last executing test programs: 3m20.520276775s ago: executing program 1 (id=138): r0 = syz_open_dev$vim2m(0x0, 0xa57b, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001040)={0x1, @sliced={0x101, [0xe6, 0x254a, 0xa, 0x9, 0x4, 0xb, 0x401, 0xffff, 0x4, 0x8, 0x6, 0x1, 0x2, 0x7, 0xffff, 0x5, 0x7, 0x9, 0x200, 0x5, 0x9d, 0x1, 0x6, 0x7, 0x800, 0x1, 0x6, 0xfffb, 0x7, 0x7fff, 0x3, 0x8, 0x1, 0x4, 0x80, 0x2, 0xa, 0xfffb, 0x8, 0x9, 0x8, 0x5, 0x1, 0x8, 0x5, 0x1, 0x7, 0x2], 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x50000, 0x18}, 0x18) unlinkat(r7, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000000)="7c4b5c5192d7f86c288bbc0e0f3fbd55ad93c27ad06ae7cde71fab5512e7f23751ce611f53fbfb66", 0x28, 0x2000c080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x6a040000) 3m19.399381302s ago: executing program 1 (id=141): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r2, 0x0, 0x0, 0x105, &(0x7f0000001c00)={{0x3, @default}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x2, 0x71, 0x1, 0x3f, 0x2, 0x1, 0x4, 0x9, 0x0, 0xb, 0x9, 0xe, 0x2}, 0xe) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r5, 0x1) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 3m17.400101753s ago: executing program 1 (id=149): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f00000001c0)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) 3m16.535570867s ago: executing program 1 (id=152): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='source', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 3m15.519826013s ago: executing program 1 (id=156): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) llistxattr(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/241, 0xf1) mkdirat(r0, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x7d, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x58c, 0xf4b}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) 3m14.471431419s ago: executing program 1 (id=161): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20003f) 2m59.370512682s ago: executing program 32 (id=161): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20003f) 17.159516075s ago: executing program 0 (id=746): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee100", 0x1b) 10.249695412s ago: executing program 0 (id=763): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8.522837499s ago: executing program 2 (id=769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x408, 0x469}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bdf0000000001015000000130014006301000000000000000000000000000008000100d9"], 0x30}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x4010) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r6, 0x8910, 0x1) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 7.878540848s ago: executing program 2 (id=773): r0 = syz_io_uring_setup(0x3a, 0x0, &(0x7f0000000240), &(0x7f0000001880)) writev(r0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f0000000280)}, {0x0}], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000680)="cb58259f0728ec1a6efbaa3ab6c69ccc37574898aa", 0x15}], 0x2) sendmmsg$inet_sctp(r5, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {0x0}, {0x0}], 0x3, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) 7.663824802s ago: executing program 4 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x2008800) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) 6.756641975s ago: executing program 4 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x0, 0xfffffffa, 0x4, @private1, @mcast1, 0x8000, 0x701, 0xffff8001, 0x7121}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x20, 0x10, 0x200, 0xfff, {{0x12, 0x4, 0x1, 0x14, 0x48, 0x66, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xfe, [@private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x7e, 0x1, 0x4, [{@private=0xa010102, 0x14000000}, {@loopback, 0xfbc}]}, @ssrr={0x89, 0xb, 0x5d, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x73, 0x0, 0xd, [0x130]}]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 6.707833646s ago: executing program 0 (id=778): syz_emit_ethernet(0x95, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x5f, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x3}]}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000004009a64080004003a010000140003006272696467655f736c6176655f31"], 0x40}}, 0x0) r6 = dup(r1) write$UHID_INPUT(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) getpriority(0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000001a40)}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001b00)=""/88, 0x58}, {&(0x7f0000001b80)=""/68, 0x44}, {&(0x7f0000001c00)=""/124, 0x7c}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)=""/146, 0x92}, {&(0x7f0000001d80)=""/37, 0x25}, {&(0x7f0000001dc0)=""/84, 0x54}], 0x7, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002000), 0x6e, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/151, 0x97}, {&(0x7f0000002280)=""/63, 0x3f}], 0x2, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x3, 0x2001, 0x0) 5.84972689s ago: executing program 5 (id=779): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000600)=0x4e) 5.629945793s ago: executing program 4 (id=780): r0 = io_uring_setup(0x756c, &(0x7f0000000140)={0x0, 0x49fd, 0x2, 0x20000001, 0x185}) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$kcm(0x29, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r10, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 5.628414423s ago: executing program 5 (id=781): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0x200, 0x4) 4.802958666s ago: executing program 0 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065cc}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 4.802555336s ago: executing program 5 (id=783): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 4.160589616s ago: executing program 5 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 4.110328867s ago: executing program 4 (id=785): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0125ecc46800"]) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r6, 0x3, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) 3.86020848s ago: executing program 5 (id=787): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 3.598352314s ago: executing program 3 (id=789): unshare(0x2000400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 3.359896918s ago: executing program 3 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x0, 0xfffffffa, 0x4, @private1, @mcast1, 0x8000, 0x701, 0xffff8001, 0x7121}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x20, 0x10, 0x200, 0xfff, {{0x12, 0x4, 0x1, 0x14, 0x48, 0x66, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xfe, [@private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x7e, 0x1, 0x4, [{@private=0xa010102, 0x14000000}, {@loopback, 0xfbc}]}, @ssrr={0x89, 0xb, 0x5d, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x73, 0x0, 0xd, [0x130]}]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 3.146664152s ago: executing program 3 (id=792): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}}}}}}}, 0x0) 3.088377842s ago: executing program 4 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) llistxattr(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/241, 0xf1) mkdirat(r0, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x7d, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x58c, 0xf4b}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) 3.008006803s ago: executing program 3 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r3, 0x1) 3.007676133s ago: executing program 5 (id=795): ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2.488892852s ago: executing program 33 (id=795): ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2.176740536s ago: executing program 3 (id=797): io_uring_setup(0x756c, &(0x7f0000000140)={0x0, 0x49fd, 0x2, 0x20000001, 0x185}) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) 1.479879697s ago: executing program 4 (id=798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd", 0x7}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d10", 0x25}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2024) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 1.412019378s ago: executing program 2 (id=799): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x3501, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x7600) 369.613114ms ago: executing program 2 (id=800): socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a", 0xd}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 204.109047ms ago: executing program 2 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 158.214928ms ago: executing program 0 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x0, 0xfffffffa, 0x4, @private1, @mcast1, 0x8000, 0x701, 0xffff8001, 0x7121}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x20, 0x10, 0x200, 0xfff, {{0x12, 0x4, 0x1, 0x14, 0x48, 0x66, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xfe, [@private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x7e, 0x1, 0x4, [{@private=0xa010102, 0x14000000}, {@loopback, 0xfbc}]}, @ssrr={0x89, 0xb, 0x5d, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x73, 0x0, 0xd, [0x130]}]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 99.211178ms ago: executing program 2 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000380)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040084) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) readv(r5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r5) 97.991398ms ago: executing program 3 (id=804): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0125ecc46800"]) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) 0s ago: executing program 0 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 39.205518][ T4024] cgroup: Unknown subsys name 'net' [ 39.487862][ T4024] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.853166][ T4024] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 41.375368][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 41.447270][ T4039] chnl_net:caif_netlink_parms(): no params data found [ 41.478528][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.480933][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.485054][ T4034] device bridge_slave_0 entered promiscuous mode [ 41.510452][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.512928][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.515442][ T4034] device bridge_slave_1 entered promiscuous mode [ 41.549973][ T4041] chnl_net:caif_netlink_parms(): no params data found [ 41.556829][ T4040] chnl_net:caif_netlink_parms(): no params data found [ 41.568873][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.596998][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.614088][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 41.620654][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.622897][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.625483][ T4039] device bridge_slave_0 entered promiscuous mode [ 41.655139][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.657080][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.659731][ T4039] device bridge_slave_1 entered promiscuous mode [ 41.680123][ T4034] team0: Port device team_slave_0 added [ 41.713971][ T4034] team0: Port device team_slave_1 added [ 41.718810][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.720740][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.723706][ T4041] device bridge_slave_0 entered promiscuous mode [ 41.734789][ T4039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.747397][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.749392][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.752359][ T4041] device bridge_slave_1 entered promiscuous mode [ 41.767406][ T4039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.777899][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.779805][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.787002][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.808177][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.810174][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.812911][ T4040] device bridge_slave_0 entered promiscuous mode [ 41.821422][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.823682][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.830457][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.845259][ T4041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.847863][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.849856][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.858588][ T4040] device bridge_slave_1 entered promiscuous mode [ 41.870700][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.872867][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.875423][ T4050] device bridge_slave_0 entered promiscuous mode [ 41.880424][ T4041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.890318][ T4039] team0: Port device team_slave_0 added [ 41.893907][ T4039] team0: Port device team_slave_1 added [ 41.907873][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.909975][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.912614][ T4050] device bridge_slave_1 entered promiscuous mode [ 41.927518][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.929367][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.936525][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.964188][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.967146][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.969047][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.981986][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.992945][ T4041] team0: Port device team_slave_0 added [ 42.001496][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.010205][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.013674][ T4041] team0: Port device team_slave_1 added [ 42.043948][ T4034] device hsr_slave_0 entered promiscuous mode [ 42.092473][ T4034] device hsr_slave_1 entered promiscuous mode [ 42.152088][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.154856][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.156736][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.163581][ T4041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.170154][ T4040] team0: Port device team_slave_0 added [ 42.185333][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.187161][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.194127][ T4041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.198475][ T4040] team0: Port device team_slave_1 added [ 42.283791][ T4039] device hsr_slave_0 entered promiscuous mode [ 42.342564][ T4039] device hsr_slave_1 entered promiscuous mode [ 42.401902][ T4039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.404125][ T4039] Cannot create hsr debugfs directory [ 42.411425][ T4050] team0: Port device team_slave_0 added [ 42.415348][ T4050] team0: Port device team_slave_1 added [ 42.463519][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.465537][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.472502][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.523775][ T4041] device hsr_slave_0 entered promiscuous mode [ 42.562216][ T4041] device hsr_slave_1 entered promiscuous mode [ 42.601900][ T4041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.604049][ T4041] Cannot create hsr debugfs directory [ 42.630116][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.632700][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.639432][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.655921][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.657822][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.665452][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.671941][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.673824][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.680533][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.823823][ T4050] device hsr_slave_0 entered promiscuous mode [ 42.862157][ T4050] device hsr_slave_1 entered promiscuous mode [ 42.902400][ T4050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.904565][ T4050] Cannot create hsr debugfs directory [ 42.943889][ T4040] device hsr_slave_0 entered promiscuous mode [ 42.983206][ T4040] device hsr_slave_1 entered promiscuous mode [ 43.021961][ T4040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.024046][ T4040] Cannot create hsr debugfs directory [ 43.132584][ T3615] Bluetooth: hci2: command 0x0409 tx timeout [ 43.134679][ T3615] Bluetooth: hci0: command 0x0409 tx timeout [ 43.136382][ T3615] Bluetooth: hci1: command 0x0409 tx timeout [ 43.178960][ T4034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.211941][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 43.213704][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 43.230668][ T4034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.290078][ T4034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.346018][ T4034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.441377][ T4041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.498421][ T4041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.541139][ T4041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.584123][ T4041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.671260][ T4039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.726828][ T4039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.773644][ T4039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.835899][ T4039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.887018][ T4040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.928383][ T4040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.980009][ T4040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.025106][ T4040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.097951][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.129200][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.141273][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.145426][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.149458][ T4050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.167431][ T4050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.209871][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.220666][ T4050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.283552][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.286329][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.289327][ T1664] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.291340][ T1664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.294792][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.297501][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.300020][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.305939][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.314187][ T4050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.379586][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.382478][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.385354][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.387209][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.393087][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.395647][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.398055][ T1664] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.399917][ T1664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.408392][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.417526][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.430023][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.449694][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.453985][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.456495][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.458392][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.460944][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.469323][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.486787][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.490024][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.493313][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.496053][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.498978][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.501883][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.509918][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.528697][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.531595][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.535114][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.537544][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.540191][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.545503][ T1664] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.547401][ T1664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.549761][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.553607][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.556286][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.558802][ T1664] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.560639][ T1664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.563637][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.566466][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.570837][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.574558][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.580411][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.583960][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.596504][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.605805][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.608838][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.611571][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.627089][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.630021][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.633137][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.657407][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.660411][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.675057][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.698142][ T4034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.701610][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.716915][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.719748][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.728424][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.736045][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.738889][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.741493][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.757666][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.760341][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.771582][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.799285][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.842325][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.844567][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.853349][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.855436][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.871581][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.888426][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.893778][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.907286][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.912338][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.915762][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.943020][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.945188][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.947303][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.950067][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.958649][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.961427][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.965410][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.967324][ T1680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.970637][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.973790][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.976297][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.984306][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.005229][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.007978][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.010441][ T1664] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.012410][ T1664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.015026][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.017687][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.020406][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.024393][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.027156][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.029591][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.043991][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.048476][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.051287][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.054757][ T1664] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.056640][ T1664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.064116][ T4034] device veth0_vlan entered promiscuous mode [ 45.071065][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.074951][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.077866][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.080497][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.085048][ T1664] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.086917][ T1664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.089212][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.092470][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.105581][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.107978][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.110412][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.114696][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.120103][ T4034] device veth1_vlan entered promiscuous mode [ 45.123247][ T4041] device veth0_vlan entered promiscuous mode [ 45.140022][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.144038][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.146593][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.149739][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.154090][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.156940][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.171248][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.180866][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.184541][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.187315][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.189976][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.193618][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.201063][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.204362][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.207046][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.209682][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.213076][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 45.215525][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 45.217194][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 45.219719][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.225540][ T4041] device veth1_vlan entered promiscuous mode [ 45.238123][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.240964][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.245312][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.253547][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.256352][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.259005][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.271132][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.280651][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.283666][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.287675][ T4034] device veth0_macvtap entered promiscuous mode [ 45.292209][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 45.294574][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 45.303397][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.306023][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.308623][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.313099][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.315710][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.319705][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.338954][ T4034] device veth1_macvtap entered promiscuous mode [ 45.350746][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.353730][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.356300][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.367108][ T4039] device veth0_vlan entered promiscuous mode [ 45.374961][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.377712][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.396658][ T4041] device veth0_macvtap entered promiscuous mode [ 45.410421][ T4039] device veth1_vlan entered promiscuous mode [ 45.428884][ T4041] device veth1_macvtap entered promiscuous mode [ 45.439378][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.446786][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.453350][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.456030][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.458518][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.461516][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.471020][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.476120][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.478717][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.491377][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.501554][ T4034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.504683][ T4034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.506965][ T4034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.509254][ T4034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.515808][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.518342][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.520483][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.530779][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.533996][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.549036][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.553043][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.556864][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.570927][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.574159][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.584213][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.608911][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.615020][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.618457][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.620968][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.625543][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.636131][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.638853][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.659233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.670004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.674165][ T4039] device veth0_macvtap entered promiscuous mode [ 45.679365][ T4041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.683539][ T4041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.685827][ T4041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.688101][ T4041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.707260][ T4039] device veth1_macvtap entered promiscuous mode [ 45.758440][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.763127][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.781785][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.784569][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.788143][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.804792][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.807598][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.810180][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.819580][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.824599][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.827830][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.830365][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.848526][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.854192][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.857074][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.860160][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.863716][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.880832][ T4040] device veth0_vlan entered promiscuous mode [ 45.885571][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.890031][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.909438][ T4040] device veth1_vlan entered promiscuous mode [ 45.930597][ T1664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.933404][ T1664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.940721][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.952655][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.993654][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.996583][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.999143][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.009605][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.014921][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.016982][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.019670][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.030334][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.058686][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.069738][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.114901][ T4050] device veth0_vlan entered promiscuous mode [ 46.123454][ T4050] device veth1_vlan entered promiscuous mode [ 46.142087][ T4050] device veth0_macvtap entered promiscuous mode [ 46.146933][ T4050] device veth1_macvtap entered promiscuous mode [ 46.179642][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.186188][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.188790][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.191543][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.199580][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.205518][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.209551][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.218714][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.224613][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.228760][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.233554][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.236228][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.239228][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.245600][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.263143][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.266128][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.268897][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.271412][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.274546][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.277383][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.279982][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.282661][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.285425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.288917][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.293353][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.302259][ T4050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.304714][ T4050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.307224][ T4050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.309714][ T4050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.319063][ T4039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.321547][ T4039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.324168][ T4039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.326619][ T4039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.330352][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.337064][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.339566][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.365135][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.367557][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.393638][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.410798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.415517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.446837][ T4040] device veth0_macvtap entered promiscuous mode [ 46.556765][ T4040] device veth1_macvtap entered promiscuous mode [ 46.581347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.585634][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.599470][ T1664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.606646][ T1664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.618682][ T1664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.621246][ T1664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.628181][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.630835][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.647456][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.650903][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.659029][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.665674][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.669287][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.675808][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.678583][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.681474][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.688019][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.697737][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.702491][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.720177][ T1680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.722948][ T1680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.727017][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.730122][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.734544][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.737586][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.740451][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.744076][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.746911][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.749791][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.754538][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.758354][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.761025][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.764656][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.780923][ T4040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.784192][ T4040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.786696][ T4040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.789149][ T4040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.799741][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.806338][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.811589][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.123869][ T1664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.126507][ T1664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.146520][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.148703][ T1680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.168497][ T1680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.946587][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 47.948371][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 47.950050][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 47.953958][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 47.956409][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 47.962790][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.065666][ T4171] loop4: detected capacity change from 0 to 512 [ 48.913406][ T4171] EXT4-fs warning (device loop4): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 49.212626][ T4171] EXT4-fs (loop4): mount failed [ 49.215072][ T4188] loop1: detected capacity change from 0 to 1024 [ 49.233330][ T4192] loop0: detected capacity change from 0 to 2048 [ 49.323855][ T4192] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 49.326547][ T4192] NILFS (loop0): mounting unchecked fs [ 49.412303][ T4194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 50.012684][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 50.014439][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 50.016345][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 50.018306][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 50.019949][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 50.258121][ T4192] NILFS (loop0): recovery complete [ 50.302831][ T4202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.988895][ T4206] loop4: detected capacity change from 0 to 512 [ 51.038880][ T4206] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.042537][ T4206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.116278][ T4206] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.10: corrupted in-inode xattr [ 51.123599][ T4206] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.10: couldn't read orphan inode 15 (err -117) [ 51.127180][ T4206] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,,errors=continue. Quota mode: writeback. [ 51.526562][ T4216] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 51.744322][ T4211] loop2: detected capacity change from 0 to 32768 [ 51.792157][ T4218] device syzkaller0 entered promiscuous mode [ 51.799009][ T4200] loop3: detected capacity change from 0 to 32768 [ 51.871897][ T4211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.15 (4211) [ 51.884499][ T4200] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.14 (4200) [ 51.902122][ T4211] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 51.904513][ T4211] BTRFS info (device loop2): enabling auto defrag [ 51.906192][ T4211] BTRFS info (device loop2): doing ref verification [ 51.907926][ T4211] BTRFS info (device loop2): max_inline at 0 [ 51.909481][ T4211] BTRFS info (device loop2): force clearing of disk cache [ 51.952288][ T4211] BTRFS info (device loop2): turning on sync discard [ 51.954194][ T4211] BTRFS info (device loop2): using free space tree [ 51.955924][ T4211] BTRFS info (device loop2): has skinny extents [ 52.027556][ T4214] loop4: detected capacity change from 0 to 32768 [ 52.069522][ T4214] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.16 (4214) [ 52.076321][ T4231] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 52.078287][ T4231] netlink: 17 bytes leftover after parsing attributes in process `syz.0.19'. [ 52.135474][ T4214] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 52.138004][ T4214] BTRFS info (device loop4): force zlib compression, level 3 [ 52.139860][ T4214] BTRFS info (device loop4): force clearing of disk cache [ 52.141623][ T4214] BTRFS info (device loop4): setting nodatasum [ 52.172342][ T4214] BTRFS info (device loop4): doing ref verification [ 52.184489][ T4214] BTRFS info (device loop4): allowing degraded mounts [ 52.186278][ T4214] BTRFS info (device loop4): enabling disk space caching [ 52.188060][ T4214] BTRFS info (device loop4): disk space caching is enabled [ 52.189880][ T4214] BTRFS info (device loop4): has skinny extents [ 52.225658][ T4211] BTRFS info (device loop2): enabling ssd optimizations [ 52.232155][ T4211] BTRFS info (device loop2): clearing free space tree [ 52.234265][ T4211] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 52.237345][ T4211] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 52.290341][ T4211] BTRFS info (device loop2): creating free space tree [ 52.295402][ T4211] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 52.313511][ T4211] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 52.616482][ T4214] BTRFS info (device loop4): enabling ssd optimizations [ 52.636675][ T4214] BTRFS info (device loop4): clearing free space tree [ 52.638706][ T4214] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 52.641222][ T4214] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 52.886821][ T4214] BTRFS info (device loop4): balance: start -susage=0..1,stripes=1..7 [ 52.947672][ T4214] BTRFS info (device loop4): relocating block group 1048576 flags system [ 54.259073][ T26] audit: type=1326 audit(283.225:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 54.272284][ T4273] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.23' sets config #1 [ 54.281776][ T26] audit: type=1326 audit(283.225:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 54.317675][ T26] audit: type=1326 audit(283.235:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 55.386177][ T26] audit: type=1326 audit(283.235:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 55.486013][ T26] audit: type=1326 audit(283.235:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 55.529488][ T26] audit: type=1326 audit(283.235:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 55.554631][ T4282] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 55.577215][ T26] audit: type=1326 audit(283.235:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 55.583445][ T4282] device hsr0 entered promiscuous mode [ 55.588954][ T4282] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 55.611926][ T26] audit: type=1326 audit(283.235:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 55.641929][ T4282] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 55.644965][ T4282] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 55.651169][ T26] audit: type=1326 audit(283.235:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 55.681934][ T4282] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 55.688309][ T26] audit: type=1326 audit(283.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 56.775860][ T4214] BTRFS info (device loop4): balance: ended with status: 0 [ 57.075910][ T4298] fuse: root generation should be zero [ 58.335055][ T4324] cgroup: Unknown subsys name 'defcontext' [ 58.411205][ T4326] Restarting kernel threads ... done. [ 64.067044][ T4362] loop1: detected capacity change from 0 to 32768 [ 64.649141][ T4379] device netdevsim0 entered promiscuous mode [ 66.021669][ C0] sched: RT throttling activated [ 66.132208][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.304107][ T4420] udc-core: couldn't find an available UDC or it's busy [ 68.306056][ T4420] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.624355][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.626505][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.686647][ T4440] device netdevsim0 entered promiscuous mode [ 73.787036][ T4453] udc-core: couldn't find an available UDC or it's busy [ 73.789079][ T4453] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.789130][ T21] cfg80211: failed to load regulatory.db [ 76.914082][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 78.017609][ T4500] ipt_CLUSTERIP: Please specify destination IP [ 79.343430][ T4507] Restarting kernel threads ... done. [ 82.031964][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 82.031977][ T26] audit: type=1326 audit(310.985:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.095191][ T26] audit: type=1326 audit(311.065:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.101090][ T26] audit: type=1326 audit(311.065:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.144228][ T26] audit: type=1326 audit(311.065:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.166511][ T26] audit: type=1326 audit(311.075:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.193548][ T26] audit: type=1326 audit(311.075:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.218625][ T26] audit: type=1326 audit(311.075:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.243601][ T26] audit: type=1326 audit(311.075:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.275589][ T26] audit: type=1326 audit(311.075:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 82.281282][ T26] audit: type=1326 audit(311.075:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d6ec28 code=0x7ffc0000 [ 83.793391][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.322128][ T4579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'. [ 90.452819][ T4608] udc-core: couldn't find an available UDC or it's busy [ 90.454701][ T4608] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.932618][ T4622] overlayfs: failed to resolve './file2': -2 [ 95.987558][ T4673] 8021q: VLANs not supported on vcan0 [ 96.793610][ T4679] overlayfs: failed to resolve './file2': -2 [ 97.381926][ T4286] Bluetooth: hci4: command 0x0405 tx timeout [ 97.845778][ T4687] Restarting kernel threads ... done. [ 98.484063][ T4693] netlink: 520 bytes leftover after parsing attributes in process `syz.2.135'. [ 98.732196][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 99.871462][ T4315] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.884968][ T4315] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.181032][ T4716] overlayfs: failed to resolve './file2': -2 [ 101.131953][ T4727] Restarting kernel threads ... done. [ 102.676798][ T364] Bluetooth: hci5: Frame reassembly failed (-84) [ 103.784107][ T4755] process 'syz.3.157' launched '/dev/fd/7' with NULL argv: empty string added [ 103.922912][ T4289] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.242134][ T4289] usb 1-1: Using ep0 maxpacket: 8 [ 104.422276][ T4289] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 104.865482][ T4284] Bluetooth: hci5: command 0xfc11 tx timeout [ 104.867733][ T144] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 104.943309][ T4289] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 104.945938][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.948270][ T4289] usb 1-1: Product: syz [ 104.949717][ T4289] usb 1-1: Manufacturer: syz [ 104.951101][ T4289] usb 1-1: SerialNumber: syz [ 105.179659][ T4770] Restarting kernel threads ... done. [ 105.701219][ T4289] usb 1-1: config 0 descriptor?? [ 105.778827][ T4289] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 105.804786][ T4289] usb 1-1: setting power ON [ 105.806418][ T4289] dvb-usb: bulk message failed: -22 (2/0) [ 109.156224][ T4289] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.181986][ T4289] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 109.184466][ T4289] usb 1-1: media controller created [ 109.194328][ T4289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.203019][ T4289] usb 1-1: selecting invalid altsetting 6 [ 109.205653][ T4289] usb 1-1: digital interface selection failed (-22) [ 109.207443][ T4289] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 109.252147][ T4289] usb 1-1: setting power OFF [ 109.253794][ T4289] dvb-usb: bulk message failed: -22 (2/0) [ 109.255490][ T4289] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 109.258103][ T4289] (NULL device *): no alternate interface [ 109.296018][ T4289] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 109.320184][ T4289] usb 1-1: USB disconnect, device number 2 [ 112.983050][ T4820] netlink: 'syz.3.175': attribute type 4 has an invalid length. [ 116.951482][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 116.953896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 119.791317][ T4853] netlink: 'syz.3.183': attribute type 2 has an invalid length. [ 119.845990][ T4853] netlink: 164 bytes leftover after parsing attributes in process `syz.3.183'. [ 119.964683][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.808716][ T4876] tmpfs: Unknown parameter 'quota' [ 122.094522][ T4597] wlan1: Trigger new scan to find an IBSS to join [ 123.441832][ T4901] Zero length message leads to an empty skb [ 123.522721][ T4898] device syzkaller0 entered promiscuous mode [ 124.582268][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 126.417590][ T4877] chnl_net:caif_netlink_parms(): no params data found [ 126.671521][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 127.136292][ T291] wlan1: Trigger new scan to find an IBSS to join [ 128.200233][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.202236][ T4877] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.213104][ T4877] device bridge_slave_0 entered promiscuous mode [ 128.219523][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.230132][ T4877] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.244831][ T4877] device bridge_slave_1 entered promiscuous mode [ 128.334677][ T4877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.339316][ T4877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.466267][ T4877] team0: Port device team_slave_0 added [ 129.045046][ T4597] wlan1: Creating new IBSS network, BSSID 56:c5:a3:69:56:35 [ 129.338131][ T4877] team0: Port device team_slave_1 added [ 129.457534][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 129.532653][ T4877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.534575][ T4877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.571813][ T4877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.588820][ T4877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.598208][ T4877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.646102][ T4877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.871685][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 130.694356][ T4877] device hsr_slave_0 entered promiscuous mode [ 130.732331][ T4877] device hsr_slave_1 entered promiscuous mode [ 131.478985][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.487140][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.025314][ T4877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.027459][ T4877] Cannot create hsr debugfs directory [ 132.030375][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 132.520809][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 133.150152][ T4877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.201754][ T4287] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.244119][ T4877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.257483][ T4877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.313902][ T4877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.323147][ T5046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'. [ 133.471802][ T4287] usb 1-1: Using ep0 maxpacket: 8 [ 134.601909][ T4287] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 134.757702][ T4287] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.760513][ T4287] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.763712][ T4287] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.767410][ T4287] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.769834][ T4287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.572614][ T4287] usb 1-1: usb_control_msg returned -71 [ 135.574182][ T4287] usbtmc 1-1:16.0: can't read capabilities [ 135.582348][ T4287] usb 1-1: USB disconnect, device number 3 [ 135.626945][ T4877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.765298][ T5087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 135.873157][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.892452][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.328540][ T4877] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.371386][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.374478][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.377207][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.379159][ T4481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.411361][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.427856][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.430875][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.436448][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 136.486726][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.488656][ T4481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.668516][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.693055][ T4877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.695940][ T4877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.704637][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.707858][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.982039][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.985030][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.987969][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.990827][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.052385][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.072760][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.086642][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.089465][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.251141][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.912340][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.914737][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.948464][ T4877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.409112][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 144.283104][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.286123][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.292831][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.295742][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.305004][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.174527][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.188096][ T5172] udc-core: couldn't find an available UDC or it's busy [ 145.190042][ T5172] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.227540][ T4877] device veth0_vlan entered promiscuous mode [ 145.284569][ T4877] device veth1_vlan entered promiscuous mode [ 145.438555][ T4877] device veth0_macvtap entered promiscuous mode [ 145.471299][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.475969][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.482411][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.506324][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.554574][ T4877] device veth1_macvtap entered promiscuous mode [ 145.590253][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.605586][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.636011][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.651877][ T4285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.653523][ T5181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 145.654114][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.659218][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.679564][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.703323][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.705950][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.708684][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.711348][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.755658][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.777249][ T4877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.792015][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.794973][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.830115][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.850083][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.860208][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.890651][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.893996][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.896990][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.899631][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.902550][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.905466][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.908883][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.912980][ T4877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.917024][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.920042][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.930912][ T4877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.936338][ T4877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.939013][ T4877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.941482][ T4877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.741967][ T4285] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.744779][ T4285] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 146.747259][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.776221][ T4285] usb 1-1: config 0 descriptor?? [ 146.815795][ T4285] pwc: Askey VC010 type 2 USB webcam detected. [ 146.967701][ T4597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.975231][ T4597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.004615][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.039730][ T1680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.047457][ T1680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.083759][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.899592][ T4285] pwc: recv_control_msg error -32 req 02 val 2b00 [ 147.951098][ T4285] pwc: recv_control_msg error -32 req 02 val 2700 [ 147.991963][ T4285] pwc: recv_control_msg error -32 req 02 val 2c00 [ 148.158168][ T4285] pwc: recv_control_msg error -32 req 04 val 1000 [ 148.201792][ T4285] pwc: recv_control_msg error -32 req 04 val 1300 [ 148.242272][ T4285] pwc: recv_control_msg error -32 req 04 val 1400 [ 148.424157][ T4285] pwc: recv_control_msg error -32 req 02 val 2000 [ 148.472423][ T4285] pwc: recv_control_msg error -32 req 02 val 2100 [ 149.345221][ T4285] pwc: recv_control_msg error -32 req 04 val 1500 [ 149.394333][ T4285] pwc: recv_control_msg error -32 req 02 val 2500 [ 150.343135][ T4285] pwc: recv_control_msg error -71 req 02 val 2600 [ 150.491759][ T4285] pwc: recv_control_msg error -71 req 02 val 2900 [ 150.536383][ T4285] pwc: recv_control_msg error -71 req 02 val 2800 [ 150.561915][ T4285] pwc: recv_control_msg error -71 req 04 val 1100 [ 150.582052][ T4285] pwc: recv_control_msg error -71 req 04 val 1200 [ 150.587466][ T4285] pwc: Registered as video11. [ 150.589949][ T4285] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 150.601362][ T4285] usb 1-1: USB disconnect, device number 4 [ 150.723597][ T5237] loop2: detected capacity change from 0 to 7 [ 150.750264][ T5237] Dev loop2: unable to read RDB block 7 [ 150.758754][ T5237] loop2: unable to read partition table [ 150.784688][ T5237] loop2: partition table beyond EOD, truncated [ 150.804413][ T5237] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 152.056026][ T4284] Bluetooth: hci5: command 0x0405 tx timeout [ 155.365068][ T5301] Restarting kernel threads ... done. [ 159.135157][ T5058] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 159.262671][ T5348] Restarting kernel threads ... done. [ 160.105535][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 160.397781][ T5359] overlayfs: failed to resolve './file2': -2 [ 162.378538][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 162.381120][ T5368] 8021q: VLANs not supported on nlmon0 [ 164.039115][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 164.041038][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 164.043176][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 164.044859][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 165.942559][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'. [ 170.160822][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 170.202007][ T3615] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 170.595072][ T5462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 170.787031][ T5456] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 170.794927][ T5456] device bridge_slave_1 left promiscuous mode [ 170.799066][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.079102][ T5456] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 171.251816][ T3615] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 171.253943][ T3615] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.257048][ T3615] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 171.351889][ T3615] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 171.354156][ T3615] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.357101][ T3615] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 171.363190][ T5470] netlink: 'syz.4.375': attribute type 9 has an invalid length. [ 171.370486][ T5470] netlink: 'syz.4.375': attribute type 6 has an invalid length. [ 171.375624][ T5470] netlink: 'syz.4.375': attribute type 7 has an invalid length. [ 171.377687][ T5470] netlink: 'syz.4.375': attribute type 8 has an invalid length. [ 171.441988][ T3615] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 171.444432][ T3615] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.448569][ T3615] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 171.500834][ T5475] udc-core: couldn't find an available UDC or it's busy [ 171.511356][ T5475] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.502090][ T3615] usb 1-1: string descriptor 0 read error: -71 [ 172.514883][ T3615] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 172.591864][ T3615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.631894][ T3615] usb 1-1: can't set config #168, error -71 [ 172.656002][ T3615] usb 1-1: USB disconnect, device number 5 [ 173.302876][ T3615] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.794865][ T5502] Restarting kernel threads ... done. [ 174.059889][ T3615] usb 1-1: Using ep0 maxpacket: 8 [ 174.360138][ T5504] udc-core: couldn't find an available UDC or it's busy [ 174.373246][ T5504] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.592588][ T3615] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.595133][ T3615] usb 1-1: config 179 has no interface number 0 [ 174.598094][ T3615] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 174.601173][ T3615] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 175.776887][ T3615] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.780069][ T3615] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 175.783793][ T3615] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.787444][ T3615] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.789926][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.822340][ T3615] usb 1-1: can't set config #179, error -71 [ 175.835764][ T3615] usb 1-1: USB disconnect, device number 6 [ 177.043182][ T5542] Restarting kernel threads ... done. [ 179.387589][ T5559] x_tables: ip_tables: osf match: only valid for protocol 6 [ 181.124021][ T5593] Restarting kernel threads ... done. [ 182.734452][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 185.572540][ T5633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.836870][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 185.836882][ T26] audit: type=1326 audit(2017.800:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.5.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8928cc28 code=0x7ffc0000 [ 185.855577][ T26] audit: type=1326 audit(2017.800:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.5.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff8928cc28 code=0x7ffc0000 [ 186.010636][ T5645] Restarting kernel threads ... done. [ 186.036107][ T26] audit: type=1326 audit(2017.800:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.5.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8928cc28 code=0x7ffc0000 [ 186.068017][ T26] audit: type=1326 audit(2017.800:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.5.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8928cc28 code=0x7ffc0000 [ 189.123180][ T5677] tmpfs: Unknown parameter '' [ 189.869157][ T5685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.439'. [ 190.791392][ T4597] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.229143][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.514037][ T5700] Restarting kernel threads ... done. [ 192.694924][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.696918][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.152674][ T5736] netlink: 52 bytes leftover after parsing attributes in process `syz.4.457'. [ 195.273371][ T5736] netlink: 52 bytes leftover after parsing attributes in process `syz.4.457'. [ 197.028255][ T5754] Restarting kernel threads ... done. [ 197.525165][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.464'. [ 201.878164][ T5802] Restarting kernel threads ... done. [ 204.706195][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 205.951474][ T5838] udc-core: couldn't find an available UDC or it's busy [ 205.953483][ T5838] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 205.972116][ T5833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.488'. [ 205.975706][ T5833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.488'. [ 207.404038][ T5863] Restarting kernel threads ... done. [ 209.121924][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 209.129629][ T5872] device team_slave_0 entered promiscuous mode [ 209.131525][ T5872] device team_slave_1 entered promiscuous mode [ 209.134202][ T5872] device macvtap1 entered promiscuous mode [ 209.135743][ T5872] device team0 entered promiscuous mode [ 209.138736][ T5872] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 209.317291][ T5880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.504'. [ 209.472938][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.500'. [ 209.907237][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 209.916587][ T5880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.504'. [ 209.973105][ T5867] device team0 left promiscuous mode [ 209.975114][ T5867] device team_slave_0 left promiscuous mode [ 209.976915][ T5867] device team_slave_1 left promiscuous mode [ 210.827386][ T5904] Restarting kernel threads ... done. [ 217.526921][ T5962] netlink: 288 bytes leftover after parsing attributes in process `syz.5.528'. [ 217.828238][ T5968] Restarting kernel threads ... done. [ 218.940668][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 219.205944][ T5966] team0: Port device team_slave_0 removed [ 221.348703][ T5996] device bpq0 entered promiscuous mode [ 221.350684][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 221.373709][ T4317] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 221.459651][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.510101][ T5996] bond0: (slave rose0): Enslaving as an active interface with an up link [ 221.612350][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 221.732004][ T4317] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 221.734645][ T4317] usb 1-1: config 0 has no interface number 0 [ 221.736326][ T4317] usb 1-1: config 0 interface 10 has no altsetting 0 [ 224.142745][ T6016] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 224.706419][ T4317] usb 1-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72 [ 224.708960][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.711226][ T4317] usb 1-1: Product: syz [ 224.746946][ T4317] usb 1-1: Manufacturer: syz [ 224.748288][ T4317] usb 1-1: SerialNumber: syz [ 224.773210][ T4317] usb 1-1: config 0 descriptor?? [ 224.962293][ T4317] usb 1-1: can't set config #0, error -71 [ 224.966881][ T6021] Restarting kernel threads ... done. [ 224.970251][ T4317] usb 1-1: USB disconnect, device number 7 [ 227.838552][ T4196] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 228.049432][ T6052] tmpfs: Unknown parameter 'quota' [ 228.514142][ T4181] Bluetooth: (null): Invalid header checksum [ 228.516140][ T4181] Bluetooth: (null): Invalid header checksum [ 228.622666][ T4196] Bluetooth: (null): Invalid header checksum [ 228.732285][ T4181] Bluetooth: (null): Invalid header checksum [ 228.842498][ T4181] Bluetooth: (null): Invalid header checksum [ 229.102257][ T4181] Bluetooth: (null): Invalid header checksum [ 229.104038][ T4181] Bluetooth: (null): Invalid header checksum [ 230.110030][ T6081] Restarting kernel threads ... done. [ 232.369903][ T6117] loop8: detected capacity change from 0 to 7 [ 232.378521][ T4026] Dev loop8: unable to read RDB block 7 [ 232.378576][ T4026] loop8: unable to read partition table [ 232.378708][ T4026] loop8: partition table beyond EOD, truncated [ 233.768112][ T6117] Dev loop8: unable to read RDB block 7 [ 233.768145][ T6117] loop8: unable to read partition table [ 233.768271][ T6117] loop8: partition table beyond EOD, truncated [ 233.768308][ T6117] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 233.768308][ T6117] ) failed (rc=-5) [ 235.978452][ T6115] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 235.980918][ T6115] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 236.172943][ T4456] wlan1: Trigger new scan to find an IBSS to join [ 239.263496][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 239.281849][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 239.305161][ T6190] loop2: detected capacity change from 0 to 7 [ 239.309702][ T4026] loop2: [ 239.310591][ T4026] loop2: partition table partially beyond EOD, truncated [ 239.322148][ T6190] loop2: [ 239.323026][ T6190] loop2: partition table partially beyond EOD, truncated [ 239.679168][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 242.092520][ T6046] wlan1: Trigger new scan to find an IBSS to join [ 242.486216][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 244.096720][ T6266] Restarting kernel threads ... done. [ 244.192281][ T6046] wlan1: Creating new IBSS network, BSSID 86:65:ad:af:d1:66 [ 246.172761][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 246.463801][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 248.078432][ T6309] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 249.951052][ T6321] Restarting kernel threads ... done. [ 250.002627][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 250.537718][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 251.110113][ T6341] netlink: 'syz.0.632': attribute type 4 has an invalid length. [ 251.131869][ T6341] netlink: 17 bytes leftover after parsing attributes in process `syz.0.632'. [ 253.272452][ T6365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.641'. [ 253.276730][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 253.946405][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.948538][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.270321][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.643'. [ 255.713336][ T6405] udc-core: couldn't find an available UDC or it's busy [ 255.733070][ T6405] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 256.894599][ T6415] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 256.896813][ T6415] netlink: 17 bytes leftover after parsing attributes in process `syz.0.653'. [ 258.313174][ T4113] Bluetooth: hci5: command 0x0405 tx timeout [ 258.842101][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.656'. [ 259.210560][ T6432] udc-core: couldn't find an available UDC or it's busy [ 259.212613][ T6432] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 264.873390][ T6446] syz.0.663 (6446): drop_caches: 2 [ 264.879945][ T6450] device bpq0 left promiscuous mode [ 264.885948][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 265.253902][ T6457] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.666'. [ 266.135073][ T6450] mkiss: ax0: crc mode is auto. [ 266.210934][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 266.692074][ T1664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.487997][ T1664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.752806][ T6496] netlink: 'syz.4.681': attribute type 9 has an invalid length. [ 269.755148][ T6496] netlink: 'syz.4.681': attribute type 6 has an invalid length. [ 269.774435][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 269.779880][ T6496] netlink: 'syz.4.681': attribute type 7 has an invalid length. [ 269.782347][ T6496] netlink: 'syz.4.681': attribute type 8 has an invalid length. [ 269.858665][ T1664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.005765][ T1664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.147711][ T7] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 270.150171][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.177521][ T6517] binder: 6516:6517 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 270.187044][ T6517] binder: 6517 RLIMIT_NICE not set [ 270.188911][ T6517] binder: 6516:6517 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 270.927207][ T6517] binder: 6516:6517 ioctl 541c 20000200 returned -22 [ 270.991894][ T7] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 270.996173][ T7] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 270.998492][ T7] usb 1-1: Manufacturer: syz [ 271.041721][ T7] usb 1-1: config 0 descriptor?? [ 271.093968][ T7] Registered IR keymap rc-hauppauge [ 271.381442][ T7] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 271.386394][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 271.390113][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4 [ 271.537412][ T7] usb 1-1: USB disconnect, device number 8 [ 273.627990][ T6558] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 274.250068][ T6046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.126955][ T6605] netlink: 'syz.4.705': attribute type 4 has an invalid length. [ 275.129161][ T6605] netlink: 17 bytes leftover after parsing attributes in process `syz.4.705'. [ 276.358693][ T6637] udc-core: couldn't find an available UDC or it's busy [ 276.360736][ T6637] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 277.327329][ T6656] netlink: 'syz.5.718': attribute type 4 has an invalid length. [ 277.329520][ T6656] netlink: 17 bytes leftover after parsing attributes in process `syz.5.718'. [ 279.068050][ T6698] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 279.286500][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 279.317190][ T6709] team0: No ports can be present during mode change [ 279.323863][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 279.419695][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 279.469141][ T6709] team0 (unregistering): Port device team_slave_0 removed [ 279.511562][ T6709] team0 (unregistering): Port device team_slave_1 removed [ 279.814384][ T6720] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 279.817411][ T6720] netlink: 17 bytes leftover after parsing attributes in process `syz.4.731'. [ 280.307561][ T6734] udc-core: couldn't find an available UDC or it's busy [ 280.309527][ T6734] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 281.892158][ T6769] Restarting kernel threads ... done. [ 282.022051][ T1664] device hsr_slave_0 left promiscuous mode [ 282.194759][ T1664] device hsr_slave_1 left promiscuous mode [ 282.393212][ T1664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.397277][ T1664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.712616][ T1664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.983125][ T1664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.001302][ T1664] device bridge_slave_1 left promiscuous mode [ 283.005150][ T1664] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.053397][ T7] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 283.056484][ T7] Bluetooth: hci0: Injecting HCI hardware error event [ 283.059801][ T144] Bluetooth: hci0: hardware error 0x00 [ 283.081904][ T1664] device bridge_slave_0 left promiscuous mode [ 283.083792][ T1664] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.255555][ T1664] device veth1_macvtap left promiscuous mode [ 284.260531][ T1664] device veth0_macvtap left promiscuous mode [ 284.263481][ T1664] device veth1_vlan left promiscuous mode [ 284.265229][ T1664] device veth0_vlan left promiscuous mode [ 286.290197][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.758'. [ 286.584482][ T1664] team0 (unregistering): Port device team_slave_1 removed [ 286.611285][ T1664] team0 (unregistering): Port device team_slave_0 removed [ 286.651344][ T1664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.839714][ T1664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.644798][ T1664] bond0 (unregistering): Released all slaves [ 288.872564][ T6779] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 288.874825][ T6779] netlink: 17 bytes leftover after parsing attributes in process `syz.0.746'. [ 290.483914][ T6849] device netdevsim0 entered promiscuous mode [ 290.504886][ T6849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 290.821533][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 290.996092][ T6860] mkiss: ax0: crc mode is auto. [ 291.061754][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 291.151871][ T6862] mkiss: ax0: crc mode is auto. [ 291.191843][ T21] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 291.194253][ T21] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.202701][ T21] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.223871][ T21] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.226040][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 291.228501][ T21] usb 1-1: config 0 has no interface number 0 [ 291.230270][ T21] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 291.263220][ T21] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 291.271190][ T21] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.391902][ T6877] netlink: 'syz.4.774': attribute type 4 has an invalid length. [ 291.394023][ T6877] netlink: 17 bytes leftover after parsing attributes in process `syz.4.774'. [ 291.435265][ T21] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.439299][ T21] usb 1-1: config 0 interface 125 has no altsetting 0 [ 291.441138][ T21] usb 1-1: config 0 interface 125 has no altsetting 2 [ 292.577304][ T21] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 292.580405][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.518647][ T21] usb 1-1: config 0 descriptor?? [ 293.541828][ T21] usb 1-1: can't set config #0, error -71 [ 294.224411][ T21] usb 1-1: USB disconnect, device number 9 [ 295.094025][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 298.709676][ T6977] syz.4.798 uses obsolete (PF_INET,SOCK_PACKET) [ 298.874754][ T6996] dccp_invalid_packet: P.Data Offset(0) too small [ 298.914101][ T6959] chnl_net:caif_netlink_parms(): no params data found [ 299.051725][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 300.208626][ C1] ================================================================== [ 300.211111][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x40c/0x470 [ 300.213238][ C1] Read of size 2 at addr ffff0000e9ffa82a by task ksoftirqd/1/20 [ 300.215442][ C1] [ 300.216093][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.189-syzkaller #0 [ 300.218342][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.221090][ C1] Call trace: [ 300.222023][ C1] dump_backtrace+0x0/0x43c [ 300.223312][ C1] show_stack+0x2c/0x3c [ 300.224439][ C1] __dump_stack+0x30/0x40 [ 300.225676][ C1] dump_stack_lvl+0xf8/0x160 [ 300.226980][ C1] print_address_description+0x78/0x30c [ 300.228536][ C1] kasan_report+0xec/0x15c [ 300.229750][ C1] __asan_report_load2_noabort+0x44/0x50 [ 300.231281][ C1] rose_timer_expiry+0x40c/0x470 [ 300.232688][ C1] call_timer_fn+0x19c/0x858 [ 300.233991][ C1] __run_timers+0x46c/0x6c4 [ 300.235217][ C1] run_timer_softirq+0x7c/0x114 [ 300.236578][ C1] handle_softirqs+0x344/0xbf0 [ 300.237852][ C1] run_ksoftirqd+0x7c/0x2a0 [ 300.239113][ C1] smpboot_thread_fn+0x4b0/0x920 [ 300.240464][ C1] kthread+0x374/0x454 [ 300.241581][ C1] ret_from_fork+0x10/0x20 [ 300.242843][ C1] [ 300.243504][ C1] Allocated by task 6454: [ 300.244743][ C1] __kasan_kmalloc+0xb0/0xf0 [ 300.245973][ C1] __kmalloc_node_track_caller+0x234/0x3bc [ 300.247591][ C1] kmalloc_reserve+0xe4/0x26c [ 300.248970][ C1] __alloc_skb+0x23c/0x67c [ 300.250209][ C1] skb_copy+0x100/0x4a4 [ 300.251363][ C1] mac80211_hwsim_tx_frame_no_nl+0xac4/0x131c [ 300.253060][ C1] mac80211_hwsim_tx_frame+0x1c0/0x1f4 [ 300.254622][ C1] mac80211_hwsim_beacon_tx+0x3e8/0x7ac [ 300.256227][ C1] __iterate_interfaces+0x204/0x484 [ 300.257621][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 300.259578][ C1] mac80211_hwsim_beacon+0x90/0x174 [ 300.261040][ C1] __hrtimer_run_queues+0x428/0xb6c [ 300.262491][ C1] hrtimer_run_softirq+0x160/0x400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 300.263876][ C1] handle_softirqs+0x344/0xbf0 [ 300.265166][ C1] __irq_exit_rcu+0x240/0x440 [ 300.266435][ C1] irq_exit+0x14/0x88 [ 300.267537][ C1] handle_domain_irq+0x14c/0x1fc [ 300.268884][ C1] gic_handle_irq+0x78/0x1c8 [ 300.270108][ C1] [ 300.270720][ C1] The buggy address belongs to the object at ffff0000e9ffa800 [ 300.270720][ C1] which belongs to the cache kmalloc-512 of size 512 [ 300.274656][ C1] The buggy address is located 42 bytes inside of [ 300.274656][ C1] 512-byte region [ffff0000e9ffa800, ffff0000e9ffaa00) [ 300.278386][ C1] The buggy address belongs to the page: [ 300.280031][ C1] page:00000000e8c004e6 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000e9ff9800 pfn:0x129ff8 [ 300.283234][ C1] head:00000000e8c004e6 order:2 compound_mapcount:0 compound_pincount:0 [ 300.285650][ C1] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 300.287922][ C1] raw: 05ffc00000010200 fffffc000344b708 fffffc0003251a08 ffff0000c0002600 [ 300.290302][ C1] raw: ffff0000e9ff9800 0000000000100004 00000001ffffffff 0000000000000000 [ 300.292678][ C1] page dumped because: kasan: bad access detected [ 300.294472][ C1] [ 300.295132][ C1] Memory state around the buggy address: [ 300.296635][ C1] ffff0000e9ffa700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 300.298831][ C1] ffff0000e9ffa780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 300.301115][ C1] >ffff0000e9ffa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.303473][ C1] ^ [ 300.305038][ C1] ffff0000e9ffa880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.307350][ C1] ffff0000e9ffa900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.309536][ C1] ================================================================== [ 300.311894][ C1] Disabling lock debugging due to kernel taint [ 300.482607][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.484901][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.488278][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.490380][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.524714][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.257739][ T1664] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.318229][ T1664] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.387961][ T1664] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.446847][ T1664] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.913761][ T1664] device hsr_slave_0 left promiscuous mode [ 302.951913][ T1664] device hsr_slave_1 left promiscuous mode [ 303.032056][ T1664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.034157][ T1664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.036635][ T1664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.038656][ T1664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.041126][ T1664] device bridge_slave_1 left promiscuous mode [ 303.043293][ T1664] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.072735][ T1664] device bridge_slave_0 left promiscuous mode [ 303.074562][ T1664] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.211932][ T1664] device veth1_macvtap left promiscuous mode [ 303.213683][ T1664] device veth0_macvtap left promiscuous mode [ 303.215312][ T1664] device veth1_vlan left promiscuous mode [ 303.216939][ T1664] device veth0_vlan left promiscuous mode [ 303.384481][ T1664] team0 (unregistering): Port device team_slave_1 removed [ 303.391446][ T1664] team0 (unregistering): Port device team_slave_0 removed [ 303.398497][ T1664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.432170][ T1664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.581753][ T1664] bond0 (unregistering): Released all slaves [ 305.788837][ T291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)