3cb/0x450 [ 87.257504][ T4192] __x64_sys_connect+0x76/0x80 [ 87.262803][ T4192] do_syscall_64+0x4c/0xa0 [ 87.267739][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.274163][ T4192] [ 87.274163][ T4192] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 87.281576][ T4192] __lock_acquire+0x38f7/0x7d40 [ 87.286964][ T4192] lock_acquire+0x19f/0x400 [ 87.291993][ T4192] __mutex_lock_common+0x1e5/0x2400 [ 87.297715][ T4192] mutex_lock_nested+0x17/0x20 [ 87.303003][ T4192] rfcomm_security_cfm+0x95/0x780 [ 87.308554][ T4192] hci_auth_complete_evt+0x388/0xbb0 [ 87.314359][ T4192] hci_event_packet+0x701/0x1310 [ 87.319819][ T4192] hci_rx_work+0x255/0xa10 [ 87.324770][ T4192] process_one_work+0x867/0xff0 [ 87.330182][ T4192] worker_thread+0xad7/0x12a0 [ 87.335396][ T4192] kthread+0x42e/0x520 [ 87.339996][ T4192] ret_from_fork+0x1f/0x30 [ 87.345228][ T4192] [ 87.345228][ T4192] other info that might help us debug this: [ 87.345228][ T4192] [ 87.355584][ T4192] Chain exists of: [ 87.355584][ T4192] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 87.355584][ T4192] [ 87.368129][ T4192] Possible unsafe locking scenario: [ 87.368129][ T4192] [ 87.375716][ T4192] CPU0 CPU1 [ 87.381083][ T4192] ---- ---- [ 87.386640][ T4192] lock(hci_cb_list_lock); [ 87.391147][ T4192] lock(&hdev->lock); [ 87.397732][ T4192] lock(hci_cb_list_lock); [ 87.404755][ T4192] lock(rfcomm_mutex); [ 87.408913][ T4192] [ 87.408913][ T4192] *** DEADLOCK *** [ 87.408913][ T4192] [ 87.417058][ T4192] 4 locks held by kworker/u5:3/4192: [ 87.422370][ T4192] #0: ffff88807dd90938 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 87.432652][ T4192] #1: ffffc90002f4fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 87.443989][ T4192] #2: ffff88802323c478 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0xbc/0xbb0 [ 87.453751][ T4192] #3: ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 87.464036][ T4192] [ 87.464036][ T4192] stack backtrace: [ 87.469949][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 87.477513][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.487570][ T4192] Workqueue: hci0 hci_rx_work [ 87.492303][ T4192] Call Trace: [ 87.495582][ T4192] [ 87.498512][ T4192] dump_stack_lvl+0x188/0x250 [ 87.503191][ T4192] ? load_image+0x410/0x410 [ 87.507692][ T4192] ? show_regs_print_info+0x20/0x20 [ 87.512898][ T4192] ? print_circular_bug+0x12b/0x1a0 [ 87.518103][ T4192] check_noncircular+0x2f8/0x400 [ 87.523041][ T4192] ? print_deadlock_bug+0x5d0/0x5d0 [ 87.528240][ T4192] ? lockdep_lock+0xf1/0x1f0 [ 87.532850][ T4192] ? mark_lock+0x94/0x320 [ 87.537198][ T4192] ? _find_first_zero_bit+0xd1/0xf0 [ 87.542401][ T4192] __lock_acquire+0x38f7/0x7d40 [ 87.547285][ T4192] ? verify_lock_unused+0x140/0x140 [ 87.552493][ T4192] lock_acquire+0x19f/0x400 [ 87.556997][ T4192] ? rfcomm_security_cfm+0x95/0x780 [ 87.562195][ T4192] ? __might_sleep+0xf0/0xf0 [ 87.566780][ T4192] ? read_lock_is_recursive+0x10/0x10 [ 87.572170][ T4192] __mutex_lock_common+0x1e5/0x2400 [ 87.577390][ T4192] ? rfcomm_security_cfm+0x95/0x780 [ 87.582616][ T4192] ? rcu_lock_release+0x20/0x20 [ 87.587482][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 87.592681][ T4192] ? rfcomm_security_cfm+0x95/0x780 [ 87.597885][ T4192] ? mutex_lock_io_nested+0x60/0x60 [ 87.603085][ T4192] ? l2cap_security_cfm+0x12b4/0x1340 [ 87.608476][ T4192] ? kmem_cache_free+0x14c/0x210 [ 87.613459][ T4192] ? l2cap_disconn_cfm+0xc0/0xc0 [ 87.618453][ T4192] mutex_lock_nested+0x17/0x20 [ 87.623226][ T4192] rfcomm_security_cfm+0x95/0x780 [ 87.628279][ T4192] ? rfcomm_send_msc+0x340/0x340 [ 87.633222][ T4192] ? rfcomm_send_msc+0x340/0x340 [ 87.638163][ T4192] hci_auth_complete_evt+0x388/0xbb0 [ 87.643456][ T4192] ? hci_disconn_complete_evt+0xae0/0xae0 [ 87.649173][ T4192] ? lock_chain_count+0x20/0x20 [ 87.654039][ T4192] ? __rwlock_init+0x140/0x140 [ 87.658804][ T4192] hci_event_packet+0x701/0x1310 [ 87.663740][ T4192] ? _raw_spin_unlock+0x40/0x40 [ 87.668589][ T4192] ? rcu_lock_release+0x20/0x20 [ 87.673454][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 87.675783][ T4279] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.678679][ T4192] hci_rx_work+0x255/0xa10 [ 87.678717][ T4192] process_one_work+0x867/0xff0 [ 87.697785][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 87.703426][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 87.708722][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 87.713748][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 87.719301][ T4192] ? wq_worker_running+0x97/0x170 [ 87.724330][ T4192] worker_thread+0xad7/0x12a0 [ 87.729038][ T4192] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.734937][ T4192] kthread+0x42e/0x520 [ 87.739003][ T4192] ? rcu_lock_release+0x20/0x20 [ 87.744047][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 87.748704][ T4192] ret_from_fork+0x1f/0x30 [ 87.753138][ T4192] [ 87.784726][ T4279] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.974504][ T4279] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.985911][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.002784][ T4279] usb 3-1: Product: syz [ 88.009244][ T4279] usb 3-1: Manufacturer: syz [ 88.016187][ T4279] usb 3-1: SerialNumber: syz [ 88.087263][ T4279] usb 3-1: config 0 descriptor?? [ 88.166438][ T4279] usb 3-1: selecting invalid altsetting 0 [ 88.343119][ T4506] usb 3-1: selecting invalid altsetting 0 [ 88.363474][ T4506] usb 3-1: 0:0: usb_set_interface failed (-22) [ 88.402646][ T7] usb 3-1: USB disconnect, device number 2 [ 93.884309][ T4279] Bluetooth: hci0: command 0x0406 tx timeout