last executing test programs: 15.57836642s ago: executing program 2 (id=167): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/135) 14.814367762s ago: executing program 2 (id=168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000380)={@val={0x500, 0x86dd}, @val={0x3, 0x3, 0xa, 0x0, 0x8d, 0xd}, @llc={@snap={0x1, 0xaa, '~', "3c89a7", 0xf21c, "dd68b2389d6fa45a011d3d1dd42a3a8e5fd7e716a3abd74c79cbbef2c8cafec5933db5bcb54841e1a4fe87ac45c5d6c474da7c41fd11a009d49a115bb213ae981c5cd81c6be6dbe0f860862e07f353b83856a76d7ba093ff63800d87168c2237d5ae4c1cdeab652cb30296fc747697b183a6f1b3576a7e2dff49fd9697946265e4881c0b2a66848f08320e6ac5c61f0be111f338"}}}, 0xaa) 13.71402536s ago: executing program 2 (id=173): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000b01f000000deffffff0000000000000000000030afa4e6857d36c4f62113281d050f049391b20911b2d2da0880abbba8f51544a9f5b06ed40160"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xa, @rand_addr=0x64010100}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) 8.405335071s ago: executing program 3 (id=190): unshare(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x22, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) read$rfkill(r1, &(0x7f0000000200), 0x8) 8.126272815s ago: executing program 3 (id=192): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 7.997104687s ago: executing program 3 (id=193): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x3, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x0, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x5, 0xfffffffc, 0x3, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x5f, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x6, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x6, 0x401, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf07d, 0x101, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x5, 0x312, 0x75, 0xea4, 0x0, 0x4, 0x7, 0xff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x7, 0x5, 0xb, 0x1, 0x2020000, 0x3, 0xbc45, 0x48c93690, 0x3e, 0x3], [0x7, 0x408, 0x4, 0x5, 0x6401d37b, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x65, 0x1000000b, 0x4, 0x9, 0x5, 0x0, 0x1, 0x2005, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0xc043, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x3, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x2, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x1, 0x4, 0xc4, 0x9, 0x1, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xc2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1ff, 0x200, 0x10001, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.79835803s ago: executing program 3 (id=194): unshare(0x26020480) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xd, 0x62ca, 0x1f, 0xfffffffffffffffd, 0x3, 0x7, 0x53, 0x10ecbc}, 0x0, 0x0, 0x0, 0x0) 7.614292193s ago: executing program 3 (id=195): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000001240)={'IDLETIMER\x00'}, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @private=0xac1414bb}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r3}, 0x18) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x5126, 0x3, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000080)={0x3, 0x2b4}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.362241307s ago: executing program 2 (id=196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000040400"/20, @ANYRES32=0x0, @ANYBLOB="2599ad8800000000140035007465616d3000"/28], 0x34}}, 0x0) lseek(0xffffffffffffffff, 0xe, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffd76) r2 = socket(0x200000000000011, 0x2, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='no,e\x00') connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) tgkill(0x0, 0x0, 0xa) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3f5, 0x0, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = dup(r5) socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendfile(r6, r6, 0x0, 0xffffffff) 6.142771066s ago: executing program 1 (id=200): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300"], 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000480)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.898474259s ago: executing program 2 (id=202): socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) 4.683892288s ago: executing program 1 (id=205): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="c841826c2883", 0x6}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x11) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000940)=':', 0xfdef}], 0x1) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x49be, &(0x7f0000000380)={0x0, 0x37b0, 0x10100, 0x0, 0x2, 0x0, r5}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000340)={0xfff, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) 4.341440563s ago: executing program 4 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0x40080) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_io_uring_setup(0x23b, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) 3.613957025s ago: executing program 1 (id=209): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b000000", @ANYBLOB="25003300d0000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c40)=ANY=[@ANYRES32=r4, @ANYRES16=0x0, @ANYBLOB="344e87122b000000", @ANYBLOB="0600950000000000060004000000060095000400000006009500060000000600950007000000060095000600"/56, @ANYBLOB="960f715729aed36a66d7709730dfcfbaede7eeb434fd121e3caa72cd3310a5dca8e41160d03eba54f33ef66d1e4dc2775d4733fc5ad75f21386ba6728f3576b10a751bdb1b26b6ab8a15edf23b14793363fe5e57434db2003e6f8e6bcbd1772c965e2d2d78bb7e9899f2c1ec98b10c553f473df7702ba6f7aecec265f9ef918475e0d7ace73cd305224ce0718f462e29c5aec3a9a81a0239732544b0d50dbf7470ee3109596f5bed3f2cfb8fa26f1f4f49698621", @ANYRESDEC], 0x54}}, 0x20000000) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x28, 0x2, 0x0, 0x1, [@typed={0x24, 0x14, 0x0, 0x0, @str='B\xa7\xed\x1a\x064!\x89(c\f\x8d\xf6\xfd\x03\xd1\xd4\xbb\xb7\x1f\xd6P\xf6\v{\x83\xea\n\xd0\x11_6'}]}]}, 0x4c}}, 0xc000) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) 3.478264196s ago: executing program 3 (id=210): semget$private(0x0, 0x4, 0x72e) r0 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) semget$private(0x0, 0x0, 0x2c1) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000180)='z', 0x1}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) 3.462942467s ago: executing program 2 (id=211): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a60", 0x50}], 0x2, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 3.423792067s ago: executing program 0 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x78}]}]}, 0x28}}, 0x2) 3.282448809s ago: executing program 0 (id=213): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x19, 0x1a, 0x200, &(0x7f0000000880)="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"}) 3.185170971s ago: executing program 4 (id=214): syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="02c93010000c0005001708080000007f00"], 0x15) 2.515865601s ago: executing program 1 (id=215): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40012140, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = semget$private(0x0, 0x4, 0x24) semctl$GETZCNT(r3, 0x2, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) bind$netrom(r6, &(0x7f0000000240)={{0x6, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 2.515641641s ago: executing program 4 (id=216): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2.512272841s ago: executing program 0 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000a40)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0xe, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x80000000}, 0x5, 0x0, 0x0, 0xfff3, 0x4, 'syz1\x00', "068d56d8c91c2ff074c8a20b8b06ad166494215e2dc01b7fd2889c2f7ec16e95", "bbc8c1e71e40bcebfc15352d496b0d66fdc65d5febb87b9d4a238dee022fc382", [{0x3, 0x0, {0x0, 0x9fef}}, {0xb3f, 0x7, {0x2, 0x4}}, {0x8, 0x5, {0x1, 0x400}}, {0x5, 0x5, {0x2, 0x3}}, {0x8855, 0x1, {0x2, 0x1}}, {0x9, 0x0, {0x3, 0x4}}, {0x8, 0x0, {0x2, 0x100}}, {0x800, 0x0, {0x2, 0x1000}}, {0xf50, 0x7, {0x1}}, {0x7, 0x5, {0xfd06d9b7a1289b9f, 0x7}}, {0x4, 0x6, {0x2, 0x3}}, {0x33f8, 0x3, {0x3, 0x101}}, {0xd139, 0xe28, {0x0, 0x8}}, {0x0, 0x1, {0x9a6db7f2d83cbac, 0xf}}, {0x10, 0x5, {0x3}}, {0x7f, 0xf000, {0x2, 0x7}}, {0x8000, 0x9c67, {0x0, 0x1}}, {0x5, 0x2, {0x2, 0x3}}, {0x0, 0x2, {0x3, 0x4}}, {0x6, 0x67, {0x3, 0x4}}, {0x3, 0xe2, {0x3}}, {0xff, 0xa, {0x1, 0x4}}, {0x9baf, 0x6, {0x3, 0x2d14}}, {0x4, 0x4, {0x2, 0x1}}, {0x5e4, 0x4, {0x3, 0x214}}, {0x8, 0xfffe, {0x1, 0x6}}, {0x0, 0x44e6, {0x3, 0x4}}, {0xb8, 0x8000, {0x2, 0x8}}, {0xffff, 0x2, {0x1}}, {0x2, 0xfffb, {0x0, 0x1}}, {0x3, 0xf3, {0x3, 0x101}}, {0x1, 0x7, {0x3, 0x7}}, {0x3, 0xfffc, {0x2, 0xf49}}, {0xd077, 0x6, {0x2, 0x2}}, {0x8, 0x4827, {0x1, 0x1}}, {0x401, 0xc57, {0x0, 0x3}}, {0x2df2, 0x8190, {0x2, 0x11}}, {0x2, 0x0, {0x2, 0x7ff}}, {0x6, 0x4}, {0x3ff, 0x4, {0x3, 0x80000000}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x240040d5}, 0x8040) 2.262770335s ago: executing program 4 (id=217): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300"], 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000480)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.218372056s ago: executing program 0 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 1.183255222s ago: executing program 0 (id=219): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x100, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0xffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180), 0x8}) 1.170189022s ago: executing program 1 (id=220): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 102.872159ms ago: executing program 4 (id=221): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) 18.45867ms ago: executing program 1 (id=222): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r1, r1, 0x4, 0x9, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000200)=[r1, r1, r1], &(0x7f0000000240)=[0x80000000], 0x3}) 16.81678ms ago: executing program 4 (id=223): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x4}}}}}}, 0x0) 0s ago: executing program 0 (id=224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0x100, 0x870bd2d, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) openat(r1, &(0x7f0000000780)='./file0\x00', 0x0, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 37.431441][ T4013] cgroup: Unknown subsys name 'net' [ 37.715469][ T4013] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 38.053011][ T4013] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.562821][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 39.573915][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 39.584408][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 39.641838][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 39.666974][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 39.704114][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.706300][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.709594][ T4025] device bridge_slave_0 entered promiscuous mode [ 39.714347][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.716235][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.719556][ T4025] device bridge_slave_1 entered promiscuous mode [ 39.750594][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.752712][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.755577][ T4024] device bridge_slave_0 entered promiscuous mode [ 39.779159][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.781190][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.784037][ T4033] device bridge_slave_0 entered promiscuous mode [ 39.787336][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.795436][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.798244][ T4024] device bridge_slave_1 entered promiscuous mode [ 39.802991][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.813992][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.815971][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.818667][ T4033] device bridge_slave_1 entered promiscuous mode [ 39.828125][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.876908][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.881950][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.886732][ T4025] team0: Port device team_slave_0 added [ 39.903021][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.907245][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.911040][ T4025] team0: Port device team_slave_1 added [ 39.919760][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.921843][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.924513][ T4035] device bridge_slave_0 entered promiscuous mode [ 39.927678][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.930307][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.933050][ T4026] device bridge_slave_0 entered promiscuous mode [ 39.958671][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.961103][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.964498][ T4035] device bridge_slave_1 entered promiscuous mode [ 39.967001][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.969740][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.972510][ T4026] device bridge_slave_1 entered promiscuous mode [ 39.987099][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.995186][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.002730][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.025819][ T4033] team0: Port device team_slave_0 added [ 40.030453][ T4024] team0: Port device team_slave_0 added [ 40.032779][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.034812][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.042512][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.047981][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.052863][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.070267][ T4033] team0: Port device team_slave_1 added [ 40.073748][ T4024] team0: Port device team_slave_1 added [ 40.100180][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.111336][ T4035] team0: Port device team_slave_0 added [ 40.120600][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.123799][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.125803][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.133544][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.151516][ T4035] team0: Port device team_slave_1 added [ 40.153696][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.155738][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.163249][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.167628][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.169824][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.176810][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.181210][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.183212][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.190844][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.225046][ T4026] team0: Port device team_slave_0 added [ 40.271547][ T4025] device hsr_slave_0 entered promiscuous mode [ 40.309476][ T4025] device hsr_slave_1 entered promiscuous mode [ 40.376590][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.378636][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.386229][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.393425][ T4026] team0: Port device team_slave_1 added [ 40.395563][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.397565][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.405146][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.451971][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.454028][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.461430][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.511112][ T4033] device hsr_slave_0 entered promiscuous mode [ 40.549553][ T4033] device hsr_slave_1 entered promiscuous mode [ 40.589184][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.591561][ T4033] Cannot create hsr debugfs directory [ 40.631135][ T4024] device hsr_slave_0 entered promiscuous mode [ 40.679614][ T4024] device hsr_slave_1 entered promiscuous mode [ 40.719132][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.721402][ T4024] Cannot create hsr debugfs directory [ 40.738402][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.740441][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.747622][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.871002][ T4035] device hsr_slave_0 entered promiscuous mode [ 40.909522][ T4035] device hsr_slave_1 entered promiscuous mode [ 40.949202][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.951449][ T4035] Cannot create hsr debugfs directory [ 41.031125][ T4026] device hsr_slave_0 entered promiscuous mode [ 41.069505][ T4026] device hsr_slave_1 entered promiscuous mode [ 41.109395][ T4026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.111592][ T4026] Cannot create hsr debugfs directory [ 41.269800][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 41.272033][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 41.273819][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 41.285529][ T3606] Bluetooth: hci3: command 0x0409 tx timeout [ 41.287306][ T3606] Bluetooth: hci0: command 0x0409 tx timeout [ 41.328913][ T4025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.382958][ T4025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.422018][ T4025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.464727][ T4025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.546534][ T4024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.585700][ T4024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.638879][ T4024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.691845][ T4024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.768834][ T4033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.800074][ T4033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.852235][ T4033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.893437][ T4033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.968288][ T4035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.013266][ T4035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.061127][ T4035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.101134][ T4035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.177800][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.235028][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.243381][ T4026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.261825][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.266006][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.274511][ T4026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.322131][ T4026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.375305][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.378365][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.382078][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.384243][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.395839][ T4026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.423139][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.434736][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.438778][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.442571][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.444730][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.447144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.456836][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.474352][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.476635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.480860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.483444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.507883][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.512575][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.515796][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.537488][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.540806][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.543448][ T568] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.545382][ T568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.554167][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.560461][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.568047][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.571598][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.574648][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.585869][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.588770][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.593553][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.596712][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.600263][ T568] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.602357][ T568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.617615][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.621665][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.624691][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.628038][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.634838][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.638037][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.655613][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.658715][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.662950][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.684975][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.688145][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.692628][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.695391][ T568] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.697645][ T568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.701710][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.708531][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.741022][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.744696][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.748226][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.753996][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.756842][ T1700] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.758910][ T1700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.761803][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.764638][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.767371][ T1700] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.769573][ T1700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.786774][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.790608][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.793266][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.799581][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.804394][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.807448][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.812121][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.815856][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.818838][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.843840][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.853200][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.873606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.877285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.882543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.885043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.887337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.891265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.894123][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.896115][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.898683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.907375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.913693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.929215][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.932419][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.948718][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.952623][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.955532][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.962981][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.966029][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.978781][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.985001][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.987863][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.003141][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.007811][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.013024][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.016363][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.022093][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.024979][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.047053][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.051620][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.057351][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.068163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.072620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.079534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.081809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.097424][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.118776][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.140860][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.143941][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.146835][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.152473][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.155135][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.157193][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.160366][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.163347][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.166612][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.168558][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.172973][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.187224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.206789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.227057][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.233905][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.250680][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.252952][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.255614][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.259381][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.262637][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.265664][ T4025] device veth0_vlan entered promiscuous mode [ 43.268418][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.276732][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.281102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.309929][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.312960][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.315872][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.318158][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.324430][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.327492][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.338693][ T4025] device veth1_vlan entered promiscuous mode [ 43.347154][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.350861][ T4076] Bluetooth: hci3: command 0x041b tx timeout [ 43.352712][ T4076] Bluetooth: hci2: command 0x041b tx timeout [ 43.353499][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.354652][ T4076] Bluetooth: hci1: command 0x041b tx timeout [ 43.357467][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.358603][ T4076] Bluetooth: hci4: command 0x041b tx timeout [ 43.364437][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.367319][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.368352][ T4077] Bluetooth: hci0: command 0x041b tx timeout [ 43.375716][ T4024] device veth0_vlan entered promiscuous mode [ 43.378172][ T4026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.383851][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.396247][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.402205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.404975][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.407952][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.417791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.421866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.453482][ T4024] device veth1_vlan entered promiscuous mode [ 43.457084][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.466830][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.472266][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.523311][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.526096][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.533848][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.548093][ T4035] device veth0_vlan entered promiscuous mode [ 43.561375][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.564127][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.578127][ T4024] device veth0_macvtap entered promiscuous mode [ 43.591622][ T4025] device veth0_macvtap entered promiscuous mode [ 43.597249][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.603386][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.606135][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.608905][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.617678][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.623288][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.630619][ T4035] device veth1_vlan entered promiscuous mode [ 43.639647][ T4025] device veth1_macvtap entered promiscuous mode [ 43.663993][ T4024] device veth1_macvtap entered promiscuous mode [ 43.678448][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.683812][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.686670][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.689789][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.692546][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.695267][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.698225][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.702992][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.705254][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.723181][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.730603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.733533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.747976][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.753876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.756922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.761388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.764399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.771212][ T4035] device veth0_macvtap entered promiscuous mode [ 43.777358][ T4025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.780840][ T4025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.783336][ T4025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.785792][ T4025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.791058][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.794186][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.798336][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.807592][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.811213][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.815500][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.829368][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.832150][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.835102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.837977][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.843962][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.846963][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.851519][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.854374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.856956][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.870701][ T4035] device veth1_macvtap entered promiscuous mode [ 43.876349][ T4033] device veth0_vlan entered promiscuous mode [ 43.888651][ T4024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.892905][ T4024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.895308][ T4024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.897708][ T4024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.907925][ T4033] device veth1_vlan entered promiscuous mode [ 43.915796][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.918841][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.983787][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.986672][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.992867][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.995666][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.027766][ T4026] device veth0_vlan entered promiscuous mode [ 44.036535][ T4026] device veth1_vlan entered promiscuous mode [ 44.057880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.061796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.064612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.073584][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.076621][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.081006][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.084084][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.088347][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.106435][ T4033] device veth0_macvtap entered promiscuous mode [ 44.124249][ T568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.126687][ T568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.132618][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.135144][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.137517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.142646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.147253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.150779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.154958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.157819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.187255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.191503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.221053][ T4026] device veth0_macvtap entered promiscuous mode [ 44.225719][ T4033] device veth1_macvtap entered promiscuous mode [ 44.237988][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.242457][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.245317][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.248281][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.253408][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.268122][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.271966][ T4026] device veth1_macvtap entered promiscuous mode [ 44.274846][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.299660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.302603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.305566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.308435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.317598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.326435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.337064][ T4035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.341730][ T4035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.344343][ T4035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.346735][ T4035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.507111][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.511404][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.514094][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.517055][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.520118][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.522968][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.527235][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.533765][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.537049][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.540004][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.542972][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.546185][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.554466][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.595948][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.327363][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.327898][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.335049][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.335826][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.430762][ T4073] Bluetooth: hci3: command 0x040f tx timeout [ 45.628248][ T4071] Bluetooth: hci0: command 0x040f tx timeout [ 45.630362][ T4071] Bluetooth: hci4: command 0x040f tx timeout [ 45.681477][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.684589][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.687357][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.695044][ T4071] Bluetooth: hci1: command 0x040f tx timeout [ 45.696884][ T4071] Bluetooth: hci2: command 0x040f tx timeout [ 45.704511][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.707360][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.711158][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.713939][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.716930][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.721708][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.728795][ T4033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.733910][ T4033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.736528][ T4033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.739036][ T4033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.747150][ T568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.751185][ T568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.767084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.770591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.773541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.796898][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.800614][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.803501][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.806500][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.816486][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.819960][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.822737][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.825626][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.836456][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.907781][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.916149][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.951445][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.953890][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.960953][ T1700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.963289][ T1700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.966312][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.969967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.972913][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.002525][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.739406][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.744301][ T4026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.746883][ T4026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.782394][ T4026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.784836][ T4026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.843551][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.845961][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.908252][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.095993][ T4121] Zero length message leads to an empty skb [ 47.284510][ T4124] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.289662][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.292534][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.305747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.330346][ T4122] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 47.375030][ T4115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.377524][ T4115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.393382][ T4127] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 47.464904][ T4128] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 47.477573][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.509879][ T4073] Bluetooth: hci3: command 0x0419 tx timeout [ 47.540514][ T4122] trusted_key: encrypted_key: insufficient parameters specified [ 47.704094][ T4073] Bluetooth: hci0: command 0x0419 tx timeout [ 47.760619][ T4073] Bluetooth: hci1: command 0x0419 tx timeout [ 47.762482][ T4073] Bluetooth: hci4: command 0x0419 tx timeout [ 48.340110][ T4075] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.116385][ T26] audit: type=1326 audit(48.330:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.178348][ T26] audit: type=1326 audit(48.340:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.209660][ T26] audit: type=1326 audit(48.560:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.215449][ T26] audit: type=1326 audit(48.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.266742][ T26] audit: type=1326 audit(48.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.288376][ T26] audit: type=1326 audit(48.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.315289][ T26] audit: type=1326 audit(48.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.367298][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8'. [ 49.369875][ T4146] netlink: 'syz.4.8': attribute type 5 has an invalid length. [ 49.372180][ T4146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8'. [ 49.374870][ T26] audit: type=1326 audit(48.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.377139][ T4146] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 49.389424][ T4146] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 49.391922][ T4146] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 49.394312][ T4146] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 49.396704][ T4146] device geneve2 entered promiscuous mode [ 49.409060][ T26] audit: type=1326 audit(48.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 49.430147][ T26] audit: type=1326 audit(48.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 50.529125][ T4075] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 50.531899][ T4075] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 50.534546][ T4075] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.572453][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.577771][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.589903][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.839451][ T4075] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 50.842015][ T4075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 50.844458][ T4075] usb 1-1: Product: syz [ 50.845620][ T4075] usb 1-1: Manufacturer: syz [ 50.846848][ T4075] usb 1-1: SerialNumber: syz [ 50.899190][ T4075] usb 1-1: can't set config #1, error -71 [ 50.906831][ T4075] usb 1-1: USB disconnect, device number 2 [ 50.929930][ T4161] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 51.688685][ T3606] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 51.692075][ T3606] Bluetooth: hci2: Injecting HCI hardware error event [ 51.694786][ T4037] Bluetooth: hci2: hardware error 0x00 [ 51.729746][ T4075] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.639063][ T4075] usb 1-1: Using ep0 maxpacket: 32 [ 52.759397][ T4075] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 53.069335][ T4075] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 53.071971][ T4075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.074152][ T4075] usb 1-1: Product: syz [ 53.075332][ T4075] usb 1-1: Manufacturer: syz [ 53.076676][ T4075] usb 1-1: SerialNumber: syz [ 53.109819][ T4075] usb 1-1: config 0 descriptor?? [ 53.130019][ T4173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.140744][ T4192] netlink: 'syz.3.24': attribute type 4 has an invalid length. [ 53.147015][ T4194] udc-core: couldn't find an available UDC or it's busy [ 53.153433][ T4075] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input2 [ 53.167213][ T4194] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.244879][ T4191] netlink: 'syz.3.24': attribute type 4 has an invalid length. [ 53.566768][ T3606] usb 1-1: USB disconnect, device number 3 [ 53.902933][ T4206] binder: 4205:4206 tried to acquire reference to desc 0, got 1 instead [ 53.909901][ T4206] binder: 4205:4206 BC_FREE_BUFFER u0000000000000000 no match [ 53.918609][ T7] binder: undelivered TRANSACTION_COMPLETE [ 53.940924][ T3606] binder: undelivered transaction 5, process died. [ 54.599083][ T1534] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 54.946213][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 54.959322][ T1534] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 54.962624][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.965805][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.983957][ T1534] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 55.059158][ T1534] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 55.061802][ T1534] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 55.064100][ T1534] usb 1-1: Manufacturer: syz [ 55.077806][ T1534] usb 1-1: config 0 descriptor?? [ 55.097885][ T4228] udc-core: couldn't find an available UDC or it's busy [ 55.106950][ T4228] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.311878][ T4228] udc-core: couldn't find an available UDC or it's busy [ 55.314013][ T4228] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.573069][ T1534] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 55.575974][ T1534] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 55.610489][ T1534] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 56.465677][ T1534] usb 1-1: USB disconnect, device number 4 [ 57.016789][ T4249] udc-core: couldn't find an available UDC or it's busy [ 57.018946][ T4249] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.029395][ T4250] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 57.467101][ T4257] 9pnet_virtio: no channels available for device syz [ 58.167360][ T4259] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 59.868685][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 59.910864][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 60.194313][ T4285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 60.593754][ T4298] udc-core: couldn't find an available UDC or it's busy [ 60.598333][ T4298] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.648306][ T4283] ODEBUG: Out of memory. ODEBUG disabled [ 64.685776][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 65.073106][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 65.073119][ T26] audit: type=1326 audit(65.000:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 65.088038][ T26] audit: type=1326 audit(65.000:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 65.106557][ T26] audit: type=1326 audit(65.000:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 65.126208][ T26] audit: type=1326 audit(65.000:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 65.155589][ T26] audit: type=1326 audit(65.010:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 65.175938][ T26] audit: type=1326 audit(65.010:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 65.632943][ T4341] netlink: 56 bytes leftover after parsing attributes in process `syz.0.75'. [ 65.705359][ T4345] tipc: Failed to obtain node identity [ 65.711504][ T4345] tipc: Enabling of bearer rejected, failed to enable media [ 65.947936][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 65.950767][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 65.967445][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 65.969841][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 66.125498][ T4350] ceph: No mds server is up or the cluster is laggy [ 66.203946][ T4283] Set syz1 is full, maxelem 65536 reached [ 66.997131][ T7] libceph: connect (1)[c::]:6789 error -101 [ 67.054206][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 67.108024][ T4364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.83'. [ 67.206308][ T4373] 8021q: VLANs not supported on vcan0 [ 67.946738][ T4388] udc-core: couldn't find an available UDC or it's busy [ 67.958469][ T4388] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.132359][ T4393] UHID_CREATE from different security context by process 41 (syz.2.93), this is not allowed. [ 68.472788][ T4395] 9pnet_virtio: no channels available for device syz [ 69.671701][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.674510][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.080386][ T26] audit: type=1326 audit(69.700:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.509067][ T26] audit: type=1326 audit(69.710:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.553346][ T26] audit: type=1326 audit(69.750:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.594785][ T26] audit: type=1326 audit(69.750:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.607001][ T26] audit: type=1326 audit(69.750:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.613577][ T26] audit: type=1326 audit(69.920:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.637493][ T26] audit: type=1326 audit(69.920:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.669397][ T26] audit: type=1326 audit(69.920:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.676471][ T26] audit: type=1326 audit(69.920:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 70.705170][ T26] audit: type=1326 audit(69.920:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0a38a8 code=0x7ffc0000 [ 71.751806][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.754155][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.757716][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.769097][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.775322][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.779334][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.781664][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.814539][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.816753][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.833509][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.846019][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.848175][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.856151][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.858328][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.866304][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.874086][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.913958][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 71.916260][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 72.278166][ T4445] 9pnet_virtio: no channels available for device syz [ 72.737233][ T4446] netlink: 56 bytes leftover after parsing attributes in process `syz.3.110'. [ 72.753691][ T4446] netlink: 'syz.3.110': attribute type 3 has an invalid length. [ 72.768293][ T4446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 72.780999][ T4446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 74.929012][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 74.931294][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 74.933540][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 74.935672][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 74.937842][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 74.963270][ T13] cfg80211: failed to load regulatory.db [ 75.260153][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.262570][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.302645][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.305439][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.307744][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.357844][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.365451][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.367746][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.387954][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.393531][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.403648][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.419076][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.426126][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.428389][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.451092][ T4456] binder: BINDER_SET_CONTEXT_MGR already set [ 75.453138][ T4456] binder: 4455:4456 ioctl 4018620d 20000040 returned -16 [ 75.469864][ T4456] binder: 4455:4456 got transaction to invalid handle, 1 [ 75.472250][ T4456] binder: 4455:4456 transaction failed 29201/-22, size 72-24 line 2917 [ 75.476415][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.478613][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.498331][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.511649][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.513935][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.516130][ T7] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 75.560648][ T4074] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.579789][ T7] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.802840][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 75.805767][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 75.825922][ T4473] udc-core: couldn't find an available UDC or it's busy [ 75.827845][ T4473] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.318833][ T4475] fido_id[4475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.782322][ T4488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.121'. [ 76.785056][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 76.855590][ T4489] bridge0: port 3(syz_tun) entered blocking state [ 76.865755][ T4489] bridge0: port 3(syz_tun) entered disabled state [ 76.907210][ T4489] device syz_tun entered promiscuous mode [ 76.909804][ T4489] bridge0: port 3(syz_tun) entered blocking state [ 76.911870][ T4489] bridge0: port 3(syz_tun) entered forwarding state [ 79.990800][ T4504] sched: RT throttling activated [ 80.116981][ T4499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.122924][ T4499] bond0: (slave rose0): Enslaving as an active interface with an up link [ 80.125593][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.309847][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.313641][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.315874][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.351914][ T4536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.133'. [ 81.433104][ T4533] device bridge_slave_0 left promiscuous mode [ 81.436011][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.554951][ T4542] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 81.613649][ T4533] device bridge_slave_1 left promiscuous mode [ 81.625614][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.686307][ T4533] bond0: (slave bond_slave_0): Releasing backup interface [ 81.753515][ T4533] bond0: (slave bond_slave_1): Releasing backup interface [ 81.843805][ T4533] team0: Port device team_slave_0 removed [ 81.881187][ T4533] team0: Port device team_slave_1 removed [ 81.884192][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.886551][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.923616][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.928496][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.141590][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 83.171522][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 83.171537][ T26] audit: type=1400 audit(83.100:67): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":l" pid=4561 comm="syz.0.140" [ 83.351394][ T4570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'. [ 84.118778][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 84.343558][ T4620] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 84.345788][ T4620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.373938][ T4620] vhci_hcd vhci_hcd.0: Device attached [ 85.954369][ T4620] team0: No ports can be present during mode change [ 85.957483][ T4620] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 86.052199][ T4620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.055428][ T4620] team0: Port device bond0 added [ 86.126487][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 87.181420][ T4626] team0 (unregistering): Port device team_slave_0 removed [ 87.270168][ T4626] team0 (unregistering): Port device team_slave_1 removed [ 87.310088][ T4626] team0 (unregistering): Port device bond0 removed [ 87.436193][ T4076] usb 8-1: new high-speed USB device number 2 using vhci_hcd [ 87.553246][ T4621] vhci_hcd: connection reset by peer [ 87.560613][ T4444] vhci_hcd: stop threads [ 87.562004][ T4444] vhci_hcd: release socket [ 87.588626][ T4444] vhci_hcd: disconnect device [ 87.644613][ T4651] device ipvlan2 entered promiscuous mode [ 87.800566][ T4659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 88.292881][ T4665] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 89.785666][ T4687] binder: 4685:4687 ioctl c0046209 0 returned -22 [ 90.886492][ T4773] netlink: 52 bytes leftover after parsing attributes in process `syz.3.176'. [ 91.586958][ T4073] binder: undelivered death notification, 0000000000000000 [ 91.714144][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.716640][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.722088][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.724586][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.726950][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.729525][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.363843][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 92.559214][ T4076] vhci_hcd: vhci_device speed not set [ 92.767536][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 95.162112][ T4815] ======================================================= [ 95.162112][ T4815] WARNING: The mand mount option has been deprecated and [ 95.162112][ T4815] and is ignored by this kernel. Remove the mand [ 95.162112][ T4815] option from the mount to silence this warning. [ 95.162112][ T4815] ======================================================= [ 95.179114][ T4819] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 95.180946][ T4819] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.184318][ T4819] vhci_hcd vhci_hcd.0: Device attached [ 95.220167][ T4815] 9pnet_virtio: no channels available for device syz [ 95.360312][ T4823] team0: No ports can be present during mode change [ 95.395664][ T4823] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 95.399250][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 95.612881][ T26] audit: type=1326 audit(95.540:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbae6638c code=0x7ffc0000 [ 95.623596][ T4823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.626674][ T26] audit: type=1326 audit(95.540:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbaf737fc code=0x7ffc0000 [ 95.627080][ T4823] team0: Port device bond0 added [ 95.644320][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 95.679182][ T4076] usb 4-1: new high-speed USB device number 2 using vhci_hcd [ 95.697238][ T26] audit: type=1326 audit(95.540:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbae6638c code=0x7ffc0000 [ 95.735864][ T26] audit: type=1326 audit(95.540:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbaf737fc code=0x7ffc0000 [ 95.766169][ T26] audit: type=1326 audit(95.540:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbae6638c code=0x7ffc0000 [ 95.786934][ T26] audit: type=1326 audit(95.540:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbaf737fc code=0x7ffc0000 [ 95.807106][ T26] audit: type=1326 audit(95.540:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbae6638c code=0x7ffc0000 [ 95.820477][ T4825] team0 (unregistering): Port device team_slave_0 removed [ 95.828327][ T26] audit: type=1326 audit(95.540:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbaf737fc code=0x7ffc0000 [ 95.870422][ T26] audit: type=1326 audit(95.540:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbae6638c code=0x7ffc0000 [ 95.871616][ T4825] team0 (unregistering): Port device team_slave_1 removed [ 95.886866][ T26] audit: type=1326 audit(95.540:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbaf737fc code=0x7ffc0000 [ 95.966511][ T4825] team0 (unregistering): Port device bond0 removed [ 96.199668][ T4820] vhci_hcd: connection reset by peer [ 96.210644][ T1700] vhci_hcd: stop threads [ 96.211953][ T1700] vhci_hcd: release socket [ 96.213375][ T1700] vhci_hcd: disconnect device [ 97.286782][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 97.288724][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 97.291491][ T4846] ceph: No mds server is up or the cluster is laggy [ 97.294101][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 97.296021][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 97.332942][ T4852] udc-core: couldn't find an available UDC or it's busy [ 97.335169][ T4852] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.838438][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 98.966436][ T4869] binder: 4867:4869 ioctl c0046209 0 returned -22 [ 99.196741][ T4857] mmap: syz.2.202 (4857) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 99.375393][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.380644][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.292756][ T4037] Bluetooth: Wrong link type (-22) [ 100.329541][ T4886] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 100.412038][ T4893] netlink: 'syz.3.210': attribute type 1 has an invalid length. [ 100.849536][ T4076] vhci_hcd: vhci_device speed not set [ 101.119245][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 101.269592][ T4914] udc-core: couldn't find an available UDC or it's busy [ 101.271741][ T4914] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 102.121325][ T4917] binder: 4915:4917 tried to acquire reference to desc 0, got 1 instead [ 102.145538][ T4917] binder: release 4915:4917 transaction 15 out, still active [ 102.148876][ T4917] binder: undelivered TRANSACTION_COMPLETE [ 102.187220][ T7] binder: send failed reply for transaction 15, target dead [ 103.361860][ T4928] netlink: 'syz.4.221': attribute type 4 has an invalid length. [ 103.501765][ T4930] [ 103.502486][ T4930] ====================================================== [ 103.504483][ T4930] WARNING: possible circular locking dependency detected [ 103.506569][ T4930] 5.15.185-syzkaller #0 Not tainted [ 103.508116][ T4930] ------------------------------------------------------ [ 103.510177][ T4930] syz.0.224/4930 is trying to acquire lock: [ 103.511848][ T4930] ffff0000e49f8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 103.515131][ T4930] [ 103.515131][ T4930] but task is already holding lock: [ 103.517287][ T4930] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 103.520068][ T4930] [ 103.520068][ T4930] which lock already depends on the new lock. [ 103.520068][ T4930] [ 103.522936][ T4930] [ 103.522936][ T4930] the existing dependency chain (in reverse order) is: [ 103.525539][ T4930] [ 103.525539][ T4930] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 103.527827][ T4930] __mutex_lock_common+0x194/0x1edc [ 103.529534][ T4930] mutex_lock_nested+0xac/0x11c [ 103.531048][ T4930] rfkill_register+0x44/0x77c [ 103.532489][ T4930] hci_register_dev+0x3d8/0x854 [ 103.534015][ T4930] vhci_create_device+0x2bc/0x564 [ 103.535634][ T4930] vhci_write+0x30c/0x3ac [ 103.536988][ T4930] vfs_write+0x7c8/0xa2c [ 103.538362][ T4930] ksys_write+0x120/0x210 [ 103.539798][ T4930] __arm64_sys_write+0x7c/0x90 [ 103.541262][ T4930] invoke_syscall+0x98/0x2b8 [ 103.542735][ T4930] el0_svc_common+0x138/0x258 [ 103.544257][ T4930] do_el0_svc+0x58/0x14c [ 103.545614][ T4930] el0_svc+0x78/0x1e0 [ 103.546857][ T4930] el0t_64_sync_handler+0xcc/0xe4 [ 103.548395][ T4930] el0t_64_sync+0x1a0/0x1a4 [ 103.549871][ T4930] [ 103.549871][ T4930] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 103.552111][ T4930] __mutex_lock_common+0x194/0x1edc [ 103.553710][ T4930] mutex_lock_nested+0xac/0x11c [ 103.555149][ T4930] vhci_send_frame+0x88/0x118 [ 103.556631][ T4930] hci_send_frame+0x194/0x2f0 [ 103.558091][ T4930] hci_tx_work+0x7e4/0x1394 [ 103.559563][ T4930] process_one_work+0x79c/0x1140 [ 103.561163][ T4930] worker_thread+0x8f4/0x101c [ 103.562629][ T4930] kthread+0x374/0x454 [ 103.563961][ T4930] ret_from_fork+0x10/0x20 [ 103.565347][ T4930] [ 103.565347][ T4930] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 103.567959][ T4930] __flush_work+0xf4/0x1bc [ 103.569525][ T4930] flush_work+0x24/0x38 [ 103.570807][ T4930] hci_dev_do_close+0x164/0x105c [ 103.572349][ T4930] hci_error_reset+0xe8/0x2a4 [ 103.573805][ T4930] process_one_work+0x79c/0x1140 [ 103.575376][ T4930] worker_thread+0x8f4/0x101c [ 103.576816][ T4930] kthread+0x374/0x454 [ 103.578115][ T4930] ret_from_fork+0x10/0x20 [ 103.579566][ T4930] [ 103.579566][ T4930] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 103.581689][ T4930] __mutex_lock_common+0x194/0x1edc [ 103.583350][ T4930] mutex_lock_nested+0xac/0x11c [ 103.584826][ T4930] bg_scan_update+0x48/0x3d0 [ 103.586272][ T4930] process_one_work+0x79c/0x1140 [ 103.587902][ T4930] worker_thread+0x8f4/0x101c [ 103.589345][ T4930] kthread+0x374/0x454 [ 103.590597][ T4930] ret_from_fork+0x10/0x20 [ 103.592023][ T4930] [ 103.592023][ T4930] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 103.594754][ T4930] __lock_acquire+0x2928/0x651c [ 103.596237][ T4930] lock_acquire+0x1f4/0x620 [ 103.597689][ T4930] __flush_work+0xf4/0x1bc [ 103.599079][ T4930] __cancel_work_timer+0x2ec/0x448 [ 103.600664][ T4930] cancel_work_sync+0x24/0x38 [ 103.602131][ T4930] hci_request_cancel_all+0xbc/0x2d0 [ 103.603778][ T4930] hci_dev_do_close+0x54/0x105c [ 103.605354][ T4930] hci_rfkill_set_block+0xdc/0x1d0 [ 103.606983][ T4930] rfkill_set_block+0x18c/0x374 [ 103.608486][ T4930] rfkill_fop_write+0x4a4/0x5cc [ 103.610024][ T4930] vfs_write+0x280/0xa2c [ 103.611373][ T4930] ksys_write+0x120/0x210 [ 103.612819][ T4930] __arm64_sys_write+0x7c/0x90 [ 103.614311][ T4930] invoke_syscall+0x98/0x2b8 [ 103.615719][ T4930] el0_svc_common+0x138/0x258 [ 103.617249][ T4930] do_el0_svc+0x58/0x14c [ 103.618561][ T4930] el0_svc+0x78/0x1e0 [ 103.619814][ T4930] el0t_64_sync_handler+0xcc/0xe4 [ 103.621373][ T4930] el0t_64_sync+0x1a0/0x1a4 [ 103.622822][ T4930] [ 103.622822][ T4930] other info that might help us debug this: [ 103.622822][ T4930] [ 103.625774][ T4930] Chain exists of: [ 103.625774][ T4930] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 103.625774][ T4930] [ 103.630332][ T4930] Possible unsafe locking scenario: [ 103.630332][ T4930] [ 103.632426][ T4930] CPU0 CPU1 [ 103.633884][ T4930] ---- ---- [ 103.635469][ T4930] lock(rfkill_global_mutex); [ 103.636805][ T4930] lock(&data->open_mutex); [ 103.638896][ T4930] lock(rfkill_global_mutex); [ 103.641013][ T4930] lock((work_completion)(&hdev->bg_scan_update)); [ 103.642894][ T4930] [ 103.642894][ T4930] *** DEADLOCK *** [ 103.642894][ T4930] [ 103.645240][ T4930] 1 lock held by syz.0.224/4930: [ 103.646689][ T4930] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 103.649593][ T4930] [ 103.649593][ T4930] stack backtrace: [ 103.651263][ T4930] CPU: 0 PID: 4930 Comm: syz.0.224 Not tainted 5.15.185-syzkaller #0 [ 103.653486][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.656370][ T4930] Call trace: [ 103.657330][ T4930] dump_backtrace+0x0/0x43c [ 103.658567][ T4930] show_stack+0x2c/0x3c [ 103.659745][ T4930] __dump_stack+0x30/0x40 [ 103.660933][ T4930] dump_stack_lvl+0xf8/0x160 [ 103.662203][ T4930] dump_stack+0x1c/0x5c [ 103.663368][ T4930] print_circular_bug+0x148/0x1b0 [ 103.664801][ T4930] check_noncircular+0x240/0x2d4 [ 103.666250][ T4930] __lock_acquire+0x2928/0x651c [ 103.667614][ T4930] lock_acquire+0x1f4/0x620 [ 103.668871][ T4930] __flush_work+0xf4/0x1bc [ 103.670094][ T4930] __cancel_work_timer+0x2ec/0x448 [ 103.671581][ T4930] cancel_work_sync+0x24/0x38 [ 103.672884][ T4930] hci_request_cancel_all+0xbc/0x2d0 [ 103.674401][ T4930] hci_dev_do_close+0x54/0x105c [ 103.675762][ T4930] hci_rfkill_set_block+0xdc/0x1d0 [ 103.677206][ T4930] rfkill_set_block+0x18c/0x374 [ 103.678588][ T4930] rfkill_fop_write+0x4a4/0x5cc [ 103.680022][ T4930] vfs_write+0x280/0xa2c [ 103.681215][ T4930] ksys_write+0x120/0x210 [ 103.682475][ T4930] __arm64_sys_write+0x7c/0x90 [ 103.683787][ T4930] invoke_syscall+0x98/0x2b8 [ 103.685127][ T4930] el0_svc_common+0x138/0x258 [ 103.686540][ T4930] do_el0_svc+0x58/0x14c [ 103.687743][ T4930] el0_svc+0x78/0x1e0 [ 103.688823][ T4930] el0t_64_sync_handler+0xcc/0xe4 [ 103.690319][ T4930] el0t_64_sync+0x1a0/0x1a4 [ 103.691687][ C0] vkms_vblank_simulate: vblank timer overrun