last executing test programs: 6.733812319s ago: executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, 0x0, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) recvfrom$inet(r8, &(0x7f0000000980)=""/231, 0xe7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x464, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x2ac, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x170, 0x9, 0x0, 0x1, [@m_tunnel_key={0x13c, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x101, 0x6, "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"}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_ACT={0x114, 0x9, 0x0, 0x1, [@m_gact={0x110, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xe1, 0x6, "e00962185480b41fd2c76f5f42a00502e0ee2670df21b31be04b95c01713cbdcaef0b4a274177a5d0b3ebc0819c6dbeed3f940cb61bd9e417858a166650bff40ba17d887300a4535de35cc30a61298cded98f2f64c6e9ebb4893b51c65421bc030fa2873caeba196b1185639511c558561db2f9b1c14a005045103b07eeec0dd2840af42b7e887a9a5eab75c1fee4caa5b6a568138201300acd7186883218b8176acdc7ba1a4674428a90042f55e0c46924e41f320d6937382c9fe349adce50052c76cd498eb0222733ccdd8353e9a6711e911bb759df42eee1454f7d4"}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x13c, 0x2, [@TCA_ROUTE4_ACT={0x130, 0x6, [@m_sample={0x12c, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x81}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1f}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0xc6, 0x6, "845cd14d6348c08dbdb762af165861ac63450de3ca8bd1f96b5b407bdcb4fdced35852772201c97fc343450c2b56a0286066f66cd86e88f15d935cf6c6e761e61290b542f1d1a21e525d65a90ed3284d57b3308b8f5f59a6f9b0f4137df97227a15c832aed55601b691a04e094a316684ac6dee2c597ea8298b1834235773f275c9b2653bcf62bd50f77d03e98a780d56bf29c160df97a054d716c0391c1cd63ce4db615397f94347e4ae62794109ff837acceb12a82a1f1e9b62f0b295addd1e943"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x464}}, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) 5.837999966s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200), 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 5.529728654s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.609121207s ago: executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 3.086177558s ago: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x20000000) 3.015212488s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.962089146s ago: executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xd5, 0xd5, 0x4a, 0x20, 0x4fc, 0x7333, 0x4a6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x94, 0x9, 0xe8}}]}}]}}, 0x0) 2.941829069s ago: executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = dup(r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x401}}, './file0\x00'}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200)=0x1, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r8) sendto$inet6(r2, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x120, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r9 = epoll_create1(0x0) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000440)={0x20002003}) r11 = socket$rds(0x15, 0x5, 0x0) write$binfmt_aout(r11, &(0x7f00000000c0)={{0x107, 0xfb, 0x5d, 0x11d, 0x1f3, 0x2, 0x352, 0x80000000}, "373b7a50420b39b11c98b561c004342fd700ca131013d2da1086fed770b47989b717", ['\x00']}, 0x142) 2.789358443s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0xa, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x20) 2.723095813s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file1\x00', r1}, 0x18) 2.639637466s ago: executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x94, 0x464, 0x10, 0x70bd27, 0x25dfdbfe, "d0f50c4ac699bce0c2ca54f06ce151c35889b08894e17fe6737e97c9dceda7731207026bab10223cb749e3f4ee71f93a8d886cc465147a63ec83913ede556a23782e4f913d649682555b4d1e31f1e3003691fa1ebded04a010c0498fb4fcedef2d71555262f67e15cd7f5e12b4c7752ac2428751d3dfc07a8efa628ea9b1d7ec3f1c3683", [""]}, 0x94}, 0x1, 0x0, 0x0, 0x4000091}, 0x8044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xcc, 0x464, 0x300, 0x70bd29, 0x25dfdbfc, "4412684b396c886dd59088f5172009b6f0a4a8a823c2d07dfe07fc21aca52067162b671dc360dacf65d7e1f283a431d2ba0df9e6d5925089bd13862a7325bb54011cd09d85810e726ae2a96a739b1d1169434425c5543e533984e0700f96021dd69df13f2d33fb76e768bc484a7daea8b8d7c5ce0e0d823cf6b80fa9fdea7551586f242f419255bd257c1db4cc786c00db5766354e0049c153ca45c23b46cb0332ffca9f8d62b74b4329465ebfb26df14de84b098d23e8e08d54", ["", "", "", "", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0xc04}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008051}, 0x40) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x0, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000010c0)={'wpan1\x00'}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, 0x464, 0x400, 0x70bd2c, 0x25dfdbfc, "70eb1f2e850781efed05385fe458a07ce7c067ebb7be28a37766656cbb51bd30219320b9ec6201b3994ef78c139b62e224e77f3cb2b6b12231810738efbc7003b4cde1d67979805eec6c718affeccc6e2419a26c710ef7a68245c5f91f5b5909812dc1860a8c370189d19370caed944cabc9e12944213db29997ef5be0eca65a63c8c28c07a4ae9d53b81c614ca0c6ad912e92f2ef9e5beb61e544d16eb9", ["", "", "", "", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000010) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x9004) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r1) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.632747737s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vivid(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000540)={0x0, 0x0, 0x3012, 0x2, 0x8, {0x100, 0x5}, 0x1}) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x4d, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x1d, r2}, 0x10) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000005000000000000000000000000000000000000000000000000000000000000000000ffffac1414", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x13c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@tracing}, 0x40) socket$inet6(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000f40)=ANY=[@ANYBLOB="ff4000080000000000"], 0xa) socket(0x0, 0x0, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x28, 0x8, 0x20000000, 0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000000)={{0xb}}) 2.556879468s ago: executing program 1: r0 = mq_open(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedreceive(r0, &(0x7f0000000240)=""/133, 0x85, 0x5, &(0x7f00000000c0)={0x0, 0x3938700}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000001c0)=0x1e) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.538966451s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.403976922s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 2.138899012s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x4, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x23}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.811317142s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, 0x0, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) recvfrom$inet(r8, &(0x7f0000000980)=""/231, 0xe7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x464, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x2ac, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x170, 0x9, 0x0, 0x1, [@m_tunnel_key={0x13c, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x101, 0x6, "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"}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_ACT={0x114, 0x9, 0x0, 0x1, [@m_gact={0x110, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xe1, 0x6, "e00962185480b41fd2c76f5f42a00502e0ee2670df21b31be04b95c01713cbdcaef0b4a274177a5d0b3ebc0819c6dbeed3f940cb61bd9e417858a166650bff40ba17d887300a4535de35cc30a61298cded98f2f64c6e9ebb4893b51c65421bc030fa2873caeba196b1185639511c558561db2f9b1c14a005045103b07eeec0dd2840af42b7e887a9a5eab75c1fee4caa5b6a568138201300acd7186883218b8176acdc7ba1a4674428a90042f55e0c46924e41f320d6937382c9fe349adce50052c76cd498eb0222733ccdd8353e9a6711e911bb759df42eee1454f7d4"}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x13c, 0x2, [@TCA_ROUTE4_ACT={0x130, 0x6, [@m_sample={0x12c, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x81}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1f}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0xc6, 0x6, "845cd14d6348c08dbdb762af165861ac63450de3ca8bd1f96b5b407bdcb4fdced35852772201c97fc343450c2b56a0286066f66cd86e88f15d935cf6c6e761e61290b542f1d1a21e525d65a90ed3284d57b3308b8f5f59a6f9b0f4137df97227a15c832aed55601b691a04e094a316684ac6dee2c597ea8298b1834235773f275c9b2653bcf62bd50f77d03e98a780d56bf29c160df97a054d716c0391c1cd63ce4db615397f94347e4ae62794109ff837acceb12a82a1f1e9b62f0b295addd1e943"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x464}}, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) 1.495930471s ago: executing program 4: r0 = socket(0x0, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00006dbffc)=0x5, 0x2c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.186226238s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x5ce9b108}, 0x4c) 992.140918ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000002000010300000000000000000200000000000001"], 0x4c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0xb}}, @address_request}}}}, 0x0) 866.040617ms ago: executing program 0: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400230300000000000000000a000000", @ANYRES32=r2, @ANYBLOB="080008003b06000014000100ff02"], 0x34}}, 0x0) 696.416493ms ago: executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="82090300000000001400030067656e65766531"], 0x3c}}, 0x0) 649.12575ms ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{}, {0x84}, {0x6}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x76, 0x0, 0x0, 0x86040000}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4cd, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000480), &(0x7f00000004c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x3, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x40}}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x5, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe60}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xd, 0xe0ef, 0xfffff65a}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x3, 0x2, 0x6, 0x4}], 0x10, 0x5}, 0x90) r12 = memfd_create(&(0x7f0000000480)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x161\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xf5\xcc\xc9Z\x9f\xa6\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\x02\x00\x10r\x9b~n`m:]#\x989\xc3psjO\x80n\\\xb9\x9b\xeami\xd1\x9cSL\xb6\x87\t\x9bg\xd3\xcf\xc0F\x8c\x9b\x12O\xac`\xb4\x94IH\xb0\xcd\xe9eC\xb1\x8d{\x19\xde\x19\x8e\xb5l\xa6\x1e\r)j\xec\x02\x19SM\xa6\xcf\xb9b)\xe7\xa8\x03~{\xc5\x9b\xa8I\x19j\xa5g\x877Xa\x91\x144\x064w\xc1\xe7J)\xean\xfd\xc6\xa5Y\x84\x82U\xdc\x1bQ\xd54\x01\x98\x88\xc8\xce\x94\xf8d\x9c\xba\x1e\xf3o\x87\xbc\xbaL\x87\b<\xb8o\xc8nd\xe0\xea-5P\xa0\xc7\x18\xdb\\O\xb8xT\xa1', 0x0) r13 = dup(r12) writev(r13, &(0x7f0000000080)=[{&(0x7f0000000000)="d6", 0x27}], 0x1) 532.940198ms ago: executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x94, 0x464, 0x10, 0x70bd27, 0x25dfdbfe, "d0f50c4ac699bce0c2ca54f06ce151c35889b08894e17fe6737e97c9dceda7731207026bab10223cb749e3f4ee71f93a8d886cc465147a63ec83913ede556a23782e4f913d649682555b4d1e31f1e3003691fa1ebded04a010c0498fb4fcedef2d71555262f67e15cd7f5e12b4c7752ac2428751d3dfc07a8efa628ea9b1d7ec3f1c3683", [""]}, 0x94}, 0x1, 0x0, 0x0, 0x4000091}, 0x8044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xcc, 0x464, 0x300, 0x70bd29, 0x25dfdbfc, "4412684b396c886dd59088f5172009b6f0a4a8a823c2d07dfe07fc21aca52067162b671dc360dacf65d7e1f283a431d2ba0df9e6d5925089bd13862a7325bb54011cd09d85810e726ae2a96a739b1d1169434425c5543e533984e0700f96021dd69df13f2d33fb76e768bc484a7daea8b8d7c5ce0e0d823cf6b80fa9fdea7551586f242f419255bd257c1db4cc786c00db5766354e0049c153ca45c23b46cb0332ffca9f8d62b74b4329465ebfb26df14de84b098d23e8e08d54", ["", "", "", "", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0xc04}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008051}, 0x40) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x0, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000010c0)={'wpan1\x00'}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, 0x464, 0x400, 0x70bd2c, 0x25dfdbfc, "70eb1f2e850781efed05385fe458a07ce7c067ebb7be28a37766656cbb51bd30219320b9ec6201b3994ef78c139b62e224e77f3cb2b6b12231810738efbc7003b4cde1d67979805eec6c718affeccc6e2419a26c710ef7a68245c5f91f5b5909812dc1860a8c370189d19370caed944cabc9e12944213db29997ef5be0eca65a63c8c28c07a4ae9d53b81c614ca0c6ad912e92f2ef9e5beb61e544d16eb9", ["", "", "", "", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000010) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x9004) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r1) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 481.577456ms ago: executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 403.578278ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="1b", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300), 0x8) 300.027824ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x6, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}]}}}]}, 0x40}}, 0x0) 252.255631ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@delsa={0x3c, 0x11, 0xa2f, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB='{'], 0x1c}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000040)=""/198, 0xc6}, {0x0, 0x7}], 0x2) sendto$inet(r5, &(0x7f0000000140)="0b00dd0f0f3ce54ae71ed9d30100a2bb0000", 0xffe6, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @private=0xa010102}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xa4}}, 0x0) 26.024226ms ago: executing program 1: r0 = socket(0x40000000015, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00006dbffc)=0x5, 0x2c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. 1970/01/01 00:00:33 fuzzer started 1970/01/01 00:00:33 dialing manager at 10.128.0.163:30026 syzkaller login: [ 33.902133][ T4227] cgroup: Unknown subsys name 'net' [ 34.020139][ T4233] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 34.132821][ T4227] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:00:34 starting 5 executor processes [ 34.993395][ T4248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.998689][ T4248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.008078][ T4252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.012327][ T4251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.014719][ T4251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.017650][ T4251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.020500][ T4251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.023840][ T4255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.025863][ T4255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.030737][ T4251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.033026][ T4251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.035418][ T4251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.038155][ T4251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.040838][ T4251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.042747][ T4251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.045568][ T4258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.046534][ T4260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.048488][ T4258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.052428][ T4252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.054050][ T4258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.054810][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.059312][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.062439][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.064396][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.066985][ T4260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.069573][ T4260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.073023][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.078218][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.088681][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.094876][ T4248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.328060][ T4261] chnl_net:caif_netlink_parms(): no params data found [ 35.358871][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 35.386093][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 35.422997][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 35.436779][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.439324][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.441777][ T4261] device bridge_slave_0 entered promiscuous mode [ 35.466121][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.469442][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.471902][ T4261] device bridge_slave_1 entered promiscuous mode [ 35.474587][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 35.508522][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.510497][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.512879][ T4250] device bridge_slave_0 entered promiscuous mode [ 35.517962][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.519849][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.522382][ T4250] device bridge_slave_1 entered promiscuous mode [ 35.529278][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.531170][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.533796][ T4254] device bridge_slave_0 entered promiscuous mode [ 35.540532][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.546672][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.554027][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.555933][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.558522][ T4254] device bridge_slave_1 entered promiscuous mode [ 35.586665][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.605615][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.607632][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.609996][ T4257] device bridge_slave_0 entered promiscuous mode [ 35.613468][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.615874][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.618774][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.621329][ T4257] device bridge_slave_1 entered promiscuous mode [ 35.625316][ T4261] team0: Port device team_slave_0 added [ 35.649908][ T4261] team0: Port device team_slave_1 added [ 35.653374][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.675667][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.679327][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.683660][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.693270][ T4250] team0: Port device team_slave_0 added [ 35.695131][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.696983][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.699664][ T4247] device bridge_slave_0 entered promiscuous mode [ 35.721722][ T4250] team0: Port device team_slave_1 added [ 35.725299][ T4254] team0: Port device team_slave_0 added [ 35.731932][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.733842][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.736334][ T4247] device bridge_slave_1 entered promiscuous mode [ 35.749407][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.751230][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.758012][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.762952][ T4254] team0: Port device team_slave_1 added [ 35.765217][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.767068][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.774444][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.789518][ T4257] team0: Port device team_slave_0 added [ 35.793515][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.804557][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.806455][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.813604][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.817847][ T4257] team0: Port device team_slave_1 added [ 35.826115][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.845715][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.847783][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.854302][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.868206][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.870074][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.876670][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.880675][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.882469][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.889620][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.913314][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.915182][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.922483][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.926076][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.928360][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.935008][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.950452][ T4247] team0: Port device team_slave_0 added [ 35.999337][ T4250] device hsr_slave_0 entered promiscuous mode [ 36.037666][ T4250] device hsr_slave_1 entered promiscuous mode [ 36.139015][ T4261] device hsr_slave_0 entered promiscuous mode [ 36.177697][ T4261] device hsr_slave_1 entered promiscuous mode [ 36.217503][ T4261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.219657][ T4261] Cannot create hsr debugfs directory [ 36.221925][ T4247] team0: Port device team_slave_1 added [ 36.279115][ T4257] device hsr_slave_0 entered promiscuous mode [ 36.317843][ T4257] device hsr_slave_1 entered promiscuous mode [ 36.357660][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.359661][ T4257] Cannot create hsr debugfs directory [ 36.401047][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.402930][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.410398][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.479097][ T4254] device hsr_slave_0 entered promiscuous mode [ 36.517819][ T4254] device hsr_slave_1 entered promiscuous mode [ 36.557475][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.559510][ T4254] Cannot create hsr debugfs directory [ 36.569198][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.571042][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.578295][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.689397][ T4247] device hsr_slave_0 entered promiscuous mode [ 36.737655][ T4247] device hsr_slave_1 entered promiscuous mode [ 36.777454][ T4247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.779537][ T4247] Cannot create hsr debugfs directory [ 36.910937][ T4250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.949935][ T4250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.003153][ T4250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.029066][ T4250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.067723][ T4263] Bluetooth: hci0: command tx timeout [ 37.109217][ T4261] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.141613][ T4261] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.147876][ T4263] Bluetooth: hci3: command tx timeout [ 37.148012][ T4248] Bluetooth: hci4: command tx timeout [ 37.149547][ T4263] Bluetooth: hci1: command tx timeout [ 37.151062][ T4248] Bluetooth: hci2: command tx timeout [ 37.190202][ T4261] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.229179][ T4261] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.320906][ T4254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.341697][ T4254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.379067][ T4254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.419465][ T4254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.460265][ T4257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.515432][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.528135][ T4257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.563160][ T4257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.613757][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.617603][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.620447][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.624471][ T4257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.678143][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.680740][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.683358][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.685360][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.693522][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.696633][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.699863][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.701869][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.704008][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.707050][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.729138][ T4247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.777417][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.780409][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.783683][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.794082][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.813259][ T4247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.831988][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.834539][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.838074][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.840581][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.842922][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.845848][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.848914][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.863157][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.871314][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.879408][ T4247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.909172][ T4247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.931672][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.934148][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.946077][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.950964][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.958187][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.960912][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.963419][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.965319][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.977631][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.980270][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.982653][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.984504][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.986762][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.013233][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.023420][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.025977][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.029397][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.032242][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.035475][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.039394][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.041947][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.044493][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.046946][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.050595][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.053024][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.055433][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.057933][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.060485][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.062882][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.064694][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.066902][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.070952][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.073300][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.075118][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.078773][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.094358][ T4261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.098069][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.110887][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.113478][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.116049][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.119593][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.122197][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.124876][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.126892][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.129046][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.131718][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.134205][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.136564][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.138489][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.140821][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.143498][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.145964][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.148780][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.151166][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.152951][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.155195][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.158305][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.160904][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.167105][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.171566][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.174142][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.208602][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.211448][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.213923][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.216325][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.220303][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.229469][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.255810][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.260721][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.263279][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.265906][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.271151][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.273680][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.276149][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.282647][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.285262][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.287920][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.300494][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.312500][ T4250] device veth0_vlan entered promiscuous mode [ 38.315005][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.321287][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.330481][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.336636][ T4250] device veth1_vlan entered promiscuous mode [ 38.350969][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.369869][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.372341][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.374639][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.376976][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.395164][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.400921][ T4250] device veth0_macvtap entered promiscuous mode [ 38.404956][ T4250] device veth1_macvtap entered promiscuous mode [ 38.410601][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.412929][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.415297][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.418721][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.425725][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.430809][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.433243][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.435760][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.441143][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.443079][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.453048][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.459829][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.471188][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.473822][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.475612][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.487647][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.505523][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.515101][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.523847][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.530344][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.534172][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.536197][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.541166][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.543800][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.546311][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.549041][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.551011][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.552998][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.555192][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.558858][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.565348][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.585543][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.592330][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.594934][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.601098][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.603901][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.606451][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.609878][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.612910][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.631334][ T4250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.633643][ T4250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.635781][ T4250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.639533][ T4250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.647178][ T4247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.651143][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.666683][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.670056][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.672540][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.674960][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.701520][ T4257] device veth0_vlan entered promiscuous mode [ 38.703622][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.706383][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.709247][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.711882][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.714498][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.716963][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.741561][ T4257] device veth1_vlan entered promiscuous mode [ 38.754872][ T4254] device veth0_vlan entered promiscuous mode [ 38.764694][ T4261] device veth0_vlan entered promiscuous mode [ 38.767449][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.769839][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.772182][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.774584][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.777091][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.780776][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.783484][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.785919][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.789111][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.791563][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.794212][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.796623][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.825698][ T4261] device veth1_vlan entered promiscuous mode [ 38.835789][ T4254] device veth1_vlan entered promiscuous mode [ 38.861628][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.864212][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.866682][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.871112][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.873652][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.884361][ T4257] device veth0_macvtap entered promiscuous mode [ 38.894677][ T4257] device veth1_macvtap entered promiscuous mode [ 38.917109][ T4261] device veth0_macvtap entered promiscuous mode [ 38.925173][ T4261] device veth1_macvtap entered promiscuous mode [ 38.934750][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.938598][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.941370][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.943728][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.946251][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.949587][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.952094][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.954586][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.958769][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.960819][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.973532][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.976118][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.984557][ T4254] device veth0_macvtap entered promiscuous mode [ 38.989621][ T4254] device veth1_macvtap entered promiscuous mode [ 38.999582][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.002394][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.006291][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.010464][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.010810][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.013115][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.013149][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.015214][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.026483][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.031221][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.035002][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.038579][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.042192][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.044927][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.048091][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.050456][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.053313][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.055810][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.058568][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.061151][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.063731][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.066276][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.069277][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.071358][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.074646][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.078341][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.080979][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.083566][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.087075][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.097909][ T4261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.100187][ T4261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.102449][ T4261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.104624][ T4261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.116160][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.118935][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.123391][ T4257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.125685][ T4257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.128973][ T4257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.131282][ T4257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.147910][ T4248] Bluetooth: hci0: command tx timeout [ 39.169247][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.172066][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.174489][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.176976][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.182813][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.185510][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.191058][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.194819][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.215813][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.223545][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.226284][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.227306][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.230444][ T4248] Bluetooth: hci1: command tx timeout [ 39.230576][ T4255] Bluetooth: hci4: command tx timeout [ 39.231773][ T4248] Bluetooth: hci3: command tx timeout [ 39.237042][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.237520][ T4248] Bluetooth: hci2: command tx timeout [ 39.248779][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.251336][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.253936][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.256440][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.277037][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.290657][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.315803][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.322745][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.325464][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.341876][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.344690][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.351786][ T4254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.354112][ T4254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.356438][ T4254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364071][ T4254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.382118][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.424657][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.431389][ T4329] 9pnet_fd: Insufficient options for proto=fd [ 39.433296][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.462178][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.483555][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.485735][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.514105][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.539935][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.542086][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.552580][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.611118][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.613345][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.616476][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.661472][ T27] audit: type=1326 audit(39.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x0 [ 39.733379][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.736101][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.792913][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.795977][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.810897][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.820112][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.831398][ T4247] device veth0_vlan entered promiscuous mode [ 39.847552][ T4247] device veth1_vlan entered promiscuous mode [ 39.891956][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.895365][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.899226][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.905369][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.913745][ T4247] device veth0_macvtap entered promiscuous mode [ 39.923575][ T4247] device veth1_macvtap entered promiscuous mode [ 39.946311][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.956173][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.962111][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.966647][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.975928][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.982082][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.984690][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.988077][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.991998][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.997781][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.004668][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.010317][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.013148][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.019350][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.022137][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.024646][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.034827][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.041626][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.044326][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.051778][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.054540][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.063531][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.072863][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.075594][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.092991][ T4247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.093727][ T4344] loop3: detected capacity change from 0 to 2048 [ 40.095237][ T4247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.108285][ T4247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.110798][ T4247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.194251][ T4344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.231955][ T4339] loop1: detected capacity change from 0 to 32768 [ 40.242404][ T1603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.244892][ T1603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.245018][ T4339] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4339) [ 40.279605][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.290679][ T4339] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 40.299603][ T1603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.301533][ T4339] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 40.305654][ T1603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.306097][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 40.310179][ T4339] BTRFS info (device loop1): force clearing of disk cache [ 40.316917][ T4339] BTRFS info (device loop1): use zlib compression, level 3 [ 40.329390][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.338357][ T4339] BTRFS info (device loop1): using free space tree [ 40.450347][ T4339] BTRFS info (device loop1): enabling ssd optimizations [ 40.454364][ T4339] BTRFS info (device loop1): rebuilding free space tree [ 40.581525][ T4261] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 40.846469][ T4363] loop3: detected capacity change from 0 to 32768 [ 40.911194][ T4298] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.916229][ T4363] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4363) [ 41.238035][ T4248] Bluetooth: hci0: command tx timeout [ 41.308641][ T4248] Bluetooth: hci2: command tx timeout [ 41.311339][ T4248] Bluetooth: hci3: command tx timeout [ 41.644808][ T4263] Bluetooth: hci4: command tx timeout [ 41.646251][ T4263] Bluetooth: hci1: command tx timeout [ 41.724326][ T4363] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.727025][ T4363] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 41.768322][ T4363] BTRFS info (device loop3): using free space tree [ 42.809435][ T4363] BTRFS info (device loop3): enabling ssd optimizations [ 42.820323][ T4298] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 42.822808][ T4298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.823906][ T4422] loop1: detected capacity change from 0 to 2048 [ 42.825414][ T4298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 42.844920][ T4298] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.861251][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.880200][ T4298] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.903701][ T4422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.941757][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 43.001855][ T4250] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 43.017738][ T4298] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 43.020139][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 43.022320][ T4298] usb 1-1: Product: syz [ 43.023422][ T4298] usb 1-1: Manufacturer: syz [ 43.056111][ T27] audit: type=1326 audit(43.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9985d0e8 code=0x0 [ 43.070557][ T4298] cdc_wdm 1-1:1.0: skipping garbage [ 43.072217][ T4298] cdc_wdm 1-1:1.0: skipping garbage [ 43.089383][ T4298] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 43.091096][ T4298] cdc_wdm 1-1:1.0: Unknown control protocol [ 43.271657][ T4375] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 43.276237][ T4439] usb 1-1: USB disconnect, device number 2 [ 43.308506][ T4248] Bluetooth: hci0: command tx timeout [ 43.354485][ T4450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.388551][ T4263] Bluetooth: hci2: command tx timeout [ 43.398159][ T4248] Bluetooth: hci3: command tx timeout [ 43.708816][ T4263] Bluetooth: hci1: command tx timeout [ 43.711462][ T4248] Bluetooth: hci4: command tx timeout [ 43.852080][ T4459] device bridge_slave_1 left promiscuous mode [ 43.854929][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.905134][ T4459] device bridge_slave_0 left promiscuous mode [ 43.908635][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.973040][ T4461] loop1: detected capacity change from 0 to 2048 [ 44.022378][ T4461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.049115][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 44.075228][ T4463] device bond_slave_0 entered promiscuous mode [ 44.077292][ T4463] device bond_slave_1 entered promiscuous mode [ 44.088461][ T4462] device bond_slave_0 left promiscuous mode [ 44.090212][ T4462] device bond_slave_1 left promiscuous mode [ 44.123792][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 44.171434][ T4476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.184078][ T4476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.287393][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.530734][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 44.652386][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 44.708988][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.711383][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.779842][ T27] audit: type=1326 audit(44.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.789040][ T27] audit: type=1326 audit(44.740:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.803287][ T27] audit: type=1326 audit(44.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.815137][ T22] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 44.817753][ T22] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 44.819917][ T22] usb 1-1: Product: syz [ 44.820985][ T22] usb 1-1: Manufacturer: syz [ 44.822176][ T22] usb 1-1: SerialNumber: syz [ 44.829591][ T22] usb 1-1: config 0 descriptor?? [ 44.837836][ T27] audit: type=1326 audit(44.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.843552][ T27] audit: type=1326 audit(44.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.850408][ T4468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 44.861051][ T27] audit: type=1326 audit(44.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=182 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.878136][ T27] audit: type=1326 audit(44.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.884051][ T27] audit: type=1326 audit(44.760:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.893309][ T27] audit: type=1326 audit(44.760:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=183 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.900363][ T27] audit: type=1326 audit(44.760:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x7ffc0000 [ 44.939570][ T4450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.993687][ T4450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.063041][ T4450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.073672][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.078455][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.166423][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.172811][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.215730][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.219339][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.239059][ T4450] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.245365][ T4450] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.251893][ T4450] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.263094][ T4450] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.341750][ T4497] loop3: detected capacity change from 0 to 2048 [ 45.381106][ T4497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.409047][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 45.443719][ T4505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.446269][ T4505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.321325][ T4529] loop3: detected capacity change from 0 to 2048 [ 46.349227][ T4529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.383182][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 46.416265][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.425931][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.632252][ T4539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.644756][ T4539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.089037][ T7] usb 1-1: USB disconnect, device number 3 [ 47.275789][ T4556] loop1: detected capacity change from 0 to 2048 [ 47.372008][ T4556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.483774][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 47.698853][ T4576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 47.715806][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.717784][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.719536][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.721290][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.723194][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.724977][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.726825][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.728656][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.730420][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.732157][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.733888][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.735542][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.737306][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.738958][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.740669][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.742313][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.743880][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.745468][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.747191][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.748919][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.750611][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.752281][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.753937][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.755595][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.757395][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.759118][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.760808][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.762478][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.764132][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.765907][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.767744][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.769351][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 47.771047][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 47.772696][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.774745][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.776814][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.778904][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.781062][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.783251][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.785415][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.787508][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.789615][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.791700][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.793745][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.795857][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.797902][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.799953][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.802088][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.804212][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.806245][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.808456][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.810533][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.812676][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.814721][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.816946][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.819104][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.821132][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.823208][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.825297][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.827376][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.829511][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.831624][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.833733][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 47.835704][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 47.835957][ T4581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.847644][ T4581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.001506][ T4584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.011983][ T4584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.476963][ T4597] loop2: detected capacity change from 0 to 2048 [ 48.502352][ T4600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.504830][ T4600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.533917][ T4597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.562027][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 48.611000][ T4607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 48.614343][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 48.696524][ T4609] device dummy0 entered promiscuous mode [ 48.698389][ T4609] device macsec1 entered promiscuous mode [ 48.702759][ T4609] device dummy0 left promiscuous mode [ 48.710675][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 48.951270][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 49.077576][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 49.080567][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.083023][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.096197][ T7] usb 1-1: config 0 descriptor?? [ 49.117573][ T4595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.141088][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 49.142677][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 49.145789][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 49.381950][ T4623] delete_channel: no stack [ 49.500256][ T4630] tipc: Started in network mode [ 49.501657][ T4630] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 49.504015][ T4630] tipc: Enabled bearer , priority 10 [ 49.874688][ T4646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.877326][ T4646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.289124][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.291548][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.361359][ T4661] block device autoloading is deprecated and will be removed. [ 50.488345][ T4269] binder: undelivered death notification, 0000000000000000 [ 50.498572][ T4269] tipc: Node number set to 15444650 [ 51.524468][ T4727] loop0: detected capacity change from 0 to 2048 [ 51.557727][ T14] usb 1-1: USB disconnect, device number 4 [ 51.636335][ T4727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.725718][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 53.488293][ T4767] loop3: detected capacity change from 0 to 2048 [ 53.577904][ T4767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.613809][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 54.263781][ T4796] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 54.461453][ T4803] loop4: detected capacity change from 0 to 2048 [ 54.486401][ T4803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.513429][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 55.506392][ T4813] loop1: detected capacity change from 0 to 32768 [ 55.524021][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 55.571020][ T4813] XFS (loop1): Mounting V5 Filesystem [ 55.705037][ T4813] XFS (loop1): Ending clean mount [ 55.733792][ T4840] loop0: detected capacity change from 0 to 2048 [ 55.764766][ T4840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 55.781633][ T4813] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 55.785212][ T4813] XFS (loop1): Unmount and run xfs_repair [ 55.787031][ T4813] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 55.789729][ T4813] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 55.792326][ T4813] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 55.794755][ T4813] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 55.804180][ T4813] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 55.806617][ T4813] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 55.809770][ T4813] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 55.812357][ T4813] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 55.815051][ T4813] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 55.821182][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 55.825665][ T4813] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 55.832075][ T4813] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 55.836555][ T4813] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 55.892667][ T4261] XFS (loop1): Unmounting Filesystem [ 56.717419][ T4269] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 57.659558][ T4269] usb 1-1: device descriptor read/64, error -71 [ 57.937375][ T4269] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 58.895551][ T4869] sched: RT throttling activated [ 58.897392][ T4269] usb 1-1: device descriptor read/64, error -71 [ 59.017774][ T4269] usb usb1-port1: attempt power cycle [ 59.081301][ T4883] usb usb8: usbfs: process 4883 (syz-executor.3) did not claim interface 0 before use [ 59.155522][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.157978][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.195806][ T4887] loop3: detected capacity change from 0 to 2048 [ 59.240779][ T4887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 59.277226][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 59.428127][ T4269] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 59.517445][ T4269] usb 1-1: device descriptor read/8, error -71 [ 59.637106][ T4902] loop1: detected capacity change from 0 to 4096 [ 59.642895][ T4902] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 60.202921][ T4913] loop2: detected capacity change from 0 to 2048 [ 60.237929][ T4907] loop1: detected capacity change from 0 to 32768 [ 60.256216][ T4907] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4907) [ 60.275664][ T4913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 60.286314][ T4907] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 60.296873][ T4907] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 60.310482][ T4907] BTRFS info (device loop1): setting nodatacow, compression disabled [ 60.312624][ T4907] BTRFS info (device loop1): use no compression [ 60.334001][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 60.343777][ T4907] BTRFS info (device loop1): doing ref verification [ 60.345748][ T4907] BTRFS info (device loop1): force clearing of disk cache [ 60.348454][ T4907] BTRFS info (device loop1): enabling ssd optimizations [ 60.350378][ T4907] BTRFS info (device loop1): using spread ssd allocation scheme [ 60.353002][ T4907] BTRFS info (device loop1): not using ssd optimizations [ 60.387486][ T4907] BTRFS info (device loop1): not using spread ssd allocation scheme [ 60.392618][ T4907] BTRFS info (device loop1): using free space tree [ 60.966164][ T4932] loop4: detected capacity change from 0 to 32768 [ 60.970780][ T4907] BTRFS info (device loop1): rebuilding free space tree [ 60.976071][ T4932] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (4932) [ 61.038060][ T4235] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.713828][ T4959] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 62.839226][ T4955] loop2: detected capacity change from 0 to 4096 [ 62.996780][ T4955] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 63.855207][ T4261] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 63.871086][ T4978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.873812][ T4978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.074068][ T4986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.649045][ T2050] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.651047][ T2050] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.274297][ T4999] Illegal XDP return value 4294967294 on prog (id 3) dev N/A, expect packet loss! [ 65.339435][ T4980] loop0: detected capacity change from 0 to 32768 [ 65.347876][ T4980] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4980) [ 65.356021][ T4980] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 65.359263][ T4980] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 65.361446][ T4980] BTRFS info (device loop0): setting nodatacow, compression disabled [ 65.363552][ T4980] BTRFS info (device loop0): use no compression [ 65.365144][ T4980] BTRFS info (device loop0): doing ref verification [ 65.366858][ T4980] BTRFS info (device loop0): force clearing of disk cache [ 65.388593][ T5005] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 65.402420][ T4980] BTRFS info (device loop0): enabling ssd optimizations [ 65.404295][ T4980] BTRFS info (device loop0): using spread ssd allocation scheme [ 65.406277][ T4980] BTRFS info (device loop0): not using ssd optimizations [ 65.425150][ T4980] BTRFS info (device loop0): not using spread ssd allocation scheme [ 65.435144][ T4980] BTRFS info (device loop0): using free space tree [ 65.520385][ T5005] team0: Port device wlan1 added [ 65.608534][ T5013] loop2: detected capacity change from 0 to 4096 [ 65.627584][ T5013] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 65.741397][ T4980] BTRFS info (device loop0): rebuilding free space tree [ 66.178180][ T4254] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 66.649139][ T5050] device vlan2 entered promiscuous mode [ 66.822816][ T5064] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 66.824009][ T5063] IPVS: stopping backup sync thread 5064 ... [ 66.931617][ T5069] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 67.033324][ T5071] loop4: detected capacity change from 0 to 4096 [ 67.042741][ T5071] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 67.394388][ T5073] loop2: detected capacity change from 0 to 32768 [ 67.403098][ T5073] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5073) [ 67.465528][ T5073] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 67.470164][ T5073] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 67.475175][ T5073] BTRFS info (device loop2): setting nodatacow, compression disabled [ 67.481259][ T5073] BTRFS info (device loop2): use no compression [ 67.495801][ T5073] BTRFS info (device loop2): doing ref verification [ 67.505988][ T5073] BTRFS info (device loop2): force clearing of disk cache [ 67.517519][ T5073] BTRFS info (device loop2): enabling ssd optimizations [ 67.528130][ T5073] BTRFS info (device loop2): using spread ssd allocation scheme [ 67.541866][ T5073] BTRFS info (device loop2): not using ssd optimizations [ 67.552400][ T5073] BTRFS info (device loop2): not using spread ssd allocation scheme [ 67.563684][ T5073] BTRFS info (device loop2): using free space tree [ 68.044788][ T5073] BTRFS info (device loop2): rebuilding free space tree [ 68.459556][ T4257] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.293247][ T5123] tipc: Enabling not permitted [ 69.317097][ T5123] tipc: Enabling of bearer rejected, failed to enable media [ 69.630568][ T24] cfg80211: failed to load regulatory.db [ 70.029176][ T5127] loop3: detected capacity change from 0 to 4096 [ 70.033355][ T5127] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 70.835862][ T5144] loop1: detected capacity change from 0 to 32768 [ 70.849730][ T5144] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5144) [ 70.888809][ T5144] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 70.911684][ T5144] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 70.913862][ T5144] BTRFS info (device loop1): setting nodatacow, compression disabled [ 70.932795][ T5144] BTRFS info (device loop1): use no compression [ 70.934592][ T5144] BTRFS info (device loop1): doing ref verification [ 70.936420][ T5144] BTRFS info (device loop1): force clearing of disk cache [ 70.953988][ T5144] BTRFS info (device loop1): enabling ssd optimizations [ 70.955983][ T5144] BTRFS info (device loop1): using spread ssd allocation scheme [ 70.967337][ T5144] BTRFS info (device loop1): not using ssd optimizations [ 70.981035][ T5144] BTRFS info (device loop1): not using spread ssd allocation scheme [ 70.983304][ T5144] BTRFS info (device loop1): using free space tree [ 71.515503][ T5144] BTRFS info (device loop1): rebuilding free space tree [ 71.984433][ T4261] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 72.051924][ T5215] Zero length message leads to an empty skb [ 74.790235][ T5246] loop1: detected capacity change from 0 to 32768 [ 74.828233][ T5246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5246) [ 74.851871][ T5246] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 74.854577][ T5246] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 74.856700][ T5246] BTRFS info (device loop1): setting nodatacow, compression disabled [ 74.866129][ T5246] BTRFS info (device loop1): use no compression [ 74.874314][ T5246] BTRFS info (device loop1): doing ref verification [ 74.876082][ T5246] BTRFS info (device loop1): force clearing of disk cache [ 74.881669][ T5246] BTRFS info (device loop1): enabling ssd optimizations [ 74.883570][ T5246] BTRFS info (device loop1): using spread ssd allocation scheme [ 74.885569][ T5246] BTRFS info (device loop1): not using ssd optimizations [ 74.901910][ T5246] BTRFS info (device loop1): not using spread ssd allocation scheme [ 74.904188][ T5246] BTRFS info (device loop1): using free space tree [ 75.070955][ T5246] BTRFS info (device loop1): rebuilding free space tree [ 75.305021][ T4261] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.417665][ T4297] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 80.657349][ T4297] usb 1-1: Using ep0 maxpacket: 32 [ 80.937529][ T4297] usb 1-1: New USB device found, idVendor=04fc, idProduct=7333, bcdDevice=4a.6e [ 80.940157][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.942689][ T4297] usb 1-1: Product: syz [ 80.946765][ T4297] usb 1-1: Manufacturer: syz [ 80.948765][ T4297] usb 1-1: SerialNumber: syz [ 80.952339][ T4297] usb 1-1: config 0 descriptor?? [ 81.001622][ T4297] gspca_main: spca500-2.14.0 probing 04fc:7333 [ 81.201562][ T4297] usb 1-1: USB disconnect, device number 9 [ 81.262222][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 81.262270][ T27] audit: type=1326 audit(81.220:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9985d0e8 code=0x0 [ 81.375302][ T5462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.244445][ T5504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.278192][ T5504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.306354][ T27] audit: type=1326 audit(83.260:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9985d0e8 code=0x0 [ 83.416362][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.192187][ T5555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.210392][ T5555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.233345][ T27] audit: type=1326 audit(86.190:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa245d0e8 code=0x0 [ 86.357748][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.809926][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.812537][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.910289][ T5654] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.211651][ T27] audit: type=1326 audit(89.170:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa145d0e8 code=0x0 [ 89.264026][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.272290][ T5662] tipc: Resetting bearer [ 89.281578][ T5662] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.284053][ T5662] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.286468][ T5662] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.347357][ T5662] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.397513][ T5662] device geneve1 entered promiscuous mode [ 89.409952][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.908410][ T5684] [ 89.909216][ T5684] ====================================================== [ 89.911043][ T5684] WARNING: possible circular locking dependency detected [ 89.912830][ T5684] 6.1.94-syzkaller #0 Not tainted [ 89.914106][ T5684] ------------------------------------------------------ [ 89.915973][ T5684] syz-executor.1/5684 is trying to acquire lock: [ 89.917611][ T5684] ffff0000d4facd00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x38/0x1a8 [ 89.920127][ T5684] [ 89.920127][ T5684] but task is already holding lock: [ 89.922058][ T5684] ffff0000c33007c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x104/0x12c [ 89.924765][ T5684] [ 89.924765][ T5684] which lock already depends on the new lock. [ 89.924765][ T5684] [ 89.927514][ T5684] [ 89.927514][ T5684] the existing dependency chain (in reverse order) is: [ 89.929875][ T5684] [ 89.929875][ T5684] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 89.931908][ T5684] __mutex_lock_common+0x190/0x21a0 [ 89.933400][ T5684] mutex_lock_nested+0x38/0x44 [ 89.934745][ T5684] ieee80211_open+0x13c/0x1e0 [ 89.936136][ T5684] __dev_open+0x328/0x4fc [ 89.937369][ T5684] dev_open+0xa8/0x23c [ 89.938569][ T5684] team_add_slave+0x704/0x1f78 [ 89.940055][ T5684] do_setlink+0xc14/0x3318 [ 89.941290][ T5684] rtnl_newlink+0x1424/0x1b74 [ 89.942636][ T5684] rtnetlink_rcv_msg+0x72c/0xd94 [ 89.944033][ T5684] netlink_rcv_skb+0x20c/0x3b8 [ 89.945413][ T5684] rtnetlink_rcv+0x28/0x38 [ 89.946688][ T5684] netlink_unicast+0x65c/0x898 [ 89.948103][ T5684] netlink_sendmsg+0x834/0xb18 [ 89.949454][ T5684] ____sys_sendmsg+0x55c/0x848 [ 89.950787][ T5684] __sys_sendmsg+0x26c/0x33c [ 89.952161][ T5684] __arm64_sys_sendmsg+0x80/0x94 [ 89.953688][ T5684] invoke_syscall+0x98/0x2c0 [ 89.955049][ T5684] el0_svc_common+0x138/0x258 [ 89.956479][ T5684] do_el0_svc+0x64/0x218 [ 89.957784][ T5684] el0_svc+0x58/0x168 [ 89.959035][ T5684] el0t_64_sync_handler+0x84/0xf0 [ 89.960636][ T5684] el0t_64_sync+0x18c/0x190 [ 89.962039][ T5684] [ 89.962039][ T5684] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 89.964250][ T5684] __lock_acquire+0x3338/0x7680 [ 89.965636][ T5684] lock_acquire+0x26c/0x7cc [ 89.966935][ T5684] __mutex_lock_common+0x190/0x21a0 [ 89.968503][ T5684] mutex_lock_nested+0x38/0x44 [ 89.969953][ T5684] team_del_slave+0x38/0x1a8 [ 89.971279][ T5684] team_device_event+0x260/0x4d0 [ 89.972799][ T5684] raw_notifier_call_chain+0xd4/0x164 [ 89.974352][ T5684] unregister_netdevice_many+0xe44/0x175c [ 89.976084][ T5684] unregister_netdevice_queue+0x2d0/0x31c [ 89.977773][ T5684] _cfg80211_unregister_wdev+0x16c/0x6cc [ 89.979477][ T5684] cfg80211_unregister_wdev+0x24/0x34 [ 89.981044][ T5684] ieee80211_if_remove+0x1a4/0x2a8 [ 89.982589][ T5684] ieee80211_del_iface+0x20/0x34 [ 89.984045][ T5684] cfg80211_remove_virtual_intf+0x280/0x548 [ 89.985744][ T5684] nl80211_del_interface+0x110/0x12c [ 89.987364][ T5684] genl_rcv_msg+0x948/0xc2c [ 89.988727][ T5684] netlink_rcv_skb+0x20c/0x3b8 [ 89.990124][ T5684] genl_rcv+0x38/0x50 [ 89.991335][ T5684] netlink_unicast+0x65c/0x898 [ 89.992734][ T5684] netlink_sendmsg+0x834/0xb18 [ 89.994153][ T5684] ____sys_sendmsg+0x55c/0x848 [ 89.995529][ T5684] __sys_sendmsg+0x26c/0x33c [ 89.996897][ T5684] __arm64_sys_sendmsg+0x80/0x94 [ 89.998410][ T5684] invoke_syscall+0x98/0x2c0 [ 89.999754][ T5684] el0_svc_common+0x138/0x258 [ 90.001139][ T5684] do_el0_svc+0x64/0x218 [ 90.002358][ T5684] el0_svc+0x58/0x168 [ 90.003602][ T5684] el0t_64_sync_handler+0x84/0xf0 [ 90.005003][ T5684] el0t_64_sync+0x18c/0x190 [ 90.006363][ T5684] [ 90.006363][ T5684] other info that might help us debug this: [ 90.006363][ T5684] [ 90.009096][ T5684] Possible unsafe locking scenario: [ 90.009096][ T5684] [ 90.011069][ T5684] CPU0 CPU1 [ 90.012546][ T5684] ---- ---- [ 90.013991][ T5684] lock(&rdev->wiphy.mtx); [ 90.015191][ T5684] lock(team->team_lock_key); [ 90.017073][ T5684] lock(&rdev->wiphy.mtx); [ 90.018962][ T5684] lock(team->team_lock_key); [ 90.020220][ T5684] [ 90.020220][ T5684] *** DEADLOCK *** [ 90.020220][ T5684] [ 90.022420][ T5684] 3 locks held by syz-executor.1/5684: [ 90.023795][ T5684] #0: ffff800017e8c7f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 90.025992][ T5684] #1: ffff800017e31988 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 90.028329][ T5684] #2: ffff0000c33007c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x104/0x12c [ 90.031044][ T5684] [ 90.031044][ T5684] stack backtrace: [ 90.032600][ T5684] CPU: 0 PID: 5684 Comm: syz-executor.1 Not tainted 6.1.94-syzkaller #0 [ 90.034801][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 90.037374][ T5684] Call trace: [ 90.038244][ T5684] dump_backtrace+0x1c8/0x1f4 [ 90.039445][ T5684] show_stack+0x2c/0x3c [ 90.040500][ T5684] dump_stack_lvl+0x108/0x170 [ 90.041680][ T5684] dump_stack+0x1c/0x5c [ 90.042770][ T5684] print_circular_bug+0x150/0x1b8 [ 90.044087][ T5684] check_noncircular+0x2cc/0x378 [ 90.045384][ T5684] __lock_acquire+0x3338/0x7680 [ 90.046649][ T5684] lock_acquire+0x26c/0x7cc [ 90.047900][ T5684] __mutex_lock_common+0x190/0x21a0 [ 90.049279][ T5684] mutex_lock_nested+0x38/0x44 [ 90.050539][ T5684] team_del_slave+0x38/0x1a8 [ 90.051796][ T5684] team_device_event+0x260/0x4d0 [ 90.053151][ T5684] raw_notifier_call_chain+0xd4/0x164 [ 90.054649][ T5684] unregister_netdevice_many+0xe44/0x175c [ 90.056175][ T5684] unregister_netdevice_queue+0x2d0/0x31c [ 90.057645][ T5684] _cfg80211_unregister_wdev+0x16c/0x6cc [ 90.059108][ T5684] cfg80211_unregister_wdev+0x24/0x34 [ 90.060555][ T5684] ieee80211_if_remove+0x1a4/0x2a8 [ 90.061894][ T5684] ieee80211_del_iface+0x20/0x34 [ 90.063288][ T5684] cfg80211_remove_virtual_intf+0x280/0x548 [ 90.064876][ T5684] nl80211_del_interface+0x110/0x12c [ 90.066332][ T5684] genl_rcv_msg+0x948/0xc2c [ 90.067532][ T5684] netlink_rcv_skb+0x20c/0x3b8 [ 90.068837][ T5684] genl_rcv+0x38/0x50 [ 90.069924][ T5684] netlink_unicast+0x65c/0x898 [ 90.071182][ T5684] netlink_sendmsg+0x834/0xb18 [ 90.072437][ T5684] ____sys_sendmsg+0x55c/0x848 [ 90.073695][ T5684] __sys_sendmsg+0x26c/0x33c [ 90.074905][ T5684] __arm64_sys_sendmsg+0x80/0x94 [ 90.076162][ T5684] invoke_syscall+0x98/0x2c0 [ 90.077405][ T5684] el0_svc_common+0x138/0x258 [ 90.078626][ T5684] do_el0_svc+0x64/0x218 [ 90.079730][ T5684] el0_svc+0x58/0x168 [ 90.080725][ T5684] el0t_64_sync_handler+0x84/0xf0 [ 90.082010][ T5684] el0t_64_sync+0x18c/0x190 [ 90.086812][ T5684] team0: Port device wlan1 removed 1970/01/01 00:01:30 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF