last executing test programs: 11.370308277s ago: executing program 1 (id=1611): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x3, 0xffffffff, @mcast2, 0x5}, 0x1c) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x7, 0x8002}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11.010393892s ago: executing program 3 (id=1615): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 10.939428433s ago: executing program 3 (id=1617): eventfd2(0x3, 0x800) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r2, 0x0) 7.882349647s ago: executing program 3 (id=1625): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x3, [@bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @bcast, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@random="8c", 0x1, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 7.68784991s ago: executing program 1 (id=1628): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 7.63277784s ago: executing program 3 (id=1630): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x2004, 0x6, 0x3}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="09524c8d869c", 0x6}], 0x2}, 0x24008004) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 7.552920102s ago: executing program 2 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(r2, 0x0, 0x0, 0x800) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) dup3(r4, r5, 0x0) 7.551757382s ago: executing program 1 (id=1633): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x205, 0x2581) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x8dff}, 0x10b8c}}, 0x0) 6.25791088s ago: executing program 3 (id=1635): eventfd2(0x3, 0x800) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r2, 0x0) 5.874870576s ago: executing program 2 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x24000004) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x20002, 0x1, 0x4}) pread64(r4, &(0x7f0000000500)=""/46, 0x2e, 0x81) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, r7) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) socket(0x40000000015, 0x805, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r9, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) 4.498737865s ago: executing program 3 (id=1638): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x3, 0xffffffff, @mcast2, 0x5}, 0x1c) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x7, 0x8002}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.471644596s ago: executing program 2 (id=1640): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x3, [@bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @bcast, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@random="8c", 0x1, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 4.358982058s ago: executing program 1 (id=1642): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x58, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f0000000540)=[{&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000000500)=""/6, 0x6}], 0x2, 0x40, 0xffffffffffffffff}}], 0x48}, 0x0) 4.16213745s ago: executing program 2 (id=1643): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12) 3.715554296s ago: executing program 1 (id=1644): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, 0x0, 0x4081) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 3.223097033s ago: executing program 0 (id=1645): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x2004, 0x6, 0x3}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="09524c8d869c", 0x6}], 0x2}, 0x24008004) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 2.110332059s ago: executing program 0 (id=1647): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mirred={0x30, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x814) 2.05455414s ago: executing program 2 (id=1648): eventfd2(0x3, 0x800) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r2, 0x0) 2.023561431s ago: executing program 4 (id=1649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.869515643s ago: executing program 4 (id=1650): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.868181963s ago: executing program 0 (id=1651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008080, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x3d) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001040)="5f268d771daf2e06c7c78aeae1c1e455c2f3fb490cff72874a262f271812518c4014e24811d605e6e6ba26435cbde263642312ed3fcca3e0da4758d1312c442527965f27e71b6d6d6fe41f94e84474be6b9ae48f6f2302b25241d496bea7fcbc549529f6142c78cf8eeb1fba0edd6507a1eff5b1b747e6b1b9d5103e1d262721343860fec917160074bb74fb329af447f2a9584c1b1c582f5d58ef8d78b00b", 0x9f}, {&(0x7f0000001100)="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", 0x16d}], 0x2}}], 0x1, 0xc0) 1.784769024s ago: executing program 1 (id=1652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x205, 0x2581) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x8dff}, 0x10b8c}}, 0x0) 1.731281835s ago: executing program 0 (id=1653): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x3, [@bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @bcast, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@random="8c", 0x1, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 1.706460925s ago: executing program 4 (id=1654): sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000004005000100060000000500050002000000"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000700ffff200007800c00018008000140e000002508000a400000000105000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.613942927s ago: executing program 4 (id=1655): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x10) 1.549482118s ago: executing program 0 (id=1656): eventfd2(0x3, 0x800) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0) 1.322498151s ago: executing program 4 (id=1657): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x2004, 0x6, 0x3}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="09524c8d869c", 0x6}], 0x2}, 0x24008004) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 186.346337ms ago: executing program 2 (id=1658): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r0, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 185.957857ms ago: executing program 4 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(r2, 0x0, 0x0, 0x800) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) dup3(r4, r5, 0x0) 0s ago: executing program 0 (id=1660): socket(0x2a, 0x2, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. [ 33.938100][ T4282] cgroup: Unknown subsys name 'net' [ 34.224872][ T4282] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.573950][ T4282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.099570][ T4309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.102821][ T4309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.105334][ T4309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.107885][ T4309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.108362][ T4310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.111019][ T4309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.113064][ T4311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.114904][ T4309] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.116619][ T4311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.118248][ T4309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.120452][ T4311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.123155][ T4309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.124159][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.125916][ T4309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.128542][ T4311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.131725][ T4309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.132380][ T4309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.134531][ T4311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.136200][ T4309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.138989][ T4311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.140428][ T4309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.142585][ T4311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.143900][ T4309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.147910][ T4309] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.150327][ T4309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.152485][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.154157][ T4311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.157166][ T4312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.179989][ T4312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.182553][ T4312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.400284][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 36.444980][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 36.455798][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 36.466430][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 36.519152][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.525305][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.528004][ T4305] device bridge_slave_0 entered promiscuous mode [ 36.554791][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.556791][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.559349][ T4305] device bridge_slave_1 entered promiscuous mode [ 36.600522][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.602985][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.605490][ T4296] device bridge_slave_0 entered promiscuous mode [ 36.612515][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.614543][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.617573][ T4295] device bridge_slave_0 entered promiscuous mode [ 36.620538][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.622591][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.625018][ T4301] device bridge_slave_0 entered promiscuous mode [ 36.627719][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.629653][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.632868][ T4296] device bridge_slave_1 entered promiscuous mode [ 36.636449][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.639208][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.641555][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.644140][ T4295] device bridge_slave_1 entered promiscuous mode [ 36.652990][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.655003][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.657542][ T4301] device bridge_slave_1 entered promiscuous mode [ 36.670478][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.673063][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 36.682252][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.710093][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.717899][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.722767][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.737547][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.750063][ T4305] team0: Port device team_slave_0 added [ 36.757546][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.770833][ T4305] team0: Port device team_slave_1 added [ 36.774050][ T4295] team0: Port device team_slave_0 added [ 36.782021][ T4296] team0: Port device team_slave_0 added [ 36.783976][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.785983][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.788607][ T4297] device bridge_slave_0 entered promiscuous mode [ 36.793329][ T4295] team0: Port device team_slave_1 added [ 36.809479][ T4296] team0: Port device team_slave_1 added [ 36.817728][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.819923][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.822523][ T4297] device bridge_slave_1 entered promiscuous mode [ 36.834655][ T4301] team0: Port device team_slave_0 added [ 36.836922][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.838842][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.846219][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.868452][ T4301] team0: Port device team_slave_1 added [ 36.879479][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.881631][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.888681][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.897284][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.899223][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.906608][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.914521][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.916536][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.924350][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.928081][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.931303][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.938477][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.942486][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.944367][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.951929][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.960020][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.962883][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.964820][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.972081][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.975880][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.977851][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.985223][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.998770][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.036339][ T4297] team0: Port device team_slave_0 added [ 37.091648][ T4296] device hsr_slave_0 entered promiscuous mode [ 37.130084][ T4296] device hsr_slave_1 entered promiscuous mode [ 37.171508][ T4297] team0: Port device team_slave_1 added [ 37.211615][ T4305] device hsr_slave_0 entered promiscuous mode [ 37.250144][ T4305] device hsr_slave_1 entered promiscuous mode [ 37.289974][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.292209][ T4305] Cannot create hsr debugfs directory [ 37.331350][ T4301] device hsr_slave_0 entered promiscuous mode [ 37.370085][ T4301] device hsr_slave_1 entered promiscuous mode [ 37.409864][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.412010][ T4301] Cannot create hsr debugfs directory [ 37.511491][ T4295] device hsr_slave_0 entered promiscuous mode [ 37.560173][ T4295] device hsr_slave_1 entered promiscuous mode [ 37.599936][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.602155][ T4295] Cannot create hsr debugfs directory [ 37.617452][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.619591][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.627108][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.649018][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.651091][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.658302][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.781456][ T4297] device hsr_slave_0 entered promiscuous mode [ 37.830276][ T4297] device hsr_slave_1 entered promiscuous mode [ 37.869872][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.872065][ T4297] Cannot create hsr debugfs directory [ 38.003678][ T4296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.041620][ T4296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.084333][ T4296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.121591][ T4296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.173945][ T4295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.190294][ T4303] Bluetooth: hci1: command 0x0409 tx timeout [ 38.192158][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 38.193954][ T4303] Bluetooth: hci3: command 0x0409 tx timeout [ 38.221496][ T4295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.251837][ T4295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.270000][ T4303] Bluetooth: hci2: command 0x0409 tx timeout [ 38.270457][ T4312] Bluetooth: hci4: command 0x0409 tx timeout [ 38.314047][ T4295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.387450][ T4305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.406918][ T4305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.431685][ T4305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.479504][ T4305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.551313][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.559081][ T4301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.587750][ T4301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.641613][ T4301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.674611][ T4301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.725130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.728509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.737789][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.749611][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.753851][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.756818][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.759438][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.764913][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.774758][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.788656][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.792879][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.795358][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.797331][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.811928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.814851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.817734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.825669][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.838037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.841138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.843868][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.850794][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.858013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.861543][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.864378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.867014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.879537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.883422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.886052][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.888071][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.898672][ T4297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.952669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.955334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.958079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.962332][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.969013][ T4297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.002092][ T4297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.041260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.044162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.046688][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.048641][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.060179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.065437][ T4297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.128571][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.138624][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.158842][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.166677][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.170430][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.191413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.194677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.206365][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.217237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.221408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.224016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.226798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.232787][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.241495][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.249545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.252669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.254876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.257648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.260498][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.262568][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.264976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.267750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.273767][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.275768][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.278026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.282829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.285742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.293584][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.302027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.308747][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.316540][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.319683][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.335993][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.342813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.345593][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.348386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.358616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.375737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.380142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.383091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.386077][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.388127][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.404556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.407176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.411201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.414304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.417121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.420632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.423342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.439085][ T4296] device veth0_vlan entered promiscuous mode [ 39.443317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.445954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.448447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.452850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.455523][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.457709][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.462850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.474489][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.482554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.485289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.487996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.496400][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.515968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.519382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.523231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.538816][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.541885][ T4296] device veth1_vlan entered promiscuous mode [ 39.548336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.556862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.559067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.563341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.565827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.568664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.574494][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.584571][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.587516][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.596039][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.598066][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.601598][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.604349][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.606968][ T220] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.608973][ T220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.617848][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.638747][ T4301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.642555][ T4301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.646955][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.649657][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.653165][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.655781][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.658366][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.668901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.680268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.682528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.684680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.687357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.690739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.693622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.700474][ T4296] device veth0_macvtap entered promiscuous mode [ 39.706629][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.711436][ T4296] device veth1_macvtap entered promiscuous mode [ 39.747253][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.751054][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.753698][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.756545][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.759344][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.763226][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.766521][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.769251][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.774067][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.776766][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.779409][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.783242][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.785948][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.788579][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.805808][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.814675][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.817497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.821738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.824553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.827702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.841830][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.846253][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.849125][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.857996][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.861163][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.867371][ T4295] device veth0_vlan entered promiscuous mode [ 39.874113][ T4305] device veth0_vlan entered promiscuous mode [ 39.879100][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.884139][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.886708][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.889092][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.893188][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.895973][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.898984][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.903843][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.922512][ T4305] device veth1_vlan entered promiscuous mode [ 39.938909][ T4295] device veth1_vlan entered promiscuous mode [ 39.943082][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.945847][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.948500][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.952490][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.963524][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.014099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.016701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.019253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.025048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.037388][ T4295] device veth0_macvtap entered promiscuous mode [ 40.049453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.052809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.055657][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.078275][ T4305] device veth0_macvtap entered promiscuous mode [ 40.083778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.086696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.089488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.096178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.099434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.103993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.107102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.111615][ T4301] device veth0_vlan entered promiscuous mode [ 40.125901][ T4295] device veth1_macvtap entered promiscuous mode [ 40.129289][ T4305] device veth1_macvtap entered promiscuous mode [ 40.142643][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.145202][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.147752][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.152459][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.159662][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.166820][ T4301] device veth1_vlan entered promiscuous mode [ 40.180673][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.182968][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.202332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.205429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.223667][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.226857][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.235319][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.257513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.262107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.264937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.270433][ T4303] Bluetooth: hci3: command 0x041b tx timeout [ 40.270493][ T4312] Bluetooth: hci0: command 0x041b tx timeout [ 40.272165][ T4303] Bluetooth: hci1: command 0x041b tx timeout [ 40.279606][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.282882][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.285748][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.288917][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.294263][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.310307][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.313130][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.316756][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.319385][ T4301] device veth0_macvtap entered promiscuous mode [ 40.327090][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.331264][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.333954][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.337309][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.345288][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.348087][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.350314][ T4306] Bluetooth: hci2: command 0x041b tx timeout [ 40.350740][ T4303] Bluetooth: hci4: command 0x041b tx timeout [ 40.355871][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.358114][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.358856][ T4301] device veth1_macvtap entered promiscuous mode [ 40.379116][ T4305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.383024][ T4305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.385450][ T4305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.387854][ T4305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.392184][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.394808][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.397541][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.401199][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.404163][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.406814][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.409585][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.414783][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.426713][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.431027][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.433886][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.436769][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.439638][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.447825][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.452359][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.454909][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.457823][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.463020][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.465836][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.471303][ T4295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.473715][ T4295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.476143][ T4295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.478790][ T4295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.506756][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.509702][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.513666][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.516592][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.519252][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.522363][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.526316][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.536839][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.540704][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.543573][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.546446][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.577000][ T4301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.579656][ T4301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.583710][ T4301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.586209][ T4301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.666913][ T4297] device veth0_vlan entered promiscuous mode [ 40.683595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.686506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.689489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.699390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.724355][ T4297] device veth1_vlan entered promiscuous mode [ 40.738876][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.742567][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.819600][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.826584][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.858452][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.861209][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.887886][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.890612][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.893176][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.895664][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.898169][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.938614][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.938734][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.945679][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.946052][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.949472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.954729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.018824][ T4382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 41.602212][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.605524][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.612187][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.634829][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.637992][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.729102][ T4297] device veth0_macvtap entered promiscuous mode [ 41.768360][ T4390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.777569][ T4390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.781537][ T4297] device veth1_macvtap entered promiscuous mode [ 41.810194][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.813209][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.817247][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.821677][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.824410][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.827493][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.830926][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.833881][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.838159][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.842679][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.845617][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.848609][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.880046][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.890265][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.902439][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.907424][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.910535][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.915073][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.919521][ T4297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.922177][ T4297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.924671][ T4297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.927328][ T4297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.933361][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.936374][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.939072][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.942623][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.945495][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.948571][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.088812][ T4394] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 43.403477][ T4303] Bluetooth: hci4: command 0x040f tx timeout [ 43.405235][ T4303] Bluetooth: hci2: command 0x040f tx timeout [ 43.406999][ T4303] Bluetooth: hci0: command 0x040f tx timeout [ 43.408722][ T4303] Bluetooth: hci3: command 0x040f tx timeout [ 43.411099][ T4306] Bluetooth: hci1: command 0x040f tx timeout [ 44.622148][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.624856][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.628071][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.725257][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.727687][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.743854][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.641755][ T4423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'. [ 46.649095][ T4423] Zero length message leads to an empty skb [ 46.719727][ C1] sched: RT throttling activated [ 46.726332][ T4312] Bluetooth: hci1: command 0x0419 tx timeout [ 46.729493][ T4312] Bluetooth: hci3: command 0x0419 tx timeout [ 46.731356][ T4312] Bluetooth: hci0: command 0x0419 tx timeout [ 46.733056][ T4312] Bluetooth: hci2: command 0x0419 tx timeout [ 46.734783][ T4312] Bluetooth: hci4: command 0x0419 tx timeout [ 46.889012][ T4424] syz.1.12 (4424): drop_caches: 2 [ 46.892437][ T4428] tmpfs: Unknown parameter 'quota' [ 47.900372][ T4437] nbd: must specify a device to reconfigure [ 48.357314][ T4428] delete_channel: no stack [ 48.689657][ T4450] syz.2.17 sent an empty control message without MSG_MORE. [ 49.916578][ T4450] device bridge1 entered promiscuous mode [ 49.925809][ T4450] team0: Port device bridge1 added [ 50.174997][ T4459] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 51.878890][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 52.034772][ T4465] netlink: 'syz.4.21': attribute type 10 has an invalid length. [ 53.773936][ T4465] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 54.891545][ T4507] netlink: 68 bytes leftover after parsing attributes in process `syz.1.29'. [ 56.276165][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 56.367010][ T4517] Cannot find add_set index 1 as target [ 56.549065][ T4527] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 57.290588][ T4530] syz.1.32 (4530): drop_caches: 2 [ 57.368756][ T4529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32'. [ 60.162493][ T4555] hub 8-0:1.0: USB hub found [ 60.166242][ T4555] hub 8-0:1.0: 8 ports detected [ 61.837444][ T4579] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 64.680653][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.682541][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.696365][ T4606] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 65.385678][ T4636] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 66.032386][ T4606] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 66.161087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 68.741843][ T4676] hub 8-0:1.0: USB hub found [ 68.743905][ T4676] hub 8-0:1.0: 8 ports detected [ 69.725489][ T4692] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 69.745590][ T1962] cfg80211: failed to load regulatory.db [ 72.192683][ T4718] device bridge2 entered promiscuous mode [ 73.212747][ T4718] team0: Port device bridge2 added [ 73.220747][ T4707] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 73.445273][ T4707] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.771768][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 75.087908][ T4761] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 77.419690][ T4770] device bridge1 entered promiscuous mode [ 77.433870][ T4770] team0: Port device bridge1 added [ 78.731562][ T4797] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 78.853895][ T4797] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 78.965505][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 80.150792][ T4827] nbd: must specify a device to reconfigure [ 80.986109][ T4841] device bridge1 entered promiscuous mode [ 81.788406][ T4841] team0: Port device bridge1 added [ 83.291653][ T4874] netlink: 'syz.4.140': attribute type 10 has an invalid length. [ 83.875532][ T4886] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 86.091907][ T4924] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 86.302188][ T4941] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 86.332650][ T4941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.352148][ T4942] netlink: 'syz.0.160': attribute type 10 has an invalid length. [ 88.832152][ T4985] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 89.122507][ T4999] netlink: 'syz.2.184': attribute type 1 has an invalid length. [ 89.155200][ T4999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.160969][ T4997] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 89.405819][ T4997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.293141][ T5037] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 92.310189][ T5037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.934532][ T5048] ALSA: seq fatal error: cannot create timer (-16) [ 95.361838][ T5087] nbd: must specify a device to reconfigure [ 99.516901][ T5141] nbd: must specify a device to reconfigure [ 100.688002][ T5158] netlink: 'syz.1.237': attribute type 10 has an invalid length. [ 100.797693][ T5163] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 101.022221][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 102.968243][ T5191] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 104.242104][ T5212] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 104.298635][ T5210] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 106.887319][ T5248] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 106.939605][ T5245] netlink: 'syz.1.268': attribute type 10 has an invalid length. [ 107.851364][ T5253] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 108.317006][ T5269] ALSA: seq fatal error: cannot create timer (-16) [ 109.881180][ T5285] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 109.884788][ T5288] netlink: 'syz.4.284': attribute type 10 has an invalid length. [ 110.891532][ T5304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 111.866315][ T5312] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 113.102939][ T5331] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 114.105827][ T5342] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 114.295031][ T5352] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 114.415974][ T5344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.303'. [ 114.435422][ T5344] syz.4.303 (5344): drop_caches: 2 [ 117.261736][ T5368] netlink: 'syz.4.310': attribute type 10 has an invalid length. [ 117.391915][ T5381] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 117.483273][ T5381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.803944][ T5391] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 120.814780][ T5403] netlink: 'syz.2.320': attribute type 10 has an invalid length. [ 120.969241][ T5427] netlink: 'syz.1.328': attribute type 10 has an invalid length. [ 121.825172][ T5435] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 121.875048][ T5435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.353370][ T5456] netlink: 'syz.4.338': attribute type 10 has an invalid length. [ 124.170987][ T5463] netlink: 'syz.0.341': attribute type 10 has an invalid length. [ 124.366807][ T5469] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 124.484360][ T5475] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 124.632440][ T5475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.276728][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.278624][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.196988][ T5506] netlink: 'syz.4.354': attribute type 10 has an invalid length. [ 127.239311][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 127.443091][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.446914][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.187506][ T5509] HTB: quantum of class 80010010 is big. Consider r2q change. [ 128.217873][ T5517] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 128.319930][ T5517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.554750][ T5524] netlink: 'syz.4.359': attribute type 10 has an invalid length. [ 128.704111][ T5535] netlink: 'syz.4.364': attribute type 10 has an invalid length. [ 129.664604][ T5550] netlink: 'syz.4.367': attribute type 10 has an invalid length. [ 130.018053][ T5557] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.326535][ T5566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 131.329212][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 131.466739][ T5571] netlink: 'syz.0.375': attribute type 1 has an invalid length. [ 131.558695][ T5571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.565209][ T5573] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 132.926086][ T5592] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 134.049276][ T5612] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 134.214120][ T5616] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 135.024697][ T5625] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 135.067932][ T5625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.196233][ T5637] netlink: 'syz.4.399': attribute type 10 has an invalid length. [ 137.241524][ T5654] netlink: 'syz.3.406': attribute type 10 has an invalid length. [ 137.389976][ T5659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.392610][ T5659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.438589][ T5673] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 138.512088][ T5673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.518398][ T5677] netlink: 'syz.4.416': attribute type 10 has an invalid length. [ 138.831200][ T4306] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 138.834202][ T4306] Bluetooth: hci3: Injecting HCI hardware error event [ 138.838680][ T4312] Bluetooth: hci3: hardware error 0x00 [ 139.307769][ T5685] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 140.389916][ T4617] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.838919][ T4617] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 140.946871][ T4617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.949302][ T4617] usb 1-1: Product: syz [ 140.951609][ T4617] usb 1-1: Manufacturer: syz [ 140.952922][ T4617] usb 1-1: SerialNumber: syz [ 140.962441][ T4617] usb 1-1: config 0 descriptor?? [ 140.972091][ T4617] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 141.245267][ T5717] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 141.321590][ T5721] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 141.337372][ T5721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.464210][ T112] usb 1-1: USB disconnect, device number 2 [ 141.470171][ T4312] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 141.523002][ T5726] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 143.042761][ T5738] tmpfs: Unknown parameter 'quota' [ 143.341076][ T5744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.345027][ T5744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.467393][ T5757] netlink: 'syz.4.443': attribute type 10 has an invalid length. [ 144.558607][ T5759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 145.716484][ T5738] delete_channel: no stack [ 146.028542][ T5764] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 146.046458][ T5764] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.026035][ T5784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.040509][ T5786] Cannot find add_set index 1 as target [ 147.065679][ T5784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.385212][ T5797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.450'. [ 147.981575][ T5800] syz.0.450 (5800): drop_caches: 2 [ 148.936631][ T5811] netlink: 'syz.1.459': attribute type 10 has an invalid length. [ 149.735161][ T5808] netlink: 'syz.4.456': attribute type 10 has an invalid length. [ 151.817665][ T5842] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 152.589397][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 152.785677][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.788246][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.520298][ T5858] netlink: 'syz.2.474': attribute type 10 has an invalid length. [ 154.665749][ T5872] process 'syz.0.476' launched './file2' with NULL argv: empty string added [ 154.824902][ T5878] netlink: 'syz.4.479': attribute type 10 has an invalid length. [ 154.903123][ T5886] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 155.445229][ T5898] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 155.447653][ T5898] netlink: 'syz.4.486': attribute type 2 has an invalid length. [ 156.106541][ T5901] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 156.323681][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 156.488438][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.496619][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.346918][ T5923] random: crng reseeded on system resumption [ 157.652526][ T5928] netlink: 'syz.3.497': attribute type 10 has an invalid length. [ 158.114653][ T5940] netlink: 'syz.4.502': attribute type 10 has an invalid length. [ 158.489581][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.493194][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.505697][ T5948] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 158.645123][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 158.716614][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.719340][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.731279][ T5962] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 158.746523][ T5966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.750256][ T4303] Bluetooth: hci1: command 0x0406 tx timeout [ 158.752020][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 158.753793][ T4303] Bluetooth: hci2: command 0x0406 tx timeout [ 158.756237][ T4303] Bluetooth: hci4: command 0x0406 tx timeout [ 158.768731][ T5966] device veth3 entered promiscuous mode [ 158.774665][ T5966] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 158.787259][ T5969] netlink: 'syz.2.514': attribute type 10 has an invalid length. [ 158.982623][ T4353] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.815215][ T4353] usb 1-1: Using ep0 maxpacket: 8 [ 159.823838][ T4353] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.826347][ T4353] usb 1-1: config 179 has no interface number 0 [ 159.828067][ T4353] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.868120][ T4353] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.879365][ T4353] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.896094][ T4353] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 159.903950][ T4353] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.917588][ T4353] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.924898][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.942960][ T5958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.887533][ T4353] usb 1-1: USB disconnect, device number 3 [ 160.889253][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.889284][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 161.499596][ T6004] netlink: 'syz.2.526': attribute type 10 has an invalid length. [ 163.016239][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 163.180295][ T6022] HTB: quantum of class 80050010 is big. Consider r2q change. [ 164.050202][ T6048] netlink: 'syz.3.538': attribute type 10 has an invalid length. [ 165.428734][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 165.543188][ T6089] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 165.545735][ T6089] netlink: 'syz.2.546': attribute type 2 has an invalid length. [ 166.642125][ T6092] HTB: quantum of class 80060010 is big. Consider r2q change. [ 166.861136][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.863820][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.062947][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 167.139599][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 168.433421][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 170.316860][ T6153] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 170.319225][ T6153] netlink: 'syz.1.563': attribute type 2 has an invalid length. [ 170.921342][ T6155] delete_channel: no stack [ 172.075129][ T6174] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 173.140802][ T6195] syz.3.577 uses obsolete (PF_INET,SOCK_PACKET) [ 173.212777][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.579'. [ 173.438659][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.892471][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.361272][ T6222] netlink: 'syz.0.585': attribute type 10 has an invalid length. [ 174.456422][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 176.509097][ T27] audit: type=1326 audit(176.470:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.594" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x0 [ 176.542382][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.544889][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.564787][ T6317] ======================================================= [ 180.564787][ T6317] WARNING: The mand mount option has been deprecated and [ 180.564787][ T6317] and is ignored by this kernel. Remove the mand [ 180.564787][ T6317] option from the mount to silence this warning. [ 180.564787][ T6317] ======================================================= [ 180.583843][ T6317] overlayfs: workdir and upperdir must reside under the same mount [ 185.692721][ T6404] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 187.393566][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.396074][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.118256][ T6440] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 188.413120][ T6450] netlink: 'syz.0.662': attribute type 10 has an invalid length. [ 189.524341][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.526996][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.398657][ T6478] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 191.635090][ T6490] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 195.426978][ T6530] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 195.544360][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.546900][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.200124][ T6580] overlayfs: workdir and upperdir must reside under the same mount [ 204.880013][ T6633] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 204.889621][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.726'. [ 206.089690][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.094220][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.086962][ T6668] netlink: 'syz.0.737': attribute type 10 has an invalid length. [ 208.009348][ T6665] delete_channel: no stack [ 208.446456][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'. [ 209.474606][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 209.729398][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 210.609056][ T6717] netlink: 'syz.4.749': attribute type 10 has an invalid length. [ 210.636886][ T4346] libceph: connect (1)[c::]:6789 error -101 [ 210.639004][ T4346] libceph: mon0 (1)[c::]:6789 connect error [ 210.705653][ T6720] ceph: No mds server is up or the cluster is laggy [ 210.756219][ T6585] Set syz1 is full, maxelem 65536 reached [ 213.507457][ T6761] netlink: 'syz.4.765': attribute type 10 has an invalid length. [ 213.688081][ T6769] netlink: 132 bytes leftover after parsing attributes in process `syz.4.768'. [ 215.964370][ T6793] fuse: Bad value for 'fd' [ 216.027553][ T6799] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 217.267564][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 219.965660][ T6840] netlink: 'syz.3.790': attribute type 10 has an invalid length. [ 221.189540][ T4286] libceph: connect (1)[c::]:6789 error -101 [ 221.191461][ T4286] libceph: mon0 (1)[c::]:6789 connect error [ 221.194403][ T4286] libceph: connect (1)[c::]:6789 error -101 [ 221.196257][ T4286] libceph: mon0 (1)[c::]:6789 connect error [ 221.231254][ T6861] fuse: Bad value for 'fd' [ 221.236088][ T6850] ceph: No mds server is up or the cluster is laggy [ 221.460999][ T1962] libceph: connect (1)[c::]:6789 error -101 [ 221.462736][ T1962] libceph: mon0 (1)[c::]:6789 connect error [ 222.469321][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 222.741329][ T6884] netlink: 'syz.2.803': attribute type 10 has an invalid length. [ 225.084081][ T4385] libceph: connect (1)[c::]:6789 error -101 [ 225.086028][ T4385] libceph: mon0 (1)[c::]:6789 connect error [ 225.088268][ T4385] libceph: connect (1)[c::]:6789 error -101 [ 225.090865][ T4385] libceph: mon0 (1)[c::]:6789 connect error [ 225.251064][ T6908] ceph: No mds server is up or the cluster is laggy [ 225.360562][ T4385] libceph: connect (1)[c::]:6789 error -101 [ 225.362336][ T4385] libceph: mon0 (1)[c::]:6789 connect error [ 231.662093][ T7003] hub 8-0:1.0: USB hub found [ 231.664500][ T7003] hub 8-0:1.0: 8 ports detected [ 232.386396][ T7012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.486413][ T7012] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 232.489280][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 234.197280][ T7058] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 236.366852][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 237.175163][ T7093] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 237.216863][ T7091] netlink: 'syz.2.873': attribute type 10 has an invalid length. [ 237.524497][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 239.326191][ T7128] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 240.333598][ T7139] hub 8-0:1.0: USB hub found [ 240.489776][ T7139] hub 8-0:1.0: 8 ports detected [ 241.285760][ T7133] netlink: 'syz.4.887': attribute type 10 has an invalid length. [ 241.378218][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 241.602399][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.605145][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.765329][ T7163] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 241.863377][ T7169] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 242.073437][ T7178] netlink: 'syz.4.902': attribute type 10 has an invalid length. [ 242.531212][ T7189] hub 8-0:1.0: USB hub found [ 242.533695][ T7189] hub 8-0:1.0: 8 ports detected [ 243.518648][ T7204] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 243.674378][ T7213] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 243.681596][ T7214] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 245.112879][ T7246] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 245.257472][ T7253] netlink: 'syz.1.927': attribute type 10 has an invalid length. [ 245.335574][ T7254] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 245.370090][ T7149] Set syz1 is full, maxelem 65536 reached [ 246.374078][ T7273] ubi0: attaching mtd0 [ 246.376851][ T7273] ubi0: scanning is finished [ 246.378095][ T7273] ubi0: empty MTD device detected [ 246.457148][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 246.460405][ T7273] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 246.462642][ T7273] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 246.464544][ T7273] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 246.466435][ T7273] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 246.468424][ T7273] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 246.470761][ T7273] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 246.472915][ T7273] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2905818358 [ 246.475583][ T7273] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 246.479016][ T7279] ubi0: background thread "ubi_bgt0d" started, PID 7279 [ 246.482198][ T7278] ubi0: detaching mtd0 [ 246.494086][ T7278] ubi0: mtd0 is detached [ 246.642437][ T7283] netlink: 'syz.2.938': attribute type 10 has an invalid length. [ 246.794636][ T7291] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 246.880436][ T7295] netlink: 'syz.2.943': attribute type 10 has an invalid length. [ 247.016762][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.946'. [ 247.423580][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'. [ 247.588558][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 247.716916][ T7314] netlink: 'syz.2.951': attribute type 10 has an invalid length. [ 247.864383][ T7321] netlink: 'syz.4.954': attribute type 10 has an invalid length. [ 247.968061][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.979551][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.076567][ T7328] netlink: 'syz.3.957': attribute type 10 has an invalid length. [ 249.147147][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.177992][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.407932][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'. [ 250.215111][ T7346] netlink: 'syz.4.965': attribute type 10 has an invalid length. [ 250.289601][ T7344] netlink: 'syz.2.963': attribute type 10 has an invalid length. [ 250.418588][ T7354] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 251.716314][ T7373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 252.933193][ T7383] ubi0: attaching mtd0 [ 252.934987][ T7383] ubi0: scanning is finished [ 252.980377][ T7383] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 252.982649][ T7383] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 252.984680][ T7383] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 252.986638][ T7383] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 252.988676][ T7383] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 252.990724][ T7383] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 252.992964][ T7383] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2905818358 [ 252.995742][ T7383] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 252.998573][ T7387] ubi0: detaching mtd0 [ 253.004862][ T7387] ubi0: mtd0 is detached [ 254.257882][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 254.271101][ T7399] netlink: 'syz.4.981': attribute type 10 has an invalid length. [ 254.285235][ T7396] netlink: 'syz.1.979': attribute type 10 has an invalid length. [ 254.304660][ T7403] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 256.239607][ T7436] netlink: 'syz.4.995': attribute type 10 has an invalid length. [ 256.258212][ T7438] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 256.272666][ T7438] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 256.568624][ T7441] netlink: 'syz.4.997': attribute type 10 has an invalid length. [ 257.071115][ T7459] device veth3 entered promiscuous mode [ 257.944548][ T7468] netlink: 'syz.1.1007': attribute type 10 has an invalid length. [ 258.125467][ T7474] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 258.215344][ T7474] netlink: 'syz.2.1008': attribute type 10 has an invalid length. [ 258.300647][ T7479] netlink: 'syz.4.1012': attribute type 10 has an invalid length. [ 258.867108][ T7501] netlink: 'syz.2.1021': attribute type 10 has an invalid length. [ 259.715743][ T7514] netlink: 'syz.4.1024': attribute type 10 has an invalid length. [ 261.815819][ T7534] netlink: 'syz.4.1032': attribute type 10 has an invalid length. [ 262.823791][ T7556] netlink: 'syz.1.1038': attribute type 10 has an invalid length. [ 263.336363][ T7570] netlink: 'syz.1.1044': attribute type 10 has an invalid length. [ 265.663339][ T7613] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 265.672650][ T7613] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 265.748785][ T27] audit: type=1326 audit(265.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.490092][ T27] audit: type=1326 audit(266.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.500693][ T27] audit: type=1326 audit(266.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.508182][ T27] audit: type=1326 audit(266.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.514696][ T27] audit: type=1326 audit(266.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.521664][ T27] audit: type=1326 audit(266.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.527602][ T27] audit: type=1326 audit(266.450:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.534058][ T27] audit: type=1326 audit(266.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.540650][ T27] audit: type=1326 audit(266.460:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 266.546511][ T27] audit: type=1326 audit(266.460:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf95a7a8 code=0x7fc00000 [ 267.619514][ T7651] netlink: 'syz.4.1070': attribute type 10 has an invalid length. [ 270.029779][ T7684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1079'. [ 270.777170][ T7690] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 272.219880][ T4306] Bluetooth: hci4: command 0x0409 tx timeout [ 274.129008][ T7751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.189975][ T4306] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 274.193992][ T4306] Bluetooth: hci4: Injecting HCI hardware error event [ 274.199059][ T4303] Bluetooth: hci4: hardware error 0x00 [ 276.919905][ T4303] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 278.734350][ T7835] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 278.949293][ T7839] netlink: 'syz.3.1134': attribute type 10 has an invalid length. [ 280.981241][ T7872] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 281.062897][ T7876] netlink: 'syz.4.1145': attribute type 10 has an invalid length. [ 283.552635][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.556342][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.562264][ T7916] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 283.739845][ T7920] netlink: 'syz.0.1158': attribute type 10 has an invalid length. [ 284.605196][ T7941] netlink: 'syz.1.1167': attribute type 10 has an invalid length. [ 285.045098][ T7945] netlink: 'syz.1.1169': attribute type 10 has an invalid length. [ 286.613742][ T7979] netlink: 'syz.0.1179': attribute type 10 has an invalid length. [ 287.353677][ T7986] netlink: 'syz.3.1181': attribute type 10 has an invalid length. [ 288.668091][ T8012] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 288.733126][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 288.836005][ T8016] netlink: 'syz.4.1192': attribute type 10 has an invalid length. [ 289.788075][ T8033] SET target dimension over the limit! [ 290.098506][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 290.101190][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1198'. [ 290.112600][ T8042] syz.3.1198 (8042): drop_caches: 2 [ 290.311929][ T8041] ubi0: attaching mtd0 [ 290.313514][ T8041] ubi0: scanning is finished [ 290.545257][ T8041] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 290.547904][ T8041] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 290.549982][ T8041] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 290.551824][ T8041] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 290.553770][ T8041] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 290.555557][ T8041] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 290.557723][ T8041] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2905818358 [ 290.560444][ T8041] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 290.576610][ T8047] ubi0: background thread "ubi_bgt0d" started, PID 8047 [ 290.877263][ T8049] netlink: 'syz.4.1201': attribute type 10 has an invalid length. [ 291.020464][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 292.793363][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 293.455006][ T8088] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 293.674258][ T8089] ubi: mtd0 is already attached to ubi0 [ 293.902467][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 295.144946][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1218'. [ 295.499127][ T8121] Cannot find add_set index 1 as target [ 295.589213][ T8124] netlink: 'syz.1.1225': attribute type 10 has an invalid length. [ 295.842612][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 295.845325][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1224'. [ 295.864824][ T8128] syz.2.1224 (8128): drop_caches: 2 [ 296.702312][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.706417][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.659991][ T8142] ubi: mtd0 is already attached to ubi0 [ 298.800767][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1235'. [ 298.805547][ T8157] netlink: 'syz.0.1236': attribute type 10 has an invalid length. [ 298.887634][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 299.716400][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 300.314791][ T8195] ubi: mtd0 is already attached to ubi0 [ 300.316925][ T8195] ubi0: detaching mtd0 [ 300.321333][ T8195] ubi0: mtd0 is detached [ 300.400863][ T8202] netlink: 'syz.3.1250': attribute type 10 has an invalid length. [ 300.550924][ T8208] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 303.052558][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 303.086565][ T8233] Cannot find add_set index 1 as target [ 303.738338][ T8240] syz.1.1262 (8240): drop_caches: 2 [ 304.311069][ T8239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1262'. [ 304.313691][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1262'. [ 304.566406][ T8251] netlink: 'syz.3.1267': attribute type 10 has an invalid length. [ 305.162090][ T8254] ubi0: attaching mtd0 [ 305.163788][ T8254] ubi0: scanning is finished [ 305.860593][ T8254] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 306.144344][ T8276] syz.0.1275 (8276): drop_caches: 2 [ 308.486631][ T8290] netlink: 'syz.1.1278': attribute type 10 has an invalid length. [ 309.875404][ T8303] ubi0: attaching mtd0 [ 309.877007][ T8303] ubi0: scanning is finished [ 309.922719][ T8303] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 309.924990][ T8303] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 309.927223][ T8303] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 309.929110][ T8303] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 309.931294][ T8303] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 309.933180][ T8303] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 309.935386][ T8303] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 309.938150][ T8303] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 309.941175][ T8308] ubi0: detaching mtd0 [ 309.945002][ T8308] ubi0: mtd0 is detached [ 310.124615][ T8314] syz.3.1286 (8314): drop_caches: 2 [ 310.272835][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.276439][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.057268][ T8332] netlink: 'syz.4.1292': attribute type 10 has an invalid length. [ 312.927148][ T8337] trusted_key: encrypted_key: insufficient parameters specified [ 313.079251][ T8343] netlink: 'syz.4.1295': attribute type 10 has an invalid length. [ 313.969078][ T8352] ubi0: attaching mtd0 [ 313.969610][ T8352] ubi0: scanning is finished [ 314.045002][ T8352] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 314.047248][ T8352] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 314.049216][ T8352] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 314.051210][ T8352] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 314.053184][ T8352] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 314.055020][ T8352] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 314.057247][ T8352] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 314.060220][ T8352] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 314.063319][ T8354] ubi0: detaching mtd0 [ 314.063345][ T8356] ubi0: background thread "ubi_bgt0d" started, PID 8356 [ 314.067832][ T8354] ubi0: mtd0 is detached [ 314.269029][ T8360] syz.4.1300 (8360): drop_caches: 2 [ 316.251872][ T8383] netlink: 'syz.3.1307': attribute type 10 has an invalid length. [ 317.127742][ T8289] Set syz1 is full, maxelem 65536 reached [ 317.503233][ T8397] Cannot find add_set index 1 as target [ 317.968257][ T8400] ubi0: attaching mtd0 [ 317.970063][ T8400] ubi0: scanning is finished [ 318.075170][ T8404] syz.4.1313 (8404): drop_caches: 2 [ 318.244401][ T8400] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 319.216007][ T8422] netlink: 'syz.2.1320': attribute type 10 has an invalid length. [ 319.873681][ T8439] binder: 8435:8439 tried to acquire reference to desc 0, got 1 instead [ 320.631386][ T8439] binder: release 8435:8439 transaction 5 out, still active [ 320.633645][ T8439] binder: undelivered TRANSACTION_COMPLETE [ 321.050462][ T4346] binder: send failed reply for transaction 5, target dead [ 321.052965][ T8445] ubi0: attaching mtd0 [ 321.054718][ T8445] ubi0: scanning is finished [ 321.089893][ T8445] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 321.092149][ T8445] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 321.094231][ T8445] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 321.096326][ T8445] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 321.098296][ T8445] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 321.100224][ T8445] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 321.102360][ T8445] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 321.105039][ T8445] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 321.107735][ T8447] ubi0: detaching mtd0 [ 321.129264][ T8447] ubi0: mtd0 is detached [ 321.656972][ T8458] SET target dimension over the limit! [ 321.934793][ T8465] syz.3.1332 (8465): drop_caches: 2 [ 325.810452][ T8489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1341'. [ 325.829918][ T8489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1341'. [ 326.430051][ T8504] ubi0: attaching mtd0 [ 326.431676][ T8504] ubi0: scanning is finished [ 326.489848][ T8504] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 326.492141][ T8504] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 326.494296][ T8504] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 326.496402][ T8504] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 326.498378][ T8504] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 326.500380][ T8504] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 326.502663][ T8504] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 326.505350][ T8504] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 326.508140][ T8508] ubi0: background thread "ubi_bgt0d" started, PID 8508 [ 326.508179][ T8507] ubi0: detaching mtd0 [ 326.513889][ T8507] ubi0: mtd0 is detached [ 330.051548][ T8457] Set syz1 is full, maxelem 65536 reached [ 330.132605][ T8540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1356'. [ 330.145503][ T8540] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1356'. [ 330.416895][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 331.835907][ T8557] ubi0: attaching mtd0 [ 331.839071][ T8557] ubi0: scanning is finished [ 331.915084][ T8557] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 331.917499][ T8557] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 331.919505][ T8557] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 331.921555][ T8557] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 331.923697][ T8557] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 331.925530][ T8557] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 331.927674][ T8557] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 331.930560][ T8557] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 331.939896][ T8559] ubi0: detaching mtd0 [ 331.945394][ T8559] ubi0: mtd0 is detached [ 332.877124][ T8572] Cannot find add_set index 1 as target [ 333.177082][ T8579] syz.2.1365 (8579): drop_caches: 2 [ 333.880945][ T8583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1368'. [ 333.883567][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1368'. [ 334.029367][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 335.977710][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1380'. [ 336.141970][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 336.260302][ T8615] SET target dimension over the limit! [ 336.501532][ T8629] syz.3.1379 (8629): drop_caches: 2 [ 336.591940][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1386'. [ 338.448997][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1392'. [ 339.325390][ T8666] netlink: 'syz.2.1407': attribute type 10 has an invalid length. [ 339.392704][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1398'. [ 340.478296][ T8574] Set syz1 is full, maxelem 65536 reached [ 340.683846][ T8681] Cannot find add_set index 1 as target [ 340.986056][ T8691] syz.4.1401 (8691): drop_caches: 2 [ 341.655804][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'. [ 342.460541][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1410'. [ 342.505526][ T8710] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 344.474519][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1418'. [ 344.498586][ T8731] SET target dimension over the limit! [ 344.830692][ T8741] syz.3.1417 (8741): drop_caches: 2 [ 346.677519][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1424'. [ 346.864466][ T8757] netlink: 'syz.3.1426': attribute type 10 has an invalid length. [ 347.160948][ T8767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 348.778988][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'. [ 348.803940][ T8782] Cannot find add_set index 1 as target [ 348.824714][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 349.208567][ T8795] syz.4.1434 (8795): drop_caches: 2 [ 349.871773][ T8798] netlink: 'syz.1.1439': attribute type 10 has an invalid length. [ 350.684975][ T8817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1447'. [ 351.602736][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 351.809223][ T8830] netlink: 'syz.2.1453': attribute type 10 has an invalid length. [ 351.934906][ T8833] Cannot find add_set index 1 as target [ 352.457931][ T8839] syz.4.1452 (8839): drop_caches: 2 [ 353.116018][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1458'. [ 353.678155][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 355.126283][ T8874] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 355.376659][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1471'. [ 356.844341][ T8898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1475'. [ 359.625269][ T8923] netlink: 'syz.3.1482': attribute type 10 has an invalid length. [ 359.962365][ T8930] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 360.808740][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 361.784040][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1488'. [ 362.147796][ T8949] ubi0: attaching mtd0 [ 362.149538][ T8949] ubi0: scanning is finished [ 362.213964][ T8949] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 362.216069][ T8949] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 362.218163][ T8949] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 362.221601][ T8949] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 362.223634][ T8949] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 362.225468][ T8949] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 362.227705][ T8949] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 362.230407][ T8949] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 362.233184][ T8952] ubi0: detaching mtd0 [ 362.236008][ T8952] ubi0: mtd0 is detached [ 362.392441][ T8963] netlink: 'syz.4.1494': attribute type 10 has an invalid length. [ 363.225902][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 363.285271][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1497'. [ 364.496033][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1503'. [ 364.813357][ T9003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1509'. [ 366.183488][ T9005] ubi0: attaching mtd0 [ 366.185204][ T9005] ubi0: scanning is finished [ 366.399590][ T9018] netlink: 'syz.4.1511': attribute type 10 has an invalid length. [ 366.520340][ T9005] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 366.808289][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 367.030330][ T9039] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.546289][ T9057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1524'. [ 369.553462][ T9055] ALSA: seq fatal error: cannot create timer (-16) [ 369.750877][ T9064] netlink: 'syz.2.1527': attribute type 10 has an invalid length. [ 369.926016][ T9071] ubi0: attaching mtd0 [ 369.927757][ T9071] ubi0: scanning is finished [ 370.030200][ T9071] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 370.032526][ T9071] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 370.034544][ T9071] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 370.036705][ T9071] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 370.038904][ T9071] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 370.041012][ T9071] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 370.043317][ T9071] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 370.046182][ T9071] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 370.052098][ T9065] ubi0: detaching mtd0 [ 370.063222][ T9065] ubi0: mtd0 is detached [ 370.093902][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 371.469071][ T9091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 371.982423][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.984261][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.023406][ T9108] ALSA: seq fatal error: cannot create timer (-16) [ 374.122926][ T9113] netlink: 'syz.4.1543': attribute type 10 has an invalid length. [ 374.427428][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 374.514726][ T9130] ubi0: attaching mtd0 [ 374.516666][ T9130] ubi0: scanning is finished [ 374.739951][ T9130] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 374.742274][ T9130] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 374.744402][ T9130] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 374.746300][ T9130] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 374.748314][ T9130] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 374.750295][ T9130] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 374.752430][ T9130] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 374.755131][ T9130] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 374.760772][ T9133] ubi0: detaching mtd0 [ 374.811302][ T9133] ubi0: mtd0 is detached [ 375.821116][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 375.861864][ T9163] netlink: 'syz.1.1559': attribute type 10 has an invalid length. [ 377.326138][ T9188] ubi0: attaching mtd0 [ 377.327776][ T9188] ubi0: scanning is finished [ 377.406232][ T9188] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 377.408463][ T9188] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 377.410490][ T9188] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 377.412388][ T9188] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 377.414360][ T9188] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 377.416162][ T9188] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 377.418358][ T9188] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 377.421205][ T9188] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 377.423896][ T9189] ubi0: background thread "ubi_bgt0d" started, PID 9189 [ 377.423933][ T9190] ubi0: detaching mtd0 [ 377.430073][ T9190] ubi0: mtd0 is detached [ 378.098045][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'. [ 378.801100][ T9229] Cannot find add_set index 1 as target [ 379.216119][ T9235] syz.2.1584 (9235): drop_caches: 2 [ 379.855048][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 380.404649][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1591'. [ 380.610491][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 380.714583][ T9261] netlink: 'syz.0.1596': attribute type 10 has an invalid length. [ 381.272740][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 383.431160][ T9304] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 384.977637][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1619'. [ 387.031492][ T9342] netlink: 'syz.3.1625': attribute type 10 has an invalid length. [ 390.322294][ T9385] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 391.737437][ T9403] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 392.675033][ T9403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.802846][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 393.100124][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1654'. [ 393.133322][ T9436] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 393.266578][ T9439] ubi0: attaching mtd0 [ 393.268210][ T9439] ubi0: scanning is finished [ 393.297642][ T9439] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 393.299914][ T9439] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 393.301941][ T9439] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 393.303914][ T9439] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 393.305943][ T9439] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 393.307805][ T9439] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 393.310028][ T9439] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2905818358 [ 393.312742][ T9439] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 393.318342][ T9439] ubi0: detaching mtd0 [ 393.390258][ T9439] ubi0: mtd0 is detached [ 394.763196][ T9456] ================================================================== [ 394.765576][ T9456] BUG: KASAN: use-after-free in rose_get_neigh+0x17c/0x480 [ 394.767575][ T9456] Read of size 1 at addr ffff0000da07f030 by task syz.2.1658/9456 [ 394.769708][ T9456] [ 394.770307][ T9456] CPU: 1 PID: 9456 Comm: syz.2.1658 Not tainted 6.1.141-syzkaller #0 [ 394.772516][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.775299][ T9456] Call trace: [ 394.776205][ T9456] dump_backtrace+0x1c8/0x1f4 [ 394.777535][ T9456] show_stack+0x2c/0x3c [ 394.778727][ T9456] __dump_stack+0x30/0x40 [ 394.779899][ T9456] dump_stack_lvl+0xf8/0x160 [ 394.781213][ T9456] print_address_description+0x88/0x220 [ 394.782848][ T9456] print_report+0x50/0x68 [ 394.784056][ T9456] kasan_report+0xa8/0x100 [ 394.785298][ T9456] __asan_report_load1_noabort+0x2c/0x38 [ 394.786925][ T9456] rose_get_neigh+0x17c/0x480 [ 394.788290][ T9456] rose_connect+0x364/0xfe8 [ 394.789533][ T9456] __sys_connect+0x264/0x28c [ 394.790863][ T9456] __arm64_sys_connect+0x7c/0x94 [ 394.792261][ T9456] invoke_syscall+0x98/0x2bc [ 394.793638][ T9456] el0_svc_common+0x138/0x258 [ 394.794933][ T9456] do_el0_svc+0x58/0x13c [ 394.796060][ T9456] el0_svc+0x58/0x138 [ 394.797223][ T9456] el0t_64_sync_handler+0x84/0xf0 [ 394.798663][ T9456] el0t_64_sync+0x18c/0x190 [ 394.800103][ T9456] [ 394.800747][ T9456] Allocated by task 4287: [ 394.802028][ T9456] kasan_set_track+0x4c/0x80 [ 394.803329][ T9456] kasan_save_alloc_info+0x28/0x34 [ 394.804867][ T9456] __kasan_kmalloc+0xa0/0xb8 [ 394.806191][ T9456] kmalloc_trace+0x7c/0x94 [ 394.807610][ T9456] kernfs_fop_open+0x36c/0xae8 [ 394.809014][ T9456] do_dentry_open+0x730/0xfa8 [ 394.810349][ T9456] vfs_open+0x7c/0x90 [ 394.811696][ T9456] path_openat+0x1f48/0x2680 [ 394.812953][ T9456] do_filp_open+0x174/0x344 [ 394.814262][ T9456] do_sys_openat2+0x128/0x3d8 [ 394.815602][ T9456] __arm64_sys_openat+0x120/0x154 [ 394.817061][ T9456] invoke_syscall+0x98/0x2bc [ 394.818351][ T9456] el0_svc_common+0x138/0x258 [ 394.819741][ T9456] do_el0_svc+0x58/0x13c [ 394.820966][ T9456] el0_svc+0x58/0x138 [ 394.822104][ T9456] el0t_64_sync_handler+0x84/0xf0 [ 394.823585][ T9456] el0t_64_sync+0x18c/0x190 [ 394.824874][ T9456] [ 394.825516][ T9456] Freed by task 4287: [ 394.826708][ T9456] kasan_set_track+0x4c/0x80 [ 394.827966][ T9456] kasan_save_free_info+0x3c/0x60 [ 394.829253][ T9456] ____kasan_slab_free+0x148/0x1b0 [ 394.830696][ T9456] __kasan_slab_free+0x18/0x28 [ 394.832009][ T9456] slab_free_freelist_hook+0x16c/0x1ec [ 394.833546][ T9456] __kmem_cache_free+0xc0/0x224 [ 394.834921][ T9456] kfree+0xd0/0x1ac [ 394.836055][ T9456] kernfs_fop_release+0x158/0x190 [ 394.837533][ T9456] __fput+0x1bc/0x7c0 [ 394.838730][ T9456] ____fput+0x20/0x30 [ 394.839869][ T9456] task_work_run+0x1ec/0x270 [ 394.841164][ T9456] do_notify_resume+0x1f70/0x2b0c [ 394.842564][ T9456] el0_svc+0x98/0x138 [ 394.843694][ T9456] el0t_64_sync_handler+0x84/0xf0 [ 394.845112][ T9456] el0t_64_sync+0x18c/0x190 [ 394.846456][ T9456] [ 394.847098][ T9456] The buggy address belongs to the object at ffff0000da07f000 [ 394.847098][ T9456] which belongs to the cache kmalloc-512 of size 512 [ 394.851229][ T9456] The buggy address is located 48 bytes inside of [ 394.851229][ T9456] 512-byte region [ffff0000da07f000, ffff0000da07f200) [ 394.855136][ T9456] [ 394.855903][ T9456] The buggy address belongs to the physical page: [ 394.857733][ T9456] page:00000000bf8779eb refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a07c [ 394.860705][ T9456] head:00000000bf8779eb order:2 compound_mapcount:0 compound_pincount:0 [ 394.863109][ T9456] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 394.865532][ T9456] raw: 05ffc00000010200 fffffc00030c1f00 dead000000000002 ffff0000c0002600 [ 394.868043][ T9456] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 394.870553][ T9456] page dumped because: kasan: bad access detected [ 394.872617][ T9456] [ 394.873289][ T9456] Memory state around the buggy address: [ 394.874913][ T9456] ffff0000da07ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 394.877181][ T9456] ffff0000da07ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 394.879481][ T9456] >ffff0000da07f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.881841][ T9456] ^ [ 394.883478][ T9456] ffff0000da07f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.885887][ T9456] ffff0000da07f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.888239][ T9456] ================================================================== [ 394.890583][ T9456] Disabling lock debugging due to kernel taint