last executing test programs: 6.30429084s ago: executing program 2 (id=1136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.657261563s ago: executing program 1 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x8000, 0x0, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast2, @multicast1}}}}) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x40) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.209107168s ago: executing program 2 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x8000, 0x0, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast2, @multicast1}}}}) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x40) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.515125266s ago: executing program 0 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x18}}}}}, 0x36) 4.423542965s ago: executing program 3 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x21800000000a26, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x12, 0x1, 0x0, "da9d4f623cbe7d5f35a2a6ba9b4a06e56edcf7084000d0cc451748f162aa3179", 0x42303159}) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 4.362193591s ago: executing program 2 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x21800000000a26, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x12, 0x1, 0x0, "da9d4f623cbe7d5f35a2a6ba9b4a06e56edcf7084000d0cc451748f162aa3179", 0x42303159}) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) 3.145768501s ago: executing program 1 (id=1148): prlimit64(0x0, 0xf, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) 3.091657116s ago: executing program 1 (id=1149): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, 0xffffffffffffffff, 0x0) userfaultfd(0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.035556901s ago: executing program 2 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x18) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 2.690942095s ago: executing program 3 (id=1151): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080), 0x106, 0x2}}, 0x20) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x690, 0x0, 0x300, 0x10, 0x800, 0x7, 0x10, 0x0, {0x5, 0x3, 0x1}, {0x8000, 0x8}, {0x80, 0xb3b}, {0x8, 0x4}, 0x1, 0x1, 0xffffff05, 0x2, 0x1, 0xa3, 0x5, 0x7, 0x4001000, 0x0, 0x2, 0x6, 0xb, 0x200, 0x0, 0xa}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000003}, {0xffffffffffffffff, 0x6, 0x53e4, 0xf0}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1001502, 0x4, 0x0, 0x0, 0xc32, 0x81}}, 0xe8) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60a80, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x9}}, 0xff, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9}, &(0x7f0000000380)=0x9c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.470988827s ago: executing program 4 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x8000, 0x0, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast2, @multicast1}}}}) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x40) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x41}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2.23888466s ago: executing program 4 (id=1154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.23839426s ago: executing program 4 (id=1155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.226323651s ago: executing program 0 (id=1156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 2.163649877s ago: executing program 0 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x8000, 0x0, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast2, @multicast1}}}}) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x40) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.495267073s ago: executing program 1 (id=1159): prlimit64(0x0, 0xf, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) 1.388774833s ago: executing program 3 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x21800000000a26, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x12, 0x1, 0x0, "da9d4f623cbe7d5f35a2a6ba9b4a06e56edcf7084000d0cc451748f162aa3179", 0x42303159}) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) 1.315958161s ago: executing program 4 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x21800000000a26, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x12, 0x1, 0x0, "da9d4f623cbe7d5f35a2a6ba9b4a06e56edcf7084000d0cc451748f162aa3179", 0x42303159}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 1.306641931s ago: executing program 0 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, 0xffffffffffffffff, 0x0) userfaultfd(0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) 406.7378ms ago: executing program 3 (id=1163): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080), 0x106, 0x2}}, 0x20) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x690, 0x0, 0x300, 0x10, 0x800, 0x7, 0x10, 0x0, {0x5, 0x3, 0x1}, {0x8000, 0x8}, {0x80, 0xb3b}, {0x8, 0x4}, 0x1, 0x1, 0xffffff05, 0x2, 0x1, 0xa3, 0x5, 0x7, 0x4001000, 0x0, 0x2, 0x6, 0xb, 0x200, 0x0, 0xa}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000003}, {0xffffffffffffffff, 0x6, 0x53e4, 0xf0}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1001502, 0x4, 0x0, 0x0, 0xc32, 0x81}}, 0xe8) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60a80, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x9}}, 0xff, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9}, &(0x7f0000000380)=0x9c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 385.665982ms ago: executing program 1 (id=1164): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 373.811903ms ago: executing program 4 (id=1165): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 367.739384ms ago: executing program 3 (id=1166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x18}}}}}, 0x36) 217.661139ms ago: executing program 2 (id=1167): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xa400, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 67.555993ms ago: executing program 4 (id=1168): syz_io_uring_setup(0x534, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x84, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 0s ago: executing program 0 (id=1169): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=ANY=[@ANYBLOB="e8000000150001"], 0xe8}, 0x1, 0x0, 0x0, 0x48015}, 0x20044086) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 30.556538][ T4310] cgroup: Unknown subsys name 'net' [ 30.820034][ T4310] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.074583][ T4310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.318618][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.323287][ T4334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.324826][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.326073][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.326398][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.327548][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.329364][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.329976][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.330827][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.332135][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.333206][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.333975][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.335295][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.336197][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.336876][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.338512][ T4334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.339742][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.340678][ T4334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.341248][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.342157][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.343407][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.350298][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.352167][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.356340][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.364502][ T4324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.365893][ T4324] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.367168][ T4324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.369337][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.370812][ T4324] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.374397][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.500318][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.513814][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 32.539231][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 32.552072][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 32.572437][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.573713][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.575387][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.578303][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 32.580157][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.581304][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.582767][ T4320] device bridge_slave_1 entered promiscuous mode [ 32.593066][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.594328][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.595796][ T4330] device bridge_slave_0 entered promiscuous mode [ 32.598331][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.599424][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.600971][ T4330] device bridge_slave_1 entered promiscuous mode [ 32.610782][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.611991][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.613457][ T4321] device bridge_slave_0 entered promiscuous mode [ 32.622738][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.626135][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.629320][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.630807][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.631911][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.633345][ T4321] device bridge_slave_1 entered promiscuous mode [ 32.645383][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.660796][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.670104][ T4330] team0: Port device team_slave_0 added [ 32.677779][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.679855][ T4330] team0: Port device team_slave_1 added [ 32.683817][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.684979][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.686387][ T4329] device bridge_slave_0 entered promiscuous mode [ 32.690632][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.691785][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.693151][ T4325] device bridge_slave_0 entered promiscuous mode [ 32.695959][ T4320] team0: Port device team_slave_0 added [ 32.705088][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.706173][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.710435][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.712823][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.713899][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.715475][ T4329] device bridge_slave_1 entered promiscuous mode [ 32.716760][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.718363][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.719843][ T4325] device bridge_slave_1 entered promiscuous mode [ 32.721837][ T4320] team0: Port device team_slave_1 added [ 32.723898][ T4321] team0: Port device team_slave_0 added [ 32.725257][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.726358][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.730533][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.740984][ T4321] team0: Port device team_slave_1 added [ 32.748923][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.759037][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.760655][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.761770][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.765546][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.771221][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.772945][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.774050][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.778234][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.783077][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.784205][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.790655][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.793961][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.795755][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.796883][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.801165][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.809700][ T4329] team0: Port device team_slave_0 added [ 32.818815][ T4329] team0: Port device team_slave_1 added [ 32.868604][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.917596][ T4330] device hsr_slave_1 entered promiscuous mode [ 32.970848][ T4325] team0: Port device team_slave_0 added [ 32.972124][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.973202][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.977047][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.985061][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.986104][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.990197][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.993131][ T4325] team0: Port device team_slave_1 added [ 33.038875][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.077665][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.127375][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.128663][ T4320] Cannot create hsr debugfs directory [ 33.168429][ T4321] device hsr_slave_0 entered promiscuous mode [ 33.207592][ T4321] device hsr_slave_1 entered promiscuous mode [ 33.247349][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.248512][ T4321] Cannot create hsr debugfs directory [ 33.260014][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.261168][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.264985][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.269884][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.271044][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.274795][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.328451][ T4329] device hsr_slave_0 entered promiscuous mode [ 33.377598][ T4329] device hsr_slave_1 entered promiscuous mode [ 33.417371][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.418613][ T4329] Cannot create hsr debugfs directory [ 33.478454][ T4325] device hsr_slave_0 entered promiscuous mode [ 33.527490][ T4325] device hsr_slave_1 entered promiscuous mode [ 33.567363][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.568604][ T4325] Cannot create hsr debugfs directory [ 33.679860][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.721627][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.759978][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.799077][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.843750][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.880098][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.937392][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.988408][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.039488][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.070497][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.127833][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.178812][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.234768][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.247240][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.279305][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.318858][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.321022][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.324031][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.358446][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.397730][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 34.398885][ T4331] Bluetooth: hci1: command 0x0409 tx timeout [ 34.407642][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 34.408725][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 34.409665][ T4327] Bluetooth: hci0: command 0x0409 tx timeout [ 34.409775][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.413809][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.448858][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.488459][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.548141][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.592187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.593706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.595374][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.596506][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.598250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.599803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.601683][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.602762][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.604036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.614988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.625050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.626793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.628757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.630251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.644978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.646762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.655779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.660672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.667088][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.671827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.673429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.683288][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.691985][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.693522][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.705735][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.709253][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.718799][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.720615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.722208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.723608][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.724688][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.730440][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.745020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.746578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.748654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.750083][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.751201][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.752538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.755605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.756971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.763825][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.765589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.770873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.772488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.776348][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.781800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.783665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.785191][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.786485][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.798433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.800465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.802172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.803725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.805060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.806475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.808620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.810065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.811671][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.813000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.814500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.815800][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.816960][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.820444][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.825160][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.826727][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.831584][ T245] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.832803][ T245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.834126][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.835645][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.837168][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.839126][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.840537][ T245] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.841708][ T245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.843132][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.845290][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.850631][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.857037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.858832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.860069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.863868][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.874097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.875747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.877196][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.878426][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.882977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.884767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.886387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.888462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.890090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.904708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.906311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.911401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.912969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.914473][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.915636][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.916891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.919484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.921095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.923602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.925176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.926838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.929393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.931196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.932689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.934251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.936478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.941328][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.943272][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.952973][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.954602][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.956043][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.958445][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.959888][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.961444][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.967189][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.969785][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.975723][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.977721][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.980081][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.981638][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.983038][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.984640][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.986170][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.991018][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.995316][ T4330] device veth0_vlan entered promiscuous mode [ 35.005571][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.007174][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.009351][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.011050][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.012543][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.014040][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.015208][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.016550][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.021125][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.023312][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.026808][ T4330] device veth1_vlan entered promiscuous mode [ 35.032022][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.062819][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.064391][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.066124][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.068232][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.073053][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.074377][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.090933][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.094407][ T4320] device veth0_vlan entered promiscuous mode [ 35.100981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.102663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.104137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.105688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.107269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.108832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.111936][ T4330] device veth0_macvtap entered promiscuous mode [ 35.115752][ T4330] device veth1_macvtap entered promiscuous mode [ 35.119805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.122627][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.124060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.125597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.131966][ T4320] device veth1_vlan entered promiscuous mode [ 35.137266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.141039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.142241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.145200][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.149489][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.154234][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.155828][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.158692][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.162123][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.167791][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.169439][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.172119][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.173558][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.174899][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.176230][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.182788][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.184355][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.187203][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.190195][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.193220][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.194638][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.196611][ T4321] device veth0_vlan entered promiscuous mode [ 35.208724][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.210396][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.213987][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.221675][ T4325] device veth0_vlan entered promiscuous mode [ 35.224140][ T4321] device veth1_vlan entered promiscuous mode [ 35.233291][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.234939][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.236463][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.239620][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.241816][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.243279][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.244864][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.265125][ T4320] device veth0_macvtap entered promiscuous mode [ 35.277040][ T4325] device veth1_vlan entered promiscuous mode [ 35.279616][ T4320] device veth1_macvtap entered promiscuous mode [ 35.281072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.282670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.284181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.285728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.287193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.291714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.293917][ T4321] device veth0_macvtap entered promiscuous mode [ 35.297094][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.298790][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.300484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.302006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.317071][ T4321] device veth1_macvtap entered promiscuous mode [ 35.324156][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.325786][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.332597][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.339610][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.341141][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.342578][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.344091][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.354246][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.355921][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.357935][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.359520][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.361745][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.363045][ T245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.364335][ T245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.366803][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.371419][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.373549][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.375808][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.377894][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.379497][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.381033][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.382617][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.386518][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.388662][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.390260][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.391640][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.396659][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.399428][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.400852][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.402413][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.404620][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.406490][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.411391][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.413066][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.414739][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.416222][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.418334][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.421662][ T4325] device veth0_macvtap entered promiscuous mode [ 35.432767][ T4325] device veth1_macvtap entered promiscuous mode [ 35.436014][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.437653][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.439267][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.440642][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.450709][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.452297][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.453720][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.455302][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.456750][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.459066][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.461397][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.463738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.465276][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.466736][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.469261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.470822][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.472284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.473805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.475957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.482053][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.483745][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.485282][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.488822][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.490910][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.494140][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.496750][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.501409][ T4329] device veth0_vlan entered promiscuous mode [ 35.503218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.504836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.544456][ T4329] device veth1_vlan entered promiscuous mode [ 35.547266][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.548889][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.550292][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.551627][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.573244][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.574580][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.576273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.578305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.579691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.597979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.599607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.603188][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.604398][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.606132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.614746][ T4329] device veth0_macvtap entered promiscuous mode [ 35.635523][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.636890][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.638618][ T4329] device veth1_macvtap entered promiscuous mode [ 35.646078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.647882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.676505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.678297][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.683238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.692476][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.694128][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.695699][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.699810][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.701380][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.702955][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.704507][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.706155][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.712498][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.713832][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.715034][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.720380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.721974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.723445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.730450][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.732169][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.733730][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.735476][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.737001][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.742074][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.743681][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.746654][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.752737][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.759370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.760984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.766180][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.770143][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.783272][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.784729][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.801561][ T245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.802979][ T245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.804922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.891981][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.893282][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.895010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.945594][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.946925][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.952597][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.072093][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.075142][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.443385][ T4452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.444896][ T4452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.481384][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 36.482356][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 36.483304][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 36.484285][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 36.485180][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 36.492057][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.498156][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.051774][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.053204][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.057141][ T4466] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13'. [ 37.087542][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.110944][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.116663][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.250886][ T4470] vhci_hcd: invalid port number 96 [ 37.251895][ T4470] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 37.267462][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 37.270767][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.273288][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.275021][ T22] usb 1-1: config 0 has no interfaces? [ 37.278912][ T22] usb 1-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 37.280352][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.283550][ T22] usb 1-1: Product: syz [ 37.284259][ T22] usb 1-1: Manufacturer: syz [ 37.284969][ T22] usb 1-1: SerialNumber: syz [ 37.288899][ T22] usb 1-1: config 0 descriptor?? [ 37.581366][ T4480] ubi0: attaching mtd0 [ 37.583001][ T4480] ubi0: scanning is finished [ 37.583866][ T4480] ubi0: empty MTD device detected [ 37.708736][ T4481] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 38.557965][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 38.558141][ T4327] Bluetooth: hci3: command 0x040f tx timeout [ 38.560259][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 38.561412][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 38.562611][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 38.771016][ T4480] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 39.332260][ T4510] mkiss: ax0: crc mode is auto. [ 39.775685][ T4519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.785659][ T4519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.898707][ T4374] usb 1-1: USB disconnect, device number 2 [ 40.482314][ T4527] sp0: Synchronizing with TNC [ 40.638589][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 40.638612][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 40.638643][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 40.641669][ T4324] Bluetooth: hci1: command 0x0419 tx timeout [ 40.643262][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 41.741764][ T4573] netlink: 'syz.4.47': attribute type 3 has an invalid length. [ 41.890353][ T4586] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET) [ 42.296718][ T4590] mkiss: ax0: crc mode is auto. [ 42.771395][ T4336] Bluetooth: hci4: unknown advertising packet type: 0x31 [ 42.771448][ T4336] Bluetooth: hci4: Malformed LE Event: 0x02 [ 42.844684][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.846148][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.951375][ T4612] capability: warning: `syz.4.59' uses deprecated v2 capabilities in a way that may be insecure [ 43.904231][ T4647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.908652][ T4647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.069343][ T4657] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 44.128100][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 44.468081][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.469140][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.683065][ T27] audit: type=1326 audit(44.670:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d5b3a8 code=0x7ffc0000 [ 44.687014][ T27] audit: type=1326 audit(44.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d5b3a8 code=0x7ffc0000 [ 44.757229][ T27] audit: type=1326 audit(44.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffffa3d5b3a8 code=0x7ffc0000 [ 44.771018][ T27] audit: type=1326 audit(44.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d5b3a8 code=0x7ffc0000 [ 44.775935][ T27] audit: type=1326 audit(44.760:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d5b3a8 code=0x7ffc0000 [ 45.203460][ T4690] device syzkaller1 entered promiscuous mode [ 45.362759][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 45.631705][ T4706] binder: 4704:4706 tried to acquire reference to desc 0, got 1 instead [ 45.641576][ T4706] binder: 4704:4706 ioctl c0306201 20000240 returned -14 [ 45.671901][ T4487] binder: undelivered transaction 5, process died. [ 46.214921][ T4336] Bluetooth: hci1: command 0x632f tx timeout [ 46.358844][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.362984][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.776976][ T4741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.779038][ T4741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.782237][ T4336] Bluetooth: hci0: unknown advertising packet type: 0x31 [ 46.782276][ T4336] Bluetooth: hci0: Dropping invalid advertising data [ 46.784510][ T4336] Bluetooth: hci0: Malformed LE Event: 0x02 [ 47.625930][ T4336] Bluetooth: hci0: adv larger than maximum supported [ 47.639122][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.641991][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.877470][ T112] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 48.071491][ T112] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.073410][ T112] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 48.077321][ T112] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.079304][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.081803][ T112] usb 1-1: Product: syz [ 48.082462][ T112] usb 1-1: Manufacturer: syz [ 48.085266][ T112] usb 1-1: SerialNumber: syz [ 48.482347][ T4756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 48.718773][ T4787] device syzkaller0 entered promiscuous mode [ 49.426561][ T4756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 49.614519][ T4802] Bluetooth: MGMT ver 1.22 [ 49.632733][ T112] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 49.633987][ T112] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 49.635161][ T112] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 49.833223][ T112] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 50.267952][ T4371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.271092][ T4371] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.310750][ T4814] fido_id[4814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.229642][ T4800] Zero length message leads to an empty skb [ 60.272474][ T112] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 60.298170][ T112] usb 1-1: USB disconnect, device number 3 [ 60.300907][ T112] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 60.326752][ T4816] infiniband syz0: set active [ 60.334934][ T4816] infiniband syz0: added bond_slave_1 [ 60.354062][ T4842] device batadv0 entered promiscuous mode [ 60.355461][ T4842] device vlan2 entered promiscuous mode [ 60.362720][ T4816] infiniband syz0: Couldn't open port 1 [ 60.391832][ T4816] RDS/IB: syz0: added [ 60.392828][ T4816] smc: adding ib device syz0 with port count 1 [ 60.393910][ T4816] smc: ib device syz0 port 1 has pnetid [ 60.465418][ T4853] binder: 4852:4853 ioctl 400c620e 20000380 returned -22 [ 60.543049][ T4869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.545853][ T4869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.658381][ T4874] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 60.662606][ T4874] netlink: 172 bytes leftover after parsing attributes in process `syz.0.150'. [ 60.678160][ T4876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.679702][ T4876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.233949][ T4894] binder: 4893:4894 ioctl c0046209 0 returned -22 [ 61.336242][ T4898] usb usb8: usbfs: process 4898 (syz.2.161) did not claim interface 0 before use [ 61.707876][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.716365][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.824051][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.826783][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.652287][ T112] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.728918][ T4968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.733102][ T4968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.773250][ T4974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.189'. [ 63.838705][ T112] usb 1-1: Using ep0 maxpacket: 32 [ 63.890415][ T112] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 63.892469][ T112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.961113][ T112] usb 1-1: config 0 descriptor?? [ 63.967110][ T112] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 63.969220][ T4977] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 63.970434][ T4977] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.973088][ T4977] vhci_hcd vhci_hcd.0: Device attached [ 64.061236][ T4984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.062875][ T4984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.487455][ T24] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 64.488995][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490184][ T14] cfg80211: failed to load regulatory.db [ 64.490186][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.566316][ T4978] vhci_hcd: connection reset by peer [ 64.569059][ T4528] vhci_hcd: stop threads [ 64.571280][ T4528] vhci_hcd: release socket [ 64.573361][ T4528] vhci_hcd: disconnect device [ 64.876749][ T4992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.882882][ T4992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.162817][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.164476][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.389175][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.390769][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.754299][ T112] gspca_vc032x: reg_w err -110 [ 65.755217][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.756089][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.757065][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.759454][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.760326][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.761129][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.761987][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.762759][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.763645][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.764413][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.765282][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.766159][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.767075][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.767945][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.768870][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.769726][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.770655][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.771555][ T112] gspca_vc032x: I2c Bus Busy Wait 00 [ 65.772511][ T112] gspca_vc032x: Unknown sensor... [ 65.773307][ T112] vc032x: probe of 1-1:0.0 failed with error -22 [ 66.003607][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 66.525008][ T5026] SET target dimension over the limit! [ 66.586809][ T5034] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.588358][ T5034] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.589552][ T5034] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.590893][ T5034] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.284017][ T1515] usb 1-1: USB disconnect, device number 4 [ 68.390632][ T5080] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value [ 68.924563][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.932656][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.647363][ T24] vhci_hcd: vhci_device speed not set [ 69.661020][ T5115] netlink: 224 bytes leftover after parsing attributes in process `syz.3.231'. [ 69.794247][ T5119] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.393503][ T5130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.407126][ T5130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.410896][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 72.200600][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 72.595666][ T5265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.255'. [ 72.638128][ T4336] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 72.639605][ T4336] Bluetooth: hci0: Injecting HCI hardware error event [ 72.641583][ T4327] Bluetooth: hci0: hardware error 0x00 [ 72.762346][ T5274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.763847][ T5274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.807436][ T4371] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 72.820314][ T5279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.821846][ T5279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.997363][ T4371] usb 1-1: Using ep0 maxpacket: 16 [ 73.003469][ T4371] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 73.005348][ T4371] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 73.006913][ T4371] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 73.011124][ T4371] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.015039][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 73.016439][ T4371] usb 1-1: SerialNumber: syz [ 73.025656][ T5251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.229988][ T4371] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 73.236446][ T4371] usb 1-1: USB disconnect, device number 5 [ 73.506921][ T5301] dlm: non-version read from control device 0 [ 74.060728][ T5313] MPTCP: kernel_bind error, err=-22 [ 74.194698][ T5315] binder: 5314:5315 tried to acquire reference to desc 0, got 1 instead [ 74.209657][ T5315] binder: 5314:5315 got transaction with invalid handle, 2 [ 74.215231][ T5315] binder: 5315:5314 translate handle failed [ 74.222107][ T5315] binder: 5314:5315 transaction call to 5314:0 failed 10/29201/-22, size 72-24 line 3402 [ 74.230257][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.442720][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.455462][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.877428][ T4327] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 75.018875][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 76.045873][ T5370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.048452][ T5370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.021606][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.023335][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.371890][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 78.261077][ T5406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.308'. [ 78.386652][ T5414] device syzkaller0 entered promiscuous mode [ 78.735539][ T5439] device wg1 entered promiscuous mode [ 81.270274][ T5495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.274225][ T5495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.452507][ T5500] netlink: 'syz.2.342': attribute type 4 has an invalid length. [ 81.453873][ T5500] netlink: 17 bytes leftover after parsing attributes in process `syz.2.342'. [ 82.517287][ C0] sched: RT throttling activated [ 82.630472][ T5506] tap0: tun_chr_ioctl cmd 1074025677 [ 82.631580][ T5506] tap0: linktype set to 778 [ 83.572885][ T5509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.574522][ T5509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.170084][ T5533] binder: 5532:5533 tried to acquire reference to desc 0, got 1 instead [ 84.172310][ T5533] binder: cannot allocate buffer: no space left [ 84.172417][ T5533] binder: 5532:5533 transaction async to 5532:0 failed 17/29201/-28, size 0-0 line 3239 [ 84.434438][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.952007][ T5547] tmpfs: Unknown parameter 'trans' [ 85.411331][ T5555] fuse: Bad value for 'fd' [ 85.423100][ T5554] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 85.499319][ T5560] netlink: 128 bytes leftover after parsing attributes in process `syz.0.364'. [ 85.611634][ T5566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.615094][ T5566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.702751][ T5568] binder: 5567:5568 tried to acquire reference to desc 0, got 1 instead [ 85.704694][ T5568] binder: cannot allocate buffer: no space left [ 85.704712][ T5568] binder: 5567:5568 transaction async to 5567:0 failed 22/29201/-28, size 0-0 line 3239 [ 85.711202][ T5501] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.820507][ T22] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 85.913718][ T5580] loop1: detected capacity change from 0 to 2048 [ 85.916230][ T5580] UDF-fs: bad mount option "volume=00000000000000001 /5f¼Ô[9ignore" or missing value [ 86.207225][ T22] usb 1-1: not running at top speed; connect to a high speed hub [ 86.210094][ T22] usb 1-1: config 186 has an invalid interface number: 105 but max is 0 [ 86.211637][ T22] usb 1-1: config 186 has no interface number 0 [ 86.212766][ T22] usb 1-1: config 186 interface 105 has no altsetting 0 [ 86.222227][ T22] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=75.b9 [ 86.223912][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.225358][ T22] usb 1-1: Product: syz [ 86.226009][ T22] usb 1-1: Manufacturer: syz [ 86.231135][ T22] usb 1-1: SerialNumber: syz [ 86.293784][ T5584] loop2: detected capacity change from 0 to 2048 [ 86.295622][ T5584] UDF-fs: bad mount option "volume=00000000000000001 /5f¼Ô[9ignore" or missing value [ 87.228603][ T22] usb 1-1: USB disconnect, device number 6 [ 87.267138][ T5590] loop3: detected capacity change from 0 to 2048 [ 87.269540][ T5590] UDF-fs: bad mount option "volume=00000000000000001 /5f¼Ô[9ignore" or missing value [ 87.299792][ T4813] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.441190][ T5594] loop1: detected capacity change from 0 to 2048 [ 87.443241][ T5594] UDF-fs: bad mount option "volume=00000000000000001 /5f¼Ô[9ignore" or missing value [ 87.471609][ T5592] loop4: detected capacity change from 0 to 32768 [ 87.734031][ T5601] fuse: Bad value for 'fd' [ 87.764274][ T5600] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 88.272786][ T4858] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.286364][ T5592] (syz.4.376,5592,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.290973][ T5592] (syz.4.376,5592,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.466128][ T5592] JBD2: Ignoring recovery information on journal [ 88.469573][ T5609] binder: tried to use weak ref as strong ref [ 88.470635][ T5609] binder: 5608:5609 Acquire 1 refcount change on invalid ref 0 ret -22 [ 88.819460][ T5605] loop2: detected capacity change from 0 to 32768 [ 88.826260][ T5609] binder: 5608:5609 got transaction to invalid handle, 1 [ 88.827431][ T5609] binder: 5609:5608 cannot find target node [ 88.828373][ T5609] binder: 5608:5609 transaction async to 0:0 failed 25/29201/-22, size 0-0 line 3054 [ 88.830113][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.835830][ T5605] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.379 (5605) [ 88.875289][ T5605] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.877049][ T5605] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 88.878606][ T5605] BTRFS info (device loop2): using free space tree [ 88.950895][ T5592] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 89.131070][ T5605] BTRFS info (device loop2): enabling ssd optimizations [ 89.726728][ T4329] ocfs2: Unmounting device (7,4) on (node local) [ 89.935142][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 89.946921][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.948649][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.950181][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.951797][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.953259][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.955016][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.956649][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.958367][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.960017][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.961803][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.293118][ T4330] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.347095][ T5656] loop4: detected capacity change from 0 to 32768 [ 90.372337][ T5656] (syz.4.385,5656,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.385978][ T5656] (syz.4.385,5656,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.405124][ T5656] JBD2: Ignoring recovery information on journal [ 90.449705][ T5656] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 91.434194][ T5673] loop2: detected capacity change from 0 to 32768 [ 91.438337][ T5679] loop1: detected capacity change from 0 to 16 [ 91.439710][ T5679] ======================================================= [ 91.439710][ T5679] WARNING: The mand mount option has been deprecated and [ 91.439710][ T5679] and is ignored by this kernel. Remove the mand [ 91.439710][ T5679] option from the mount to silence this warning. [ 91.439710][ T5679] ======================================================= [ 91.475354][ T5673] (syz.2.388,5673,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.502353][ T5673] (syz.2.388,5673,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.514495][ T5679] erofs: (device loop1): mounted with root inode @ nid 36. [ 91.597080][ T5685] netlink: 'syz.0.403': attribute type 6 has an invalid length. [ 91.778113][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 91.780829][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.782461][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.784024][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.785812][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.787419][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.789101][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.790596][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.792147][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.793731][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.795323][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.927550][ T5673] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 91.934018][ T5673] JBD2: Ignoring recovery information on journal [ 92.000299][ T5673] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.340074][ T5692] loop0: detected capacity change from 0 to 16 [ 92.352682][ T5692] erofs: (device loop0): mounted with root inode @ nid 36. [ 92.367631][ T5694] binder: tried to use weak ref as strong ref [ 92.368678][ T5694] binder: 5693:5694 Acquire 1 refcount change on invalid ref 0 ret -22 [ 92.370262][ T5694] binder: 5693:5694 got transaction to invalid handle, 1 [ 92.371345][ T5694] binder: 5694:5693 cannot find target node [ 92.372538][ T5694] binder: 5693:5694 transaction async to 0:0 failed 28/29201/-22, size 0-0 line 3054 [ 92.379718][ T5661] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.431553][ T5696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.433213][ T5696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.451018][ T4330] ocfs2: Unmounting device (7,2) on (node local) [ 92.838624][ T4329] ocfs2: Unmounting device (7,4) on (node local) [ 92.914062][ T5705] netlink: 'syz.1.397': attribute type 4 has an invalid length. [ 92.915322][ T5705] netlink: 17 bytes leftover after parsing attributes in process `syz.1.397'. [ 94.076293][ T5708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.078719][ T5708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.641774][ T5725] loop3: detected capacity change from 0 to 16 [ 95.670075][ T5725] erofs: (device loop3): mounted with root inode @ nid 36. [ 96.219501][ T27] audit: type=1400 audit(609.199:7): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":/" pid=5724 comm="syz.3.404" [ 96.293716][ T5501] kernel read not supported for file /dsp (pid: 5501 comm: kworker/1:6) [ 96.537107][ T5741] binder: tried to use weak ref as strong ref [ 96.538354][ T5741] binder: 5740:5741 Acquire 1 refcount change on invalid ref 0 ret -22 [ 96.539928][ T5741] binder: 5740:5741 got transaction to invalid handle, 1 [ 96.541154][ T5741] binder: 5741:5740 cannot find target node [ 96.542022][ T5741] binder: 5740:5741 transaction async to 0:0 failed 31/29201/-22, size 0-0 line 3054 [ 96.543808][ T5662] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.733980][ T5748] netlink: 'syz.3.409': attribute type 6 has an invalid length. [ 97.032585][ T5752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.044555][ T5752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.260872][ T5757] random: crng reseeded on system resumption [ 97.612391][ T5763] Bluetooth: MGMT ver 1.22 [ 98.074628][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.076190][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.305073][ T5786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.309682][ T5786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.311131][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.324728][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.371389][ T5791] netlink: 'syz.4.417': attribute type 4 has an invalid length. [ 100.372693][ T5791] netlink: 17 bytes leftover after parsing attributes in process `syz.4.417'. [ 101.479590][ T5792] binder: 5787:5792 got transaction to invalid handle, 1 [ 101.491035][ T5792] binder: 5792:5787 cannot find target node [ 101.497730][ T5792] binder: 5787:5792 transaction async to 0:0 failed 35/29201/-22, size 0-0 line 3054 [ 101.509483][ T4381] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.556439][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.565455][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.620948][ T5800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'. [ 101.648902][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 101.777261][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.782438][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.209774][ T5824] binder: 5823:5824 got transaction to invalid handle, 1 [ 102.211184][ T5824] binder: 5824:5823 cannot find target node [ 102.212200][ T5824] binder: 5823:5824 transaction async to 0:0 failed 39/29201/-22, size 0-0 line 3054 [ 102.214225][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.235354][ T5826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.438'. [ 102.607111][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.609225][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.725635][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.728503][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.733368][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.736038][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.748351][ T5844] random: crng reseeded on system resumption [ 103.966979][ T5856] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.874132][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.875793][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.394495][ T5895] orangefs_mount: mount request failed with -4 [ 106.941245][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.944474][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.447000][ T5937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.457131][ T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.655007][ T5972] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 109.999496][ T5982] exFAT-fs (nullb0): invalid boot record signature [ 110.000697][ T5982] exFAT-fs (nullb0): failed to read boot sector [ 110.001619][ T5982] exFAT-fs (nullb0): failed to recognize exfat type [ 110.430327][ T27] audit: type=1326 audit(623.419:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7fc00000 [ 110.434083][ T27] audit: type=1326 audit(623.419:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa375b3a8 code=0x7fc00000 [ 110.440045][ T27] audit: type=1326 audit(623.419:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7fc00000 [ 110.883453][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.890398][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.072414][ T6008] device team_slave_0 entered promiscuous mode [ 111.073718][ T6008] device team_slave_1 entered promiscuous mode [ 111.075216][ T6008] device macsec1 entered promiscuous mode [ 111.081773][ T6008] device team0 entered promiscuous mode [ 111.083979][ T6008] team0: Device macsec1 is already an upper device of the team interface [ 111.086923][ T6008] device team0 left promiscuous mode [ 111.094972][ T6008] device team_slave_0 left promiscuous mode [ 111.096048][ T6008] device team_slave_1 left promiscuous mode [ 111.675018][ T6016] IPv6: Can't replace route, no match found [ 115.110619][ T4327] Bluetooth: hci1: hardware error 0x06 [ 116.644767][ T6106] loop7: detected capacity change from 0 to 16384 [ 117.597469][ T4327] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 117.855185][ T6129] binder: 6128:6129 tried to acquire reference to desc 0, got 1 instead [ 117.856988][ T6129] binder_alloc: 6128: binder_alloc_buf, no vma [ 117.858238][ T6129] binder: cannot allocate buffer: vma cleared, target dead or dying [ 117.858261][ T6129] binder: 6128:6129 transaction async to 6128:0 failed 44/29189/-3, size 0-0 line 3239 [ 117.874228][ T5662] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.977885][ T6109] tipc: Started in network mode [ 118.978743][ T6109] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 118.979906][ T6109] tipc: Enabled bearer , priority 0 [ 120.098405][ T1515] tipc: Node number set to 11578026 [ 121.151629][ T6181] loop7: detected capacity change from 0 to 16384 [ 121.669873][ T6195] binder: tried to use weak ref as strong ref [ 121.671023][ T6195] binder: 6194:6195 Acquire 1 refcount change on invalid ref 0 ret -22 [ 121.672643][ T6195] binder: 6194:6195 got transaction to invalid handle, 1 [ 121.673963][ T6195] binder: 6195:6194 cannot find target node [ 121.674957][ T6195] binder: 6194:6195 transaction async to 0:0 failed 47/29201/-22, size 0-0 line 3054 [ 121.676914][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.780849][ T6157] tipc: Started in network mode [ 121.781826][ T6157] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 121.783129][ T6157] tipc: Enabled bearer , priority 0 [ 121.784778][ T6162] netlink: 'syz.1.545': attribute type 6 has an invalid length. [ 122.325892][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.555'. [ 122.652786][ T6207] sp0: Synchronizing with TNC [ 122.797419][ T1515] tipc: Node number set to 11578026 [ 123.341565][ T6220] netlink: 'syz.3.567': attribute type 6 has an invalid length. [ 123.462523][ T6217] netlink: 'syz.0.559': attribute type 12 has an invalid length. [ 123.465039][ T6217] netlink: 'syz.0.559': attribute type 29 has an invalid length. [ 123.475847][ T6217] netlink: 148 bytes leftover after parsing attributes in process `syz.0.559'. [ 124.169653][ T6234] loop7: detected capacity change from 0 to 16384 [ 124.961513][ T6246] binder: tried to use weak ref as strong ref [ 124.962647][ T6246] binder: 6245:6246 Acquire 1 refcount change on invalid ref 0 ret -22 [ 124.967928][ T6246] binder: 6245:6246 got transaction to invalid handle, 1 [ 124.969182][ T6246] binder: 6246:6245 cannot find target node [ 124.970157][ T6246] binder: 6245:6246 transaction async to 0:0 failed 50/29201/-22, size 0-0 line 3054 [ 124.974250][ T4389] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.918506][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.920274][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.257347][ T4389] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.337696][ T6251] tipc: Started in network mode [ 126.338614][ T6251] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 126.339989][ T6251] tipc: Enabled bearer , priority 0 [ 126.977655][ T6282] netlink: 'syz.1.577': attribute type 6 has an invalid length. [ 126.980919][ T6290] loop7: detected capacity change from 0 to 16384 [ 127.104584][ T4389] usb 1-1: Using ep0 maxpacket: 8 [ 127.122480][ T4389] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 127.126560][ T4389] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.129363][ T4389] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.133268][ T4389] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.135664][ T4389] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.137208][ T4389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.654003][ T5661] tipc: Node number set to 11578026 [ 127.655051][ T4389] usb 1-1: usb_control_msg returned -32 [ 127.655940][ T4389] usbtmc 1-1:16.0: can't read capabilities [ 129.069126][ T5009] usb 1-1: USB disconnect, device number 7 [ 129.103274][ T6314] binder: tried to use weak ref as strong ref [ 129.104320][ T6314] binder: 6312:6314 Acquire 1 refcount change on invalid ref 0 ret -22 [ 129.106014][ T6314] binder: 6312:6314 got transaction to invalid handle, 1 [ 129.107181][ T6314] binder: 6314:6312 cannot find target node [ 129.127749][ T6314] binder: 6312:6314 transaction async to 0:0 failed 53/29201/-22, size 0-0 line 3054 [ 129.137786][ T5661] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.832141][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 130.078366][ T6337] netlink: 'syz.0.593': attribute type 6 has an invalid length. [ 130.906335][ T6349] loop7: detected capacity change from 0 to 16384 [ 131.759317][ T6363] binder: BINDER_SET_CONTEXT_MGR already set [ 131.760581][ T6363] binder: 6358:6363 ioctl 4018620d 200002c0 returned -16 [ 132.076923][ T6363] binder: 6358:6363 got transaction to invalid handle, 1 [ 132.080257][ T6363] binder: 6363:6358 cannot find target node [ 132.092629][ T6363] binder: 6358:6363 transaction async to 0:0 failed 56/29201/-22, size 0-0 line 3054 [ 132.098576][ T4389] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.778826][ T6375] kernel profiling enabled (shift: 34) [ 132.779828][ T6375] profiling shift: 34 too large [ 133.773290][ T6402] input: syz1 as /devices/virtual/input/input2 [ 134.018488][ T6412] loop7: detected capacity change from 0 to 16384 [ 135.664836][ T6443] input: syz1 as /devices/virtual/input/input3 [ 136.365446][ T6468] binder: 6466:6468 tried to acquire reference to desc 0, got 1 instead [ 136.371560][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.373232][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.559323][ T6474] binder: 6466:6474 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 136.561663][ T6474] binder: 6474 RLIMIT_NICE not set [ 136.562723][ T6474] binder: 6474 RLIMIT_NICE not set [ 136.565389][ T6474] binder: 6474 RLIMIT_NICE not set [ 136.566580][ T6474] binder_alloc: 6466: binder_alloc_buf, no vma [ 136.567848][ T6474] binder: cannot allocate buffer: vma cleared, target dead or dying [ 136.567956][ T6474] binder: 6466:6474 transaction reply to 6466:6474 failed 62/29189/-3, size 0-0 line 3239 [ 136.571183][ T6474] binder: send failed reply for transaction 61 to 6466:6474 [ 136.825309][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.640'. [ 137.244322][ T4389] binder: undelivered TRANSACTION_ERROR: 29190 [ 137.245499][ T4389] binder: undelivered TRANSACTION_COMPLETE [ 137.246464][ T4389] binder: undelivered TRANSACTION_ERROR: 29189 [ 137.282572][ T6483] loop7: detected capacity change from 0 to 16384 [ 138.562983][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.655'. [ 138.776670][ T6523] binder: 6522:6523 tried to acquire reference to desc 0, got 1 instead [ 138.857999][ T6530] loop7: detected capacity change from 0 to 16384 [ 138.967960][ T6537] binder: 6522:6537 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 138.970308][ T6537] binder: 6537 RLIMIT_NICE not set [ 138.971274][ T6537] binder: 6537 RLIMIT_NICE not set [ 138.973322][ T6537] binder: 6537 RLIMIT_NICE not set [ 138.974325][ T6537] binder_alloc: 6522: binder_alloc_buf, no vma [ 138.975380][ T6537] binder: cannot allocate buffer: vma cleared, target dead or dying [ 138.975485][ T6537] binder: 6522:6537 transaction reply to 6522:6537 failed 68/29189/-3, size 0-0 line 3239 [ 138.978721][ T6537] binder: send failed reply for transaction 67 to 6522:6537 [ 139.781360][ T4406] binder: undelivered TRANSACTION_ERROR: 29190 [ 139.782658][ T4406] binder: undelivered TRANSACTION_COMPLETE [ 139.783876][ T4406] binder: undelivered TRANSACTION_ERROR: 29189 [ 141.177361][ T6590] loop7: detected capacity change from 0 to 16384 [ 141.441555][ T6593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.443218][ T6593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.467051][ T6596] netlink: 156 bytes leftover after parsing attributes in process `syz.4.679'. [ 142.507487][ T27] audit: type=1326 audit(655.489:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335b3a8 code=0x7ffc0000 [ 142.519660][ T27] audit: type=1326 audit(655.489:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335b3a8 code=0x7ffc0000 [ 142.529298][ T27] audit: type=1326 audit(655.489:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335b3a8 code=0x7ffc0000 [ 142.559582][ T27] audit: type=1326 audit(655.489:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8335b3a8 code=0x7ffc0000 [ 143.050374][ T6647] loop7: detected capacity change from 0 to 16384 [ 143.096640][ T27] audit: type=1326 audit(655.489:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335b3a8 code=0x7ffc0000 [ 143.111608][ T27] audit: type=1326 audit(655.489:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8335b3a8 code=0x7ffc0000 [ 143.119632][ T27] audit: type=1326 audit(655.489:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8335b3a8 code=0x7ffc0000 [ 143.366914][ T6675] netlink: 'syz.1.718': attribute type 6 has an invalid length. [ 143.372238][ T6681] binder: 6680:6681 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 143.374944][ T6681] binder: 6681 RLIMIT_NICE not set [ 143.376658][ T6681] binder: 6680:6681 ioctl c0306201 20000240 returned -11 [ 143.380651][ T6681] binder: 6680:6681 got reply transaction with no transaction stack [ 143.382099][ T6681] binder: 6680:6681 transaction reply to 0:0 failed 70/29201/-71, size 0-0 line 2955 [ 143.406227][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.323171][ T6713] loop7: detected capacity change from 0 to 16384 [ 144.679341][ T6717] binder: 6716:6717 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 144.684150][ T6717] binder: 6717 RLIMIT_NICE not set [ 144.684977][ T6717] binder: 6716:6717 ioctl c0306201 20000240 returned -11 [ 144.686378][ T6717] binder: 6716:6717 got reply transaction with no transaction stack [ 144.687828][ T6717] binder: 6716:6717 transaction reply to 0:0 failed 72/29201/-71, size 0-0 line 2955 [ 144.704713][ T5501] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.384598][ T6750] binder: 6749:6750 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.386985][ T6750] binder: 6750 RLIMIT_NICE not set [ 145.389337][ T6750] binder: 6749:6750 ioctl c0306201 20000240 returned -11 [ 145.391072][ T6750] binder: 6749:6750 got reply transaction with no transaction stack [ 145.392453][ T6750] binder: 6749:6750 transaction reply to 0:0 failed 74/29201/-71, size 0-0 line 2955 [ 146.105372][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.367217][ T6772] loop7: detected capacity change from 0 to 16384 [ 146.887463][ T4371] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.044852][ T6777] netlink: 216 bytes leftover after parsing attributes in process `syz.1.752'. [ 147.046435][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.752'. [ 147.062782][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 147.087427][ T4371] usb 1-1: Using ep0 maxpacket: 8 [ 147.092750][ T4371] usb 1-1: config 0 has too many interfaces: 90, using maximum allowed: 32 [ 147.094247][ T4371] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 90 [ 147.132646][ T4371] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 147.134122][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.135421][ T4371] usb 1-1: Product: syz [ 147.136055][ T4371] usb 1-1: Manufacturer: syz [ 147.136847][ T4371] usb 1-1: SerialNumber: syz [ 147.143564][ T4371] usb 1-1: config 0 descriptor?? [ 147.272959][ T6794] binder: 6790:6794 tried to acquire reference to desc 0, got 1 instead [ 147.569253][ T6799] binder: 6790:6799 got reply transaction with no transaction stack [ 147.570885][ T6799] binder: 6790:6799 transaction reply to 0:0 failed 80/29201/-71, size 0-0 line 2955 [ 147.680287][ T4371] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 148.157450][ T4406] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.158678][ T4406] binder: send failed reply for transaction 79 to 6790:6799 [ 148.160147][ T4406] binder: undelivered TRANSACTION_COMPLETE [ 149.045854][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.048817][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.922228][ T4371] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.924385][ T4371] dvbdev: DVB: registering new adapter (Terratec H7) [ 150.926252][ T4371] usb 1-1: media controller created [ 151.250945][ T4371] usb read operation failed. (-71) [ 151.255510][ T4371] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 151.261094][ T4371] usb 1-1: USB disconnect, device number 8 [ 152.314959][ T6915] loop7: detected capacity change from 0 to 16384 [ 154.662309][ T7002] binder: 7000:7002 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 154.670504][ T7002] binder: 7000:7002 got transaction to invalid handle, 1 [ 154.671643][ T7002] binder_debug: 1 callbacks suppressed [ 154.671654][ T7002] binder: 7002:7000 cannot find target node [ 154.674191][ T7002] binder: 7000:7002 transaction async to 0:0 failed 82/29201/-22, size 0-0 line 3054 [ 154.690320][ T5501] binder: undelivered TRANSACTION_ERROR: 29201 [ 155.369107][ T7024] netlink: 'syz.2.818': attribute type 6 has an invalid length. [ 156.385540][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 157.068794][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'. [ 158.717394][ T4331] Bluetooth: hci2: command 0x0406 tx timeout [ 158.718594][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 158.719636][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 161.407093][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 161.866366][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.870060][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.327868][ T7199] netlink: 'syz.3.866': attribute type 6 has an invalid length. [ 166.885679][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.890138][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.894252][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.470257][ T7244] loop7: detected capacity change from 0 to 16384 [ 169.060063][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 169.884536][ T7307] loop7: detected capacity change from 0 to 16384 [ 171.076624][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.083549][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.018771][ T7364] loop7: detected capacity change from 0 to 16384 [ 172.465729][ T7372] binder: 7371:7372 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 172.469042][ T7372] binder: 7371:7372 got transaction to invalid handle, 1 [ 172.470383][ T7372] binder: 7372:7371 cannot find target node [ 172.471319][ T7372] binder: 7371:7372 transaction async to 0:0 failed 84/29201/-22, size 0-0 line 3054 [ 172.473616][ T5501] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.391855][ T7411] loop7: detected capacity change from 0 to 16384 [ 173.966344][ T7419] binder: 7418:7419 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 173.982044][ T7419] binder: 7418:7419 got transaction to invalid handle, 1 [ 173.983370][ T7419] binder: 7419:7418 cannot find target node [ 174.003565][ T7419] binder: 7418:7419 transaction async to 0:0 failed 87/29201/-22, size 0-0 line 3054 [ 174.012819][ T5662] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.018168][ T7457] binder: 7456:7457 ioctl 4018620d 0 returned -22 [ 175.019990][ T7457] binder: 7456:7457 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 175.023030][ T7457] binder: 7456:7457 got transaction to invalid handle, 1 [ 175.024254][ T7457] binder: 7457:7456 cannot find target node [ 175.025394][ T7457] binder: 7456:7457 transaction async to 0:0 failed 90/29201/-22, size 0-0 line 3054 [ 175.030356][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.220499][ T7462] loop7: detected capacity change from 0 to 16384 [ 175.850333][ T7476] netlink: 'syz.3.952': attribute type 6 has an invalid length. [ 176.083380][ T7494] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.707702][ T7519] loop7: detected capacity change from 0 to 16384 [ 179.750808][ T7566] loop7: detected capacity change from 0 to 16384 [ 182.381033][ T7631] loop7: detected capacity change from 0 to 16384 [ 183.297621][ T7649] binder: 7645:7649 ioctl c0306201 0 returned -14 [ 183.301288][ T7649] binder: 7645:7649 got transaction to invalid handle, 1 [ 183.302629][ T7649] binder: 7649:7645 cannot find target node [ 183.304259][ T7649] binder: 7645:7649 transaction async to 0:0 failed 94/29201/-22, size 0-0 line 3054 [ 183.311390][ T6510] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.659748][ T7688] loop7: detected capacity change from 0 to 16384 [ 185.482679][ T7698] binder: 7697:7698 got transaction to invalid handle, 1 [ 185.485890][ T7698] binder: 7698:7697 cannot find target node [ 185.487013][ T7698] binder: 7697:7698 transaction async to 0:0 failed 98/29201/-22, size 0-0 line 3054 [ 185.498164][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.675821][ T7731] loop7: detected capacity change from 0 to 16384 [ 187.477051][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.480604][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.886125][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.887833][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.972775][ T7775] loop7: detected capacity change from 0 to 16384 [ 190.239995][ T7816] loop7: detected capacity change from 0 to 16384 [ 193.449687][ T7897] loop7: detected capacity change from 0 to 16384 [ 195.807889][ T7947] loop7: detected capacity change from 0 to 16384 [ 196.454554][ T7969] binder: 7966:7969 tried to acquire reference to desc 0, got 1 instead [ 196.535254][ T7972] netlink: 'syz.4.1108': attribute type 6 has an invalid length. [ 196.933262][ T7979] binder: 7966:7979 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 196.935458][ T7979] binder: 7979 RLIMIT_NICE not set [ 196.936253][ T7979] binder: 7979 RLIMIT_NICE not set [ 196.937418][ T7979] binder: 7979 RLIMIT_NICE not set [ 196.938301][ T7979] binder_alloc: 7966: binder_alloc_buf, no vma [ 196.939344][ T7979] binder: cannot allocate buffer: vma cleared, target dead or dying [ 196.939372][ T7979] binder: 7966:7979 transaction reply to 7966:7979 failed 104/29189/-3, size 0-0 line 3239 [ 196.942128][ T7979] binder: send failed reply for transaction 103 to 7966:7979 [ 197.300300][ T4371] binder: undelivered TRANSACTION_ERROR: 29190 [ 197.301421][ T4371] binder: undelivered TRANSACTION_COMPLETE [ 197.302444][ T4371] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.057177][ T8000] loop7: detected capacity change from 0 to 16384 [ 198.438082][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.441895][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.142145][ T8024] binder: 8023:8024 tried to acquire reference to desc 0, got 1 instead [ 199.310710][ T8027] binder: 8023:8027 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 199.312853][ T8027] binder: 8027 RLIMIT_NICE not set [ 199.313859][ T8027] binder: 8027 RLIMIT_NICE not set [ 199.315413][ T8027] binder: 8027 RLIMIT_NICE not set [ 199.316387][ T8027] binder_alloc: 8023: binder_alloc_buf, no vma [ 199.317580][ T8027] binder: cannot allocate buffer: vma cleared, target dead or dying [ 199.317663][ T8027] binder: 8023:8027 transaction reply to 8023:8027 failed 110/29189/-3, size 0-0 line 3239 [ 199.320702][ T8027] binder: send failed reply for transaction 109 to 8023:8027 [ 200.191793][ T6510] binder: undelivered TRANSACTION_COMPLETE [ 202.096333][ T8074] binder: 8073:8074 tried to acquire reference to desc 0, got 1 instead [ 202.113112][ T8071] loop7: detected capacity change from 0 to 16384 [ 202.371463][ T8077] binder: 8073:8077 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 202.373670][ T8077] binder: 8077 RLIMIT_NICE not set [ 202.374800][ T8077] binder: 8077 RLIMIT_NICE not set [ 202.376317][ T8077] binder: 8077 RLIMIT_NICE not set [ 202.377321][ T8077] binder_alloc: 8073: binder_alloc_buf, no vma [ 202.378445][ T8077] binder_debug: 2 callbacks suppressed [ 202.378482][ T8077] binder: cannot allocate buffer: vma cleared, target dead or dying [ 202.379555][ T8077] binder: 8073:8077 transaction reply to 8073:8077 failed 116/29189/-3, size 0-0 line 3239 [ 202.382477][ T8077] binder: send failed reply for transaction 115 to 8073:8077 [ 203.088582][ T22] binder: undelivered TRANSACTION_ERROR: 29190 [ 203.090059][ T22] binder: undelivered TRANSACTION_COMPLETE [ 203.095172][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.375229][ T8117] loop7: detected capacity change from 0 to 16384 [ 205.476555][ T8125] binder: 8123:8125 tried to acquire reference to desc 0, got 1 instead [ 205.837633][ T8133] binder: 8123:8133 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 205.839691][ T8133] binder: 8133 RLIMIT_NICE not set [ 205.840630][ T8133] binder: 8133 RLIMIT_NICE not set [ 205.841692][ T8133] binder: 8133 RLIMIT_NICE not set [ 205.842509][ T8133] binder_alloc: 8123: binder_alloc_buf, no vma [ 205.843541][ T8133] binder: cannot allocate buffer: vma cleared, target dead or dying [ 205.843579][ T8133] binder: 8123:8133 transaction reply to 8123:8133 failed 122/29189/-3, size 0-0 line 3239 [ 205.846487][ T8133] binder: send failed reply for transaction 121 to 8123:8133 [ 206.304929][ T4371] binder: undelivered TRANSACTION_COMPLETE [ 207.698529][ C0] ------------[ cut here ]------------ [ 207.699571][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 207.700222][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 207.701153][ C0] WARNING: CPU: 0 PID: 8157 at net/mac80211/rate.c:385 __rate_control_send_low+0x574/0x774 [ 207.704056][ C0] Modules linked in: [ 207.704658][ C0] CPU: 0 PID: 8157 Comm: syz.3.1166 Not tainted syzkaller #0 [ 207.705739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 207.707181][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 207.708389][ C0] pc : __rate_control_send_low+0x574/0x774 [ 207.709253][ C0] lr : __rate_control_send_low+0x574/0x774 [ 207.710221][ C0] sp : ffff800008007670 [ 207.710961][ C0] x29: ffff8000080076c0 x28: ffff0000ca50b390 x27: 000000000000000c [ 207.712327][ C0] x26: dfff800000000000 x25: ffff0000ca50b3a0 x24: ffff0000cc22e7a8 [ 207.713670][ C0] x23: 0000000000000040 x22: 1fffe000194a1674 x21: ffff0000ca50b398 [ 207.715026][ C0] x20: ffff0000ca508ea0 x19: dfff800000000000 x18: ffff800011abbcc0 [ 207.716401][ C0] x17: 6d5f65746172206e x16: ffff8000082d25b8 x15: 62202c6666666666 [ 207.717716][ C0] x14: 6666667830282029 x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 207.719886][ C0] x11: ff00800008191ca8 x10: 0000000000000000 x9 : 6db3cceef7381100 [ 207.719902][ C0] x8 : 6db3cceef7381100 x7 : ffff80000830ceac x6 : 0000000000000000 [ 207.719911][ C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000852e428 [ 207.719919][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000000 [ 207.719928][ C0] Call trace: [ 207.719931][ C0] __rate_control_send_low+0x574/0x774 [ 207.719940][ C0] rate_control_send_low+0x164/0x684 [ 207.719945][ C0] rate_control_get_rate+0x1a0/0x4b8 [ 207.719951][ C0] ieee80211_beacon_get_finish+0x2e0/0x5b4 [ 207.719958][ C0] __ieee80211_beacon_get+0x1428/0x19cc [ 207.719964][ C0] ieee80211_beacon_get_tim+0x68/0x444 [ 207.719970][ C0] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 207.719976][ C0] __iterate_interfaces+0x204/0x484 [ 207.719983][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 207.719990][ C0] mac80211_hwsim_beacon+0xc8/0x1b8 [ 207.719996][ C0] __hrtimer_run_queues+0x44c/0xc64 [ 207.734857][ C0] hrtimer_run_softirq+0x160/0x400 [ 207.735711][ C0] handle_softirqs+0x318/0xc6c [ 207.736521][ C0] __do_softirq+0x14/0x20 [ 207.737230][ C0] ____do_softirq+0x14/0x20 [ 207.737946][ C0] call_on_irq_stack+0x30/0x48 [ 207.738724][ C0] do_softirq_own_stack+0x20/0x2c [ 207.739574][ C0] __irq_exit_rcu+0x23c/0x43c [ 207.740357][ C0] irq_exit_rcu+0x14/0x84 [ 207.741099][ C0] el1_interrupt+0x38/0x54 [ 207.741885][ C0] el1h_64_irq_handler+0x18/0x24 [ 207.742690][ C0] el1h_64_irq+0x64/0x68 [ 207.743387][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 207.744249][ C0] debug_object_free+0x290/0x3e0 [ 207.745029][ C0] hrtimer_nanosleep+0x208/0x298 [ 207.745825][ C0] common_nsleep+0xa0/0xb8 [ 207.746568][ C0] __arm64_sys_clock_nanosleep+0x328/0x364 [ 207.747560][ C0] invoke_syscall+0x98/0x2bc [ 207.748314][ C0] el0_svc_common+0x138/0x258 [ 207.749061][ C0] do_el0_svc+0x58/0x13c [ 207.749719][ C0] el0_svc+0x58/0x138 [ 207.750370][ C0] el0t_64_sync_handler+0x84/0xf0 [ 207.751173][ C0] el0t_64_sync+0x18c/0x190 [ 207.751861][ C0] irq event stamp: 3937 [ 207.752468][ C0] hardirqs last enabled at (3936): [] console_emit_next_record+0x7b0/0x954 [ 207.754189][ C0] hardirqs last disabled at (3937): [] el1_dbg+0x24/0x80 [ 207.755627][ C0] softirqs last enabled at (3350): [] local_bh_enable+0x10/0x34 [ 207.757078][ C0] softirqs last disabled at (3913): [] __do_softirq+0x14/0x20 [ 207.758527][ C0] ---[ end trace 0000000000000000 ]--- [ 207.759563][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.794814][ T8175] netlink: 'syz.4.1168': attribute type 1 has an invalid length.