last executing test programs: 18.811735355s ago: executing program 1 (id=635): r0 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000500)=""/137, &(0x7f0000000100)=0x89) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f080, 0x1}) 15.516726845s ago: executing program 1 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) 13.457483006s ago: executing program 1 (id=655): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setuid(0xee01) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 10.225434265s ago: executing program 0 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000480)) 10.224805775s ago: executing program 1 (id=668): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_clone(0x21209000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x75b5, &(0x7f0000000380)={0x0, 0x8b15, 0x8, 0x7ffe, 0x2d9}, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 8.847356546s ago: executing program 1 (id=670): readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) 6.467516392s ago: executing program 0 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x8100, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100000, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xffffffff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x3, 0x0, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000380)={0x0, 0x0, 0x0}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000a00)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54eae34f11a5a480d21158057"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) 6.335934684s ago: executing program 3 (id=683): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) 5.25734285s ago: executing program 2 (id=685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 5.138894692s ago: executing program 1 (id=686): sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x4000090) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.135141852s ago: executing program 3 (id=687): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) 5.072073333s ago: executing program 2 (id=688): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa080, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000002, 0x5d032, r0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYRES32=0x1, @ANYBLOB="000000000800000000000000000000000000000036dca606f91a2f1a0f55bfc9896426e80432dd2bf95315860e64fc5a8504e1b397d0321bc92c4fb76b22ea3c13ee46cae3100f9ea540b6d3c59577435e5a3261e052ce5eefbdb50da7da0b149add68cda8fd30cb377f3f66d62b52e14eeec8aa6295", @ANYRES32=0x0, @ANYBLOB], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000040), 0x0}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x2) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.975002275s ago: executing program 3 (id=689): openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1a43) shutdown(0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r4, 0x0, 0x0) getgroups(0x0, 0x0) 4.841334806s ago: executing program 0 (id=690): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000100b060100000000000001090224000100003000090400000103000100092100000001224500090581eb15"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x1, 0x45, {0x45, 0xe, "f9d9855d539b05fb0f4526c99263e5d04046bd6e0be4b2368edc697a47e365f91576f85e877a54394e0516a6516a69f346f27665c294e6d0be5c203fe45ffba21b1ee6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.729195663s ago: executing program 2 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000480)) 3.214966861s ago: executing program 4 (id=693): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_clone(0x21209000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.052053303s ago: executing program 2 (id=694): setresuid(0xee00, 0xee01, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000002c0)) 2.939668175s ago: executing program 2 (id=695): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffffffe}, 0x1c) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) 2.939285695s ago: executing program 4 (id=696): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x40804}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000000010104000000000000000002000000240008000000018008000100e020000108000200e00000810c00028005000100000000000800034000003408"], 0x40}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700052aad4e7c0020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b744b06c79"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/protocols\x00') bpf$PROG_LOAD(0x5, 0x0, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 2.869709647s ago: executing program 3 (id=697): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.64707546s ago: executing program 3 (id=698): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) 1.688343504s ago: executing program 4 (id=699): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700, 0x20}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.574318426s ago: executing program 4 (id=700): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000000)={0x7, @raw_data="5499691b9331ff660dcfbb4a4030d50162cec25135f460c6161836e6518ff2908cb455fe96a102cf242d1f2e85dfec97edc39a9e5bca0237c72f37dbae62ac536d93baa88740ae6ae52186ab3061b5c60b4563d6d937e1fbd7690ebb5d85aaa7e08eff2443a8e756d865d4b5f2d75653f9c721651d846cf0d3421e61c586a41932b5b1b1b0d4645a0300158a08a46a4d5d52d3645b6fa2050ad4a24811080830fc961f45ecdfc75afd64646810d2877936142bbceb185f9ada1bb4a58e52ec49ab01c7da28c8868e"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1, 0xc0800) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000280)={0x1dbd, 0x5, [{0xa, 0x1}, {0x2}, {0xd}, {0x6, 0x1}, {0x3, 0x1}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x24) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r5, 0x0, &(0x7f0000001140)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) 1.474776267s ago: executing program 0 (id=701): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) 1.474373358s ago: executing program 2 (id=702): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa080, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000002, 0x5d032, r0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYRES32=0x1, @ANYBLOB="000000000800000000000000000000000000000036dca606f91a2f1a0f55bfc9896426e80432dd2bf95315860e64fc5a8504e1b397d0321bc92c4fb76b22ea3c13ee46cae3100f9ea540b6d3c59577435e5a3261e052ce5eefbdb50da7da0b149add68cda8fd30cb377f3f66d62b52e14eeec8aa6295", @ANYRES32=0x0, @ANYBLOB], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000040), 0x0}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x2) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 806.557078ms ago: executing program 0 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4) 697.533479ms ago: executing program 3 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000480)) 390.820204ms ago: executing program 4 (id=705): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0xd3, &(0x7f0000000400)={0x0, 0x4, 0x100, 0x0, 0x22e}, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 180.358497ms ago: executing program 4 (id=706): write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) read$hiddev(r3, &(0x7f0000000080)=""/39, 0x27) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket(0x2b, 0x1, 0x1) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 0 (id=707): openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1a43) shutdown(0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r4, 0x0, 0x0) getgroups(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. syzkaller login: [ 45.229285][ T4013] cgroup: Unknown subsys name 'net' [ 45.488697][ T4013] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.884929][ T4013] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 47.357124][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 47.387971][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 47.440451][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 47.489031][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.491270][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.494243][ T4023] device bridge_slave_0 entered promiscuous mode [ 47.509139][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 47.527238][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.529358][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.534667][ T4023] device bridge_slave_1 entered promiscuous mode [ 47.594267][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.596329][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.599101][ T4026] device bridge_slave_0 entered promiscuous mode [ 47.610686][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.628974][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.631228][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.634585][ T4026] device bridge_slave_1 entered promiscuous mode [ 47.637201][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.639253][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.645751][ T4030] device bridge_slave_0 entered promiscuous mode [ 47.651332][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.668935][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.671031][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.674159][ T4030] device bridge_slave_1 entered promiscuous mode [ 47.716299][ T4023] team0: Port device team_slave_0 added [ 47.718413][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.720522][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.723540][ T4031] device bridge_slave_0 entered promiscuous mode [ 47.728171][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.730962][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.734210][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.737167][ T4031] device bridge_slave_1 entered promiscuous mode [ 47.741552][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.746313][ T4023] team0: Port device team_slave_1 added [ 47.752412][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.768006][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.770988][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 47.817850][ T4026] team0: Port device team_slave_0 added [ 47.821726][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.826801][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.846181][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.848208][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.855541][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.860729][ T4026] team0: Port device team_slave_1 added [ 47.870027][ T4030] team0: Port device team_slave_0 added [ 47.874121][ T4031] team0: Port device team_slave_0 added [ 47.881476][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.884210][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.891640][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.901889][ T4030] team0: Port device team_slave_1 added [ 47.904838][ T4031] team0: Port device team_slave_1 added [ 47.959753][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.961710][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.969534][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.974225][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.976225][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.983310][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.995299][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.997367][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.005281][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.030277][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.034834][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.043094][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.046912][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.048967][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.056571][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.060192][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.065881][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.068878][ T4025] device bridge_slave_0 entered promiscuous mode [ 48.079618][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.081675][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.092381][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.105311][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.107506][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.110486][ T4025] device bridge_slave_1 entered promiscuous mode [ 48.164576][ T4023] device hsr_slave_0 entered promiscuous mode [ 48.212734][ T4023] device hsr_slave_1 entered promiscuous mode [ 48.301809][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.354396][ T4026] device hsr_slave_0 entered promiscuous mode [ 48.402756][ T4026] device hsr_slave_1 entered promiscuous mode [ 48.442404][ T4026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.444898][ T4026] Cannot create hsr debugfs directory [ 48.461560][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.504252][ T4031] device hsr_slave_0 entered promiscuous mode [ 48.542645][ T4031] device hsr_slave_1 entered promiscuous mode [ 48.582419][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.584599][ T4031] Cannot create hsr debugfs directory [ 48.724165][ T4030] device hsr_slave_0 entered promiscuous mode [ 48.772626][ T4030] device hsr_slave_1 entered promiscuous mode [ 48.822343][ T4030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.824624][ T4030] Cannot create hsr debugfs directory [ 48.834540][ T4025] team0: Port device team_slave_0 added [ 48.838110][ T4025] team0: Port device team_slave_1 added [ 48.876969][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.879145][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.887275][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.891739][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.894004][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.901405][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.054390][ T4025] device hsr_slave_0 entered promiscuous mode [ 49.102589][ T4025] device hsr_slave_1 entered promiscuous mode [ 49.113031][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 49.142292][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.144524][ T4025] Cannot create hsr debugfs directory [ 49.192620][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 49.194827][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 49.202603][ T4024] Bluetooth: hci4: command 0x0409 tx timeout [ 49.204606][ T4024] Bluetooth: hci1: command 0x0409 tx timeout [ 49.293446][ T4023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.365396][ T4023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.404850][ T4023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.458612][ T4023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.526285][ T4031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.569273][ T4031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.607140][ T4031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.668470][ T4031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.746127][ T4030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.785225][ T4030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.828783][ T4030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.887915][ T4030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.955910][ T4025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.013466][ T4025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.056764][ T4025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.099909][ T4025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.141908][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.166000][ T4026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.213103][ T4026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.254870][ T4026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.277892][ T4026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.320105][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.323844][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.337405][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.359470][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.364244][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.367582][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.369831][ T1682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.373789][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.381157][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.407219][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.410830][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.416568][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.418679][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.437761][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.444272][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.455313][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.464167][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.466971][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.469789][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.475536][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.478525][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.480513][ T1682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.484467][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.490882][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.519130][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.521905][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.528400][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.531744][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.536119][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.539254][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.543162][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.545911][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.548777][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.568003][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.571008][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.574285][ T1682] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.576526][ T1682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.578967][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.581987][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.600609][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.604412][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.607320][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.610387][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.615426][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.618622][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.621461][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.626091][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.630973][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.643614][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.647268][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.659043][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.663903][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.666841][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.669465][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.671456][ T1682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.675263][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.678149][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.681283][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.706647][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.727807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.731276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.735477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.738552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.741194][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.743254][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.746455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.752035][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.776503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.779623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.790701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.810575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.814684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.817778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.820513][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.822618][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.828766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.833162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.836085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.854437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.857619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.860592][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.862730][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.866596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.869458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.880876][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.895704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.898786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.901934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.911140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.919693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.929878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.939763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.944175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.947152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.953368][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.968827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.971223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.978213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.980450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.983626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.986305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.999649][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.007470][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.013569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.016580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.019498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.030155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.036515][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.044126][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.066282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.069211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.071944][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.073973][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.085150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.088645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.091465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.096147][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.098210][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.119755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.123011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.125968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.146153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.165461][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.169536][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.175599][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.180565][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.188976][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.191409][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.193955][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 51.196410][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.199765][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.208250][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.211212][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.214279][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.220385][ T4031] device veth0_vlan entered promiscuous mode [ 51.246988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.250110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.253438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.256477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.259284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.261619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.268920][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.272791][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 51.274624][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 51.276402][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 51.278188][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 51.287980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.291036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.297719][ T4031] device veth1_vlan entered promiscuous mode [ 51.307095][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.311154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.319786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.324591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.328253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.331142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.344762][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.349410][ T4023] device veth0_vlan entered promiscuous mode [ 51.399806][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.408509][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.411449][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.420628][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.431237][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.438702][ T4023] device veth1_vlan entered promiscuous mode [ 51.449910][ T4031] device veth0_macvtap entered promiscuous mode [ 51.476934][ T4031] device veth1_macvtap entered promiscuous mode [ 51.490704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.494674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.497591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.501339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.506501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.509479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.514531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.517423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.522879][ T4030] device veth0_vlan entered promiscuous mode [ 51.551375][ T4030] device veth1_vlan entered promiscuous mode [ 51.560108][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.575576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.578311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.581179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.584668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.586988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.589242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.592730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.598937][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.611153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.614322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.617889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.620921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.624982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.630602][ T4023] device veth0_macvtap entered promiscuous mode [ 51.639227][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.650081][ T4031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.652803][ T4031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.655314][ T4031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.657766][ T4031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.662854][ T4023] device veth1_macvtap entered promiscuous mode [ 51.690189][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.695330][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.699418][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.703518][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.728975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.732949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.737785][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.741131][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.746000][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.755430][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.758427][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.774978][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.778042][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.782140][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.787665][ T4030] device veth0_macvtap entered promiscuous mode [ 51.796870][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.800053][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.812027][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.815746][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.818717][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.821937][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.831003][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.843335][ T4030] device veth1_macvtap entered promiscuous mode [ 51.854024][ T4025] device veth0_vlan entered promiscuous mode [ 51.860869][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.863834][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.866195][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.868673][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.881675][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.885697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.888559][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.891448][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.895353][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.924556][ T4026] device veth0_vlan entered promiscuous mode [ 51.938751][ T4025] device veth1_vlan entered promiscuous mode [ 51.977267][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.980547][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.984692][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.987716][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.991947][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.998092][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.001014][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.004079][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.006983][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.010936][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.021821][ T4026] device veth1_vlan entered promiscuous mode [ 52.033253][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.036143][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.038904][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.041722][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.046008][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.049078][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.051901][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.078760][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.081214][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.089107][ T4030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.091854][ T4030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.095794][ T4030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.098404][ T4030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.119133][ T4025] device veth0_macvtap entered promiscuous mode [ 52.121985][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.125474][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.128361][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.131967][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.147153][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.165830][ T4025] device veth1_macvtap entered promiscuous mode [ 52.204776][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.207136][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.209178][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.214437][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.217402][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.220300][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.223855][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.226900][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.231563][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.261098][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.265512][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.268350][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.271361][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.281161][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.285610][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.300453][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.303721][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.306622][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.309549][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.313444][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.316550][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.320989][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.332837][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.336221][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.352854][ T4025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.354941][ T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.355385][ T4025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.357711][ T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.360432][ T4025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.367638][ T4025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.395306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.418346][ T4026] device veth0_macvtap entered promiscuous mode [ 52.436804][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.439517][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.439531][ T4026] device veth1_macvtap entered promiscuous mode [ 52.448221][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.451130][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.458679][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.468015][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.470600][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.499910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.528041][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.531481][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.541976][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.558171][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.561028][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.571219][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.574797][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.577672][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.581839][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.620727][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.629570][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.725527][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.728550][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.731631][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.741328][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.752762][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.755596][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.758480][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.761293][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.771089][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.776142][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.633042][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.779666][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.799162][ T4120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.801680][ T4120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.826456][ T4120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.829151][ T4120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.856088][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 54.860733][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 54.865507][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 54.868410][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 54.871593][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 54.890397][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.914614][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.917889][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.921855][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.996971][ T4026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.001747][ T4026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.008902][ T4026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.013603][ T4026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.403729][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.533172][ T4127] sched: RT throttling activated [ 56.935483][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.937947][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.959280][ T25] Bluetooth: hci4: command 0x0419 tx timeout [ 56.963050][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 56.964910][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 56.969020][ T25] Bluetooth: hci0: command 0x0419 tx timeout [ 56.970871][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 56.996601][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.070608][ T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.940324][ T4153] Zero length message leads to an empty skb [ 58.979820][ T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.085264][ T4155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 59.089573][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.167045][ T4157] loop7: detected capacity change from 0 to 16384 [ 60.213560][ T227] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 60.217080][ T227] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 65.720055][ T4205] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 66.357314][ T4212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 66.371725][ T4212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 66.385565][ T4212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 67.544820][ T4218] loop7: detected capacity change from 0 to 16384 [ 68.990363][ T4232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 69.005771][ T4232] netlink: 'syz.0.34': attribute type 2 has an invalid length. [ 69.060642][ T4236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.37'. [ 69.683625][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.686050][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.856010][ T1534] cfg80211: failed to load regulatory.db [ 75.112619][ T4258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.42'. [ 75.170179][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 78.455200][ T4321] could not allocate digest TFM handle sha384-avx2 [ 78.920843][ T4330] netlink: 'syz.0.66': attribute type 10 has an invalid length. [ 78.937486][ T4330] team0: Device hsr_slave_0 failed to register rx_handler [ 80.110419][ T4349] binder: 4340:4349 tried to acquire reference to desc 0, got 1 instead [ 80.114178][ T4349] binder: 4340:4349 got transaction with invalid data ptr [ 80.116515][ T4349] binder: 4340:4349 transaction failed 29201/-14, size 0-24 line 3186 [ 81.362238][ T4076] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.559679][ T4417] netlink: 'syz.4.90': attribute type 10 has an invalid length. [ 85.599172][ T4417] team0: Device hsr_slave_0 failed to register rx_handler [ 87.594264][ T4460] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 87.603206][ T4460] team0: Device hsr_slave_0 failed to register rx_handler [ 87.812647][ T4475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.112'. [ 88.750047][ T4500] udc-core: couldn't find an available UDC or it's busy [ 88.792734][ T4500] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.484973][ T4548] udc-core: couldn't find an available UDC or it's busy [ 91.486993][ T4548] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.771264][ T4029] Bluetooth: hci4: link tx timeout [ 93.773055][ T4029] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 95.393271][ T4603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 95.510689][ T4607] device vti0 entered promiscuous mode [ 95.721826][ T4623] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 96.469816][ T4039] Bluetooth: hci4: command 0x0406 tx timeout [ 97.527344][ T4652] process 'syz.2.162' launched './file2' with NULL argv: empty string added [ 98.142649][ T4039] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.802313][ T4039] usb 1-1: config 0 has no interfaces? [ 98.804469][ T4039] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.806999][ T4039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.834973][ T4039] usb 1-1: config 0 descriptor?? [ 102.287836][ T26] audit: type=1326 audit(102.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.063977][ T26] audit: type=1326 audit(102.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.079843][ T26] audit: type=1326 audit(102.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.140331][ T26] audit: type=1326 audit(102.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.152419][ T26] audit: type=1326 audit(102.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.158825][ T26] audit: type=1326 audit(103.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.169697][ T26] audit: type=1326 audit(103.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.180620][ T26] audit: type=1326 audit(103.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.422033][ T26] audit: type=1326 audit(103.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 103.725666][ T26] audit: type=1326 audit(103.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff979a8728 code=0x7ffc0000 [ 105.803162][ T4762] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 110.047076][ T4830] netlink: 35 bytes leftover after parsing attributes in process `syz.4.211'. [ 110.098685][ T4077] usb 1-1: USB disconnect, device number 3 [ 110.105825][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'. [ 116.853002][ T4899] ipt_CLUSTERIP: Please specify destination IP [ 117.374867][ T4039] Bluetooth: hci5: command 0x1003 tx timeout [ 117.377328][ T4033] Bluetooth: hci5: sending frame failed (-49) [ 119.787826][ T4916] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 120.065533][ T4921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 120.076349][ T4041] Bluetooth: hci5: command 0x1001 tx timeout [ 120.078439][ T4033] Bluetooth: hci5: sending frame failed (-49) [ 120.183940][ T4919] syz.0.238 uses obsolete (PF_INET,SOCK_PACKET) [ 122.204098][ T4675] Bluetooth: hci5: command 0x1009 tx timeout [ 124.256426][ T4972] udc-core: couldn't find an available UDC or it's busy [ 124.285169][ T4972] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.362911][ T4975] sctp: [Deprecated]: syz.3.254 (pid 4975) Use of int in maxseg socket option. [ 124.362911][ T4975] Use struct sctp_assoc_value instead [ 130.468486][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 131.114194][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.116036][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.484856][ T5046] sctp: [Deprecated]: syz.0.277 (pid 5046) Use of int in maxseg socket option. [ 131.484856][ T5046] Use struct sctp_assoc_value instead [ 137.961929][ T5096] sctp: [Deprecated]: syz.2.292 (pid 5096) Use of int in maxseg socket option. [ 137.961929][ T5096] Use struct sctp_assoc_value instead [ 139.930950][ T5109] sp0: Synchronizing with TNC [ 139.978304][ T5108] [U] è [ 140.020693][ T4121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.120161][ T4121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.355693][ T4121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.293775][ T5143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.308'. [ 141.301410][ T5147] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 142.135089][ T4121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.386851][ T4077] Bluetooth: hci0: command 0x0409 tx timeout [ 142.406859][ T5129] chnl_net:caif_netlink_parms(): no params data found [ 144.346373][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.398135][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.432165][ T5129] device bridge_slave_0 entered promiscuous mode [ 144.490144][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.523571][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.583391][ T5129] device bridge_slave_1 entered promiscuous mode [ 144.614980][ T1960] Bluetooth: hci0: command 0x041b tx timeout [ 144.870939][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.876960][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.700819][ T148] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.707013][ T148] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.709100][ T1682] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.934209][ T5198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.936739][ T5198] IPv6: NLM_F_CREATE should be set when creating new route [ 145.981328][ T5129] team0: Port device team_slave_0 added [ 146.018699][ T5129] team0: Port device team_slave_1 added [ 146.210657][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.212729][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.241313][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.834807][ T4077] Bluetooth: hci0: command 0x040f tx timeout [ 146.953400][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.963262][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.997478][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.123941][ T5213] device vlan2 entered promiscuous mode [ 147.180463][ T5129] device hsr_slave_0 entered promiscuous mode [ 147.220216][ T5129] device hsr_slave_1 entered promiscuous mode [ 147.369500][ T5129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.371689][ T5129] Cannot create hsr debugfs directory [ 147.971760][ T4077] Bluetooth: hci5: command 0x1003 tx timeout [ 147.973635][ T4029] Bluetooth: hci5: sending frame failed (-49) [ 149.069599][ T4968] Bluetooth: hci0: command 0x0419 tx timeout [ 149.077190][ T5253] netlink: 'syz.4.334': attribute type 7 has an invalid length. [ 149.080487][ T5253] netlink: 'syz.4.334': attribute type 8 has an invalid length. [ 150.170320][ T4077] Bluetooth: hci5: command 0x1001 tx timeout [ 150.172419][ T4029] Bluetooth: hci5: sending frame failed (-49) [ 150.687419][ T4121] device hsr_slave_0 left promiscuous mode [ 150.731918][ T4121] device hsr_slave_1 left promiscuous mode [ 150.908780][ T4121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.911634][ T4121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.919064][ T4121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.921207][ T4121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.949868][ T4121] device bridge_slave_1 left promiscuous mode [ 150.958482][ T4121] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.035783][ T4121] device bridge_slave_0 left promiscuous mode [ 151.045045][ T4121] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.239916][ T4121] device veth1_macvtap left promiscuous mode [ 151.242245][ T4121] device veth0_macvtap left promiscuous mode [ 151.244152][ T4121] device veth1_vlan left promiscuous mode [ 151.246955][ T4121] device veth0_vlan left promiscuous mode [ 151.409236][ T4121] bond1 (unregistering): Released all slaves [ 152.404802][ T4968] Bluetooth: hci5: command 0x1009 tx timeout [ 152.571208][ T5304] input: syz0 as /devices/virtual/input/input2 [ 152.627105][ T4121] team0 (unregistering): Port device team_slave_1 removed [ 152.659143][ T4121] team0 (unregistering): Port device team_slave_0 removed [ 152.680619][ T4121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.755145][ T4121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.628554][ T26] audit: type=1326 audit(152.669:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 153.645081][ T26] audit: type=1326 audit(152.678:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 153.653827][ T26] audit: type=1326 audit(152.687:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 153.671186][ T4121] bond0 (unregistering): Released all slaves [ 153.679624][ T26] audit: type=1326 audit(152.687:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.4.351" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2182728 code=0x0 [ 153.834014][ T5129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.885507][ T5129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.011921][ T5129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.139297][ T5129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.367298][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.376526][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.379396][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.385079][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.415423][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.427573][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.441004][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.443327][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.454505][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.462053][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.469234][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.471323][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.476227][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.493550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.514653][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.519230][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.526825][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.552455][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.571675][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.579081][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.584293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.611062][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.652521][ T5129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.661815][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.679062][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.688192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.821223][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.825305][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.937996][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.027085][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.031743][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.998157][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.001418][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.036249][ T5129] device veth0_vlan entered promiscuous mode [ 157.784150][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.786811][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.831654][ T5129] device veth1_vlan entered promiscuous mode [ 157.915646][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.905877][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.938086][ T5129] device veth0_macvtap entered promiscuous mode [ 159.317585][ T5129] device veth1_macvtap entered promiscuous mode [ 160.179582][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.182654][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.231103][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.233972][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.236726][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.239670][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.446853][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.454998][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.416308][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.428144][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.437999][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.447678][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.458548][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.490051][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.546093][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.559035][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.569137][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.584733][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.597209][ T5129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.599854][ T5129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.602221][ T5129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.604608][ T5129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.624467][ T136] Bluetooth: hci5: Frame reassembly failed (-84) [ 161.964305][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.968378][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.390768][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.703993][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.834563][ T1682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.837003][ T1682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.841678][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.463607][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.466165][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.504965][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.683599][ T25] Bluetooth: hci5: command 0x1003 tx timeout [ 163.686181][ T4029] Bluetooth: hci5: sending frame failed (-49) [ 164.993604][ T5482] udc-core: couldn't find an available UDC or it's busy [ 164.995715][ T5482] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.906922][ T4151] Bluetooth: hci5: command 0x1001 tx timeout [ 165.910278][ T4029] Bluetooth: hci5: sending frame failed (-49) [ 168.223744][ T4110] Bluetooth: hci5: command 0x1009 tx timeout [ 169.611952][ T26] audit: type=1326 audit(167.616:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.1.407" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd0c4728 code=0x0 [ 169.826192][ T5563] misc userio: Begin command sent, but we're already running [ 170.333157][ T5574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'. [ 170.348441][ T5574] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 175.299173][ T5635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.950497][ T5647] netlink: 712 bytes leftover after parsing attributes in process `syz.2.436'. [ 177.201776][ T4041] Bluetooth: hci3: command 0x0406 tx timeout [ 177.203715][ T4041] Bluetooth: hci2: command 0x0406 tx timeout [ 177.205457][ T4041] Bluetooth: hci1: command 0x0406 tx timeout [ 178.535429][ T5676] netlink: 180 bytes leftover after parsing attributes in process `syz.3.446'. [ 178.759341][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.763877][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.766188][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.465358][ T5705] netlink: 192 bytes leftover after parsing attributes in process `syz.3.455'. [ 180.793208][ T5716] xt_hashlimit: size too large, truncated to 1048576 [ 183.259556][ T5721] binder: 5708:5721 ioctl c0306201 0 returned -14 [ 183.263495][ T5721] netlink: 'syz.1.457': attribute type 10 has an invalid length. [ 183.281147][ T5719] netlink: 'syz.0.459': attribute type 3 has an invalid length. [ 183.288255][ T5721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.457'. [ 183.302531][ T5719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 183.314921][ T5721] device batadv0 entered promiscuous mode [ 183.340488][ T5721] bridge0: port 3(batadv0) entered blocking state [ 184.313628][ T5705] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 184.339558][ T5721] bridge0: port 3(batadv0) entered disabled state [ 184.366146][ T4674] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 184.369112][ T4674] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 184.372817][ T5721] bridge0: port 3(batadv0) entered blocking state [ 184.375026][ T5721] bridge0: port 3(batadv0) entered forwarding state [ 185.063044][ T5736] xt_recent: Unsupported userspace flags (000000de) [ 185.102049][ T5731] netlink: 80 bytes leftover after parsing attributes in process `syz.0.461'. [ 185.852677][ T5750] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 185.862975][ T5750] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 185.887230][ T5750] bridge0: port 3(batadv0) entered disabled state [ 185.889417][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.892409][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.944015][ T5750] bridge0: port 3(batadv0) entered blocking state [ 186.946005][ T5750] bridge0: port 3(batadv0) entered forwarding state [ 186.947993][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.949935][ T5750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.952015][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.954062][ T5750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.059156][ T5750] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 187.062285][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 187.096639][ T5758] bridge0: port 3(batadv0) entered disabled state [ 187.307219][ T5758] device bridge_slave_1 left promiscuous mode [ 187.309522][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.372715][ T5768] binder: 5759:5768 tried to acquire reference to desc 0, got 1 instead [ 187.382410][ T5768] binder: 5759:5768 not enough space to store 5 fds in buffer [ 187.385329][ T5768] binder: 5759:5768 transaction failed 29201/-22, size 96-24 line 3331 [ 187.920558][ T4077] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.061636][ T5758] device bridge_slave_0 left promiscuous mode [ 188.063761][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.127617][ T5758] bond0: (slave bridge0): Releasing backup interface [ 188.541398][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 193.023375][ T5831] mmap: syz.3.499 (5831) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 193.399276][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 194.405837][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.497034][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.529067][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.875554][ T5879] ======================================================= [ 196.875554][ T5879] WARNING: The mand mount option has been deprecated and [ 196.875554][ T5879] and is ignored by this kernel. Remove the mand [ 196.875554][ T5879] option from the mount to silence this warning. [ 196.875554][ T5879] ======================================================= [ 196.895306][ T5879] MTD: Couldn't look up './file1': -15 [ 198.010809][ T5892] netlink: 248 bytes leftover after parsing attributes in process `syz.2.506'. [ 200.073465][ T5908] binder: 5903:5908 tried to acquire reference to desc 0, got 1 instead [ 200.081941][ T5908] binder: 5903:5908 not enough space to store 5 fds in buffer [ 200.084790][ T5908] binder: 5903:5908 transaction failed 29201/-22, size 96-24 line 3331 [ 200.707900][ T1960] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.899708][ T4151] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.009708][ T5944] tipc: Started in network mode [ 208.011571][ T5944] tipc: Node identity 7f000001, cluster identity 4711 [ 208.029468][ T5944] tipc: Enabled bearer , priority 10 [ 208.284551][ T4151] usb 1-1: config 241 has an invalid interface number: 0 but max is -1 [ 208.287086][ T4151] usb 1-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 208.289705][ T4151] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 208.292352][ T4151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.395183][ T4151] usbhid 1-1:241.0: couldn't find an input interrupt endpoint [ 208.686525][ T26] audit: type=1326 audit(204.106:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 208.742961][ T26] audit: type=1326 audit(204.125:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.001001][ T26] audit: type=1326 audit(204.134:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.177570][ T5957] input: syz0 as /devices/virtual/input/input4 [ 209.226515][ T25] tipc: Node number set to 2130706433 [ 209.242695][ T25] usb 1-1: USB disconnect, device number 4 [ 209.259104][ T26] audit: type=1326 audit(204.144:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.265686][ T26] audit: type=1326 audit(204.144:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.272051][ T26] audit: type=1326 audit(204.144:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.278295][ T26] audit: type=1326 audit(204.153:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.297844][ T26] audit: type=1326 audit(204.153:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.306659][ T26] audit: type=1326 audit(204.153:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.332203][ T26] audit: type=1326 audit(204.162:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2182728 code=0x7ffc0000 [ 209.369415][ T5962] udc-core: couldn't find an available UDC or it's busy [ 209.377909][ T5962] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.419232][ T5964] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.834845][ T5987] udc-core: couldn't find an available UDC or it's busy [ 211.837156][ T5987] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 213.953182][ T6010] udc-core: couldn't find an available UDC or it's busy [ 213.955838][ T6010] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 214.007650][ T6015] device syzkaller0 entered promiscuous mode [ 221.435772][ T6172] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 222.744458][ T6178] bond1: (slave vlan4): Opening slave failed [ 222.857812][ T6189] udc-core: couldn't find an available UDC or it's busy [ 222.859933][ T6189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 222.932237][ T6194] udc-core: couldn't find an available UDC or it's busy [ 222.934497][ T6194] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 222.954601][ T4033] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 223.006530][ T6198] netlink: 224 bytes leftover after parsing attributes in process `syz.3.598'. [ 223.081587][ T6200] binder: BC_ACQUIRE_RESULT not supported [ 223.083352][ T6200] binder: 6199:6200 ioctl c0306201 20000640 returned -22 [ 223.176630][ T4675] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.433561][ T4675] usb 1-1: Using ep0 maxpacket: 32 [ 223.561427][ T4675] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.687392][ T6209] udc-core: couldn't find an available UDC or it's busy [ 223.716189][ T6209] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 223.733385][ T4675] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 223.738989][ T4675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.741429][ T4675] usb 1-1: Product: syz [ 223.748304][ T4675] usb 1-1: Manufacturer: syz [ 223.749858][ T4675] usb 1-1: SerialNumber: syz [ 223.770903][ T4675] usb 1-1: config 0 descriptor?? [ 224.341310][ T6222] udc-core: couldn't find an available UDC or it's busy [ 224.362012][ T6222] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 224.409283][ T6224] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 224.509020][ T6224] bond1: (slave vlan2): Opening slave failed [ 225.539217][ T7] usb 1-1: USB disconnect, device number 5 [ 225.763130][ T6249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.616'. [ 225.823267][ T4675] Bluetooth: hci4: command 0x0406 tx timeout [ 228.427505][ T4033] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 228.430796][ T4033] CPU: 1 PID: 4033 Comm: kworker/u5:3 Not tainted 5.15.183-syzkaller #0 [ 228.433262][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 228.436377][ T4033] Workqueue: hci2 hci_rx_work [ 228.437790][ T4033] Call trace: [ 228.438730][ T4033] dump_backtrace+0x0/0x43c [ 228.439984][ T4033] show_stack+0x2c/0x3c [ 228.441228][ T4033] __dump_stack+0x30/0x40 [ 228.442539][ T4033] dump_stack_lvl+0xf8/0x160 [ 228.443847][ T4033] dump_stack+0x1c/0x5c [ 228.445124][ T4033] sysfs_create_dir_ns+0x22c/0x24c [ 228.446568][ T4033] kobject_add_internal+0x590/0xc54 [ 228.448129][ T4033] kobject_add+0x134/0x1f8 [ 228.449435][ T4033] device_add+0x3f0/0xf94 [ 228.450695][ T4033] hci_conn_add_sysfs+0xbc/0x1cc [ 228.452069][ T4033] le_conn_complete_evt+0x9a4/0x11bc [ 228.453567][ T4033] hci_le_meta_evt+0x85c/0x3010 [ 228.454930][ T4033] hci_event_packet+0xd10/0x11bc [ 228.456265][ T4033] hci_rx_work+0x1cc/0x880 [ 228.457514][ T4033] process_one_work+0x79c/0x1140 [ 228.458872][ T4033] worker_thread+0x8f4/0x101c [ 228.460231][ T4033] kthread+0x374/0x454 [ 228.461431][ T4033] ret_from_fork+0x10/0x20 [ 228.469516][ T4033] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 228.473471][ T4033] Bluetooth: hci2: failed to register connection device [ 235.879324][ T4151] Bluetooth: hci2: command 0x0406 tx timeout [ 238.616222][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 238.620464][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.624263][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.650852][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.654118][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.192463][ T6416] udc-core: couldn't find an available UDC or it's busy [ 241.194683][ T6416] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 241.229489][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 242.983010][ T6440] team0: No ports can be present during mode change [ 244.909531][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 244.912212][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.914295][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.926126][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.928592][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.490187][ T6475] netlink: 'syz.2.680': attribute type 8 has an invalid length. [ 246.240726][ T227] block nbd2: Attempted send on invalid socket [ 246.243632][ T227] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 246.248866][ T6475] SQUASHFS error: Failed to read block 0x0: -5 [ 246.250827][ T6475] unable to read squashfs_super_block [ 246.416359][ T6483] xt_hashlimit: size too large, truncated to 1048576 [ 247.091354][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 247.657983][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 247.728952][ T6501] udc-core: couldn't find an available UDC or it's busy [ 247.730996][ T6501] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 247.786318][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.789555][ T25] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 247.792281][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.807995][ T25] usb 1-1: config 0 descriptor?? [ 248.344535][ T25] macally 0003:060B:0001.0001: item fetching failed at offset 2/69 [ 248.347563][ T25] macally: probe of 0003:060B:0001.0001 failed with error -22 [ 248.558473][ T4077] usb 1-1: USB disconnect, device number 6 [ 249.057342][ T6522] netlink: 'syz.4.696': attribute type 8 has an invalid length. [ 249.095502][ T227] block nbd4: Attempted send on invalid socket [ 249.097710][ T227] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 249.101994][ T6522] SQUASHFS error: Failed to read block 0x0: -5 [ 249.104089][ T6522] unable to read squashfs_super_block [ 250.591276][ T6536] input: syz0 as /devices/virtual/input/input5 [ 252.501907][ T6548] [ 252.502625][ T6548] ====================================================== [ 252.504584][ T6548] WARNING: possible circular locking dependency detected [ 252.506544][ T6548] 5.15.183-syzkaller #0 Not tainted [ 252.508010][ T6548] ------------------------------------------------------ [ 252.509986][ T6548] syz.4.706/6548 is trying to acquire lock: [ 252.511575][ T6548] ffff0000e1f69450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 252.514875][ T6548] [ 252.514875][ T6548] but task is already holding lock: [ 252.516993][ T6548] ffff0000e1f68120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 252.519574][ T6548] [ 252.519574][ T6548] which lock already depends on the new lock. [ 252.519574][ T6548] [ 252.522544][ T6548] [ 252.522544][ T6548] the existing dependency chain (in reverse order) is: [ 252.525253][ T6548] [ 252.525253][ T6548] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 252.527486][ T6548] lock_sock_nested+0xd8/0x1d4 [ 252.528965][ T6548] smc_listen_out+0x11c/0x3e8 [ 252.530467][ T6548] smc_listen_work+0x1d0/0xd2c [ 252.531969][ T6548] process_one_work+0x79c/0x1140 [ 252.533568][ T6548] worker_thread+0x8f4/0x101c [ 252.534975][ T6548] kthread+0x374/0x454 [ 252.536303][ T6548] ret_from_fork+0x10/0x20 [ 252.537634][ T6548] [ 252.537634][ T6548] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 252.540494][ T6548] __lock_acquire+0x2928/0x651c [ 252.541982][ T6548] lock_acquire+0x1f4/0x620 [ 252.543398][ T6548] __flush_work+0xf4/0x1bc [ 252.544819][ T6548] __cancel_work_timer+0x2ec/0x448 [ 252.546424][ T6548] cancel_work_sync+0x24/0x38 [ 252.547929][ T6548] smc_clcsock_release+0x64/0xe8 [ 252.549437][ T6548] __smc_release+0x3bc/0x530 [ 252.550935][ T6548] smc_close_non_accepted+0xdc/0x298 [ 252.552572][ T6548] smc_close_active+0x890/0xc20 [ 252.554088][ T6548] __smc_release+0x2dc/0x530 [ 252.555515][ T6548] smc_release+0x264/0x568 [ 252.556920][ T6548] sock_close+0xb4/0x1f8 [ 252.558252][ T6548] __fput+0x1c0/0x7f8 [ 252.559498][ T6548] ____fput+0x20/0x30 [ 252.560788][ T6548] task_work_run+0x12c/0x1e0 [ 252.562211][ T6548] do_notify_resume+0x24b4/0x3128 [ 252.563869][ T6548] el0_svc+0xf0/0x1e0 [ 252.565117][ T6548] el0t_64_sync_handler+0xcc/0xe4 [ 252.566741][ T6548] el0t_64_sync+0x1a0/0x1a4 [ 252.568186][ T6548] [ 252.568186][ T6548] other info that might help us debug this: [ 252.568186][ T6548] [ 252.571038][ T6548] Possible unsafe locking scenario: [ 252.571038][ T6548] [ 252.573248][ T6548] CPU0 CPU1 [ 252.574819][ T6548] ---- ---- [ 252.576378][ T6548] lock(sk_lock-AF_SMC/1); [ 252.577739][ T6548] lock((work_completion)(&new_smc->smc_listen_work)); [ 252.580458][ T6548] lock(sk_lock-AF_SMC/1); [ 252.582491][ T6548] lock((work_completion)(&new_smc->smc_listen_work)); [ 252.584478][ T6548] [ 252.584478][ T6548] *** DEADLOCK *** [ 252.584478][ T6548] [ 252.586821][ T6548] 2 locks held by syz.4.706/6548: [ 252.588303][ T6548] #0: ffff0000e9c3a610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 252.591371][ T6548] #1: ffff0000e1f68120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 252.594054][ T6548] [ 252.594054][ T6548] stack backtrace: [ 252.595832][ T6548] CPU: 1 PID: 6548 Comm: syz.4.706 Not tainted 5.15.183-syzkaller #0 [ 252.598232][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 252.601135][ T6548] Call trace: [ 252.602101][ T6548] dump_backtrace+0x0/0x43c [ 252.603368][ T6548] show_stack+0x2c/0x3c [ 252.604533][ T6548] __dump_stack+0x30/0x40 [ 252.605800][ T6548] dump_stack_lvl+0xf8/0x160 [ 252.607129][ T6548] dump_stack+0x1c/0x5c [ 252.608260][ T6548] print_circular_bug+0x148/0x1b0 [ 252.609645][ T6548] check_noncircular+0x240/0x2d4 [ 252.610979][ T6548] __lock_acquire+0x2928/0x651c [ 252.612381][ T6548] lock_acquire+0x1f4/0x620 [ 252.613606][ T6548] __flush_work+0xf4/0x1bc [ 252.614923][ T6548] __cancel_work_timer+0x2ec/0x448 [ 252.616398][ T6548] cancel_work_sync+0x24/0x38 [ 252.617770][ T6548] smc_clcsock_release+0x64/0xe8 [ 252.619175][ T6548] __smc_release+0x3bc/0x530 [ 252.620402][ T6548] smc_close_non_accepted+0xdc/0x298 [ 252.621909][ T6548] smc_close_active+0x890/0xc20 [ 252.623251][ T6548] __smc_release+0x2dc/0x530 [ 252.624590][ T6548] smc_release+0x264/0x568 [ 252.625850][ T6548] sock_close+0xb4/0x1f8 [ 252.627093][ T6548] __fput+0x1c0/0x7f8 [ 252.628236][ T6548] ____fput+0x20/0x30 [ 252.629402][ T6548] task_work_run+0x12c/0x1e0 [ 252.630720][ T6548] do_notify_resume+0x24b4/0x3128 [ 252.632211][ T6548] el0_svc+0xf0/0x1e0 [ 252.633328][ T6548] el0t_64_sync_handler+0xcc/0xe4 [ 252.634800][ T6548] el0t_64_sync+0x1a0/0x1a4 [ 261.877453][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.879295][ T2056] ieee802154 phy1 wpan1: encryption failed: -22