last executing test programs: 5.737855177s ago: executing program 0 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) 4.907321254s ago: executing program 0 (id=438): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000440)=0x4, 0x6f) 4.857035366s ago: executing program 0 (id=439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x1ff, 0xa, 0x80, 0x80, 0x2b}, {0x0, 0x0, 0x1abe1019, 0x800, 0x80000000, 0x8, 0x5, 0xfffffffffffffffd}, {0x0, 0x100000, 0x800000}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e0000000301000000000400"], 0xd4}}, 0x0) 4.856699676s ago: executing program 0 (id=440): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491", 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRESDEC=r0], 0x0) 4.001585783s ago: executing program 1 (id=446): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000003300)={0x0, &(0x7f0000002300)=""/4096}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000300)={0x0, 0x3}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x141943) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x1011, 0x7, 0x9, 0x0, 0x0, 0x1993012db91ab52e}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) 3.567564526s ago: executing program 4 (id=448): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)}) 3.271360496s ago: executing program 0 (id=450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 3.205943628s ago: executing program 0 (id=451): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x7d, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x15}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x1, 0x9], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.186230499s ago: executing program 1 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="00000000000000e3ffff", @ANYRESDEC=r0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000ffffff7f00"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800000000000026080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="060000cb8dc466ab0080050000080000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="040000c001000000010000c002010000da96af2fcead2a68"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040051) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01010100ffffffff0000000086dd00"/24], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000880) socket$inet6(0xa, 0x5, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r10, @ANYRES16=r14, @ANYRES8=r11, @ANYRES32=r15, @ANYBLOB="0c009900ff070040700000001400060073797a6b616c6c6572300000000000000a002500030000ac2e6aa000ff6e00f058e9112600000000000000000000000000335ebeeb9fb9dc8e178ede7963a7931e5f39f07f9158103b6d51c59cd3233390a507bd75c0bf52a395eb08e9be956d6227a99596bc5e8d02bc385b374aec66adb7232a3a4ce4f2a30e1d123db001b95390fa85716137e60a275e18ee1b6379ab9d7da340bf0d2bc5c51725865c7c6f58d097211a162385986d28fd4a106dcaa61c5e5cd4ba33841c5948fa609d4d67ad4bf0386ee7d9"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r16, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r17, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r17, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r18, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r19 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r19, &(0x7f00000000c0)={0x1f, 0x3, @any, 0x0, 0x1}, 0xe) 3.104648111s ago: executing program 2 (id=453): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.001416915s ago: executing program 4 (id=454): capset(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 2.928019337s ago: executing program 4 (id=455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xb, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) 2.927519467s ago: executing program 4 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x157, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x121, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0x1, "000005000000"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x8, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d7113"}, {0x19}]}}}}}}, 0x0) 2.371130725s ago: executing program 3 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6ef, 0xfffb, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x200}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.316341206s ago: executing program 1 (id=459): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) fcntl$setstatus(r0, 0x4, 0x6400) 2.269900078s ago: executing program 3 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x200feff}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xb9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x18, {0x7050, 0x10}}]}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004d808}, 0x80) 2.235635209s ago: executing program 3 (id=461): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) 2.20208338s ago: executing program 2 (id=462): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) 2.20174806s ago: executing program 2 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {0x13}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) 2.18848245s ago: executing program 3 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0xc1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8000000003c) socket$kcm(0x29, 0x5, 0x0) sendmsg(r4, 0x0, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@enum={0x3, 0x3, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}, {0xc, 0x7}]}, @struct={0x5}]}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x4d, 0x0, 0x0, 0x100000}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 2.117949673s ago: executing program 2 (id=465): syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904f4000feae6fc04090580000004fb0f05072501400b06002e2206141d390ffa786e526f5ec27f6302474143e65c6e3e70993fd796088c966dcca24acae9cda26a9631b8cf0f090580020000000b0809050c03"], 0x0) 2.027378665s ago: executing program 4 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sync_file_range(r0, 0x7, 0x4, 0x0) 1.981450677s ago: executing program 4 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1}, 0x10040) 1.54726016s ago: executing program 2 (id=468): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000008000000e27f00000100000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x917) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r8, 0x0, r8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) 1.463469873s ago: executing program 1 (id=469): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.26993428s ago: executing program 1 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240), 0x8) 547.112872ms ago: executing program 2 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6ef, 0xfffb, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x200}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 431.037546ms ago: executing program 1 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ftruncate(0xffffffffffffffff, 0x6000000) inotify_init1(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 266.005332ms ago: executing program 3 (id=473): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x8ad00, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x4) 0s ago: executing program 3 (id=474): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 28.591586][ T4314] cgroup: Unknown subsys name 'net' [ 28.807981][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.097492][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.484306][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.488033][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.489433][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.493026][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.495521][ T4341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.495898][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.496671][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.497969][ T4336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.498891][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.500456][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.501053][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.502634][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.502983][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.504471][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.505046][ T4341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.507071][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.507295][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.508884][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.510455][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.510731][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.512769][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.513159][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.515809][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.516806][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.517911][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.519863][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.521034][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.522302][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.523881][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.539455][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.646160][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.652290][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.689065][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.703227][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.713418][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.714659][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.716872][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.723915][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.726851][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.728362][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.730078][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.731204][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.732865][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.737613][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.738767][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.745378][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.762624][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.763813][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.765315][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.771867][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.780554][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.781804][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.783245][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.784597][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.788170][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.790711][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.803812][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.806236][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.813292][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.814492][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.818231][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.820683][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.827114][ T4335] team0: Port device team_slave_0 added [ 30.828269][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.829485][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.830859][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.838927][ T4335] team0: Port device team_slave_1 added [ 30.840868][ T4327] team0: Port device team_slave_0 added [ 30.842694][ T4327] team0: Port device team_slave_1 added [ 30.858328][ T4328] team0: Port device team_slave_0 added [ 30.863523][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.870062][ T4328] team0: Port device team_slave_1 added [ 30.871402][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.872454][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.876618][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.879542][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.881219][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.882346][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.886746][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.894371][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.896014][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.899970][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.902033][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.903194][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.907692][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.911622][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.912714][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.917109][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.918953][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.920075][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.921474][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.923852][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.924937][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.926588][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.927939][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.929025][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.932695][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.949588][ T4326] team0: Port device team_slave_0 added [ 30.951461][ T4326] team0: Port device team_slave_1 added [ 30.996351][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.035431][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.116229][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.155391][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.195242][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.196394][ T4335] Cannot create hsr debugfs directory [ 31.202038][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.204517][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.211115][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.212201][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.216532][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.224149][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.225425][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.231207][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.242472][ T4337] team0: Port device team_slave_0 added [ 31.244518][ T4337] team0: Port device team_slave_1 added [ 31.296176][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.345480][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.385232][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.386388][ T4328] Cannot create hsr debugfs directory [ 31.394961][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.396568][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.400458][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.466366][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.505337][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.545185][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.546420][ T4326] Cannot create hsr debugfs directory [ 31.547530][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.548693][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.552490][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.626294][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.665310][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.705201][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.706442][ T4337] Cannot create hsr debugfs directory [ 31.779842][ T4335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.822007][ T4335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.856354][ T4335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.914758][ T4335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.975040][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.018119][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.059547][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.101652][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.152837][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.186305][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.228293][ T4328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.278906][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.320468][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.357531][ T4328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.406344][ T4328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.446961][ T4328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.499501][ T4337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.540191][ T4337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.555397][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 32.555483][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 32.556517][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 32.557489][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 32.589551][ T4337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.618880][ T4337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.645581][ T4339] Bluetooth: hci4: command 0x0409 tx timeout [ 32.659799][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.677895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.680076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.684191][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.692694][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.694197][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.697226][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.698437][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.699913][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.707040][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.713446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.715023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.718065][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.719260][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.729808][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.731212][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.732510][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.740824][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.743640][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.753989][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.755890][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.757344][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.758411][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.759650][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.761114][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.769150][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.770545][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.772067][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.773621][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.776903][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.778082][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.779487][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.781081][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.782918][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.784630][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.787886][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.790547][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.794300][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.797050][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.802047][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.803727][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.806270][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.807813][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.810915][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.813593][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.815096][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.817988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.819332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.822855][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.824957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.826539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.833751][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.841117][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.842701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.843982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.851707][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.854360][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.856867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.858404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.862230][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.867189][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.868550][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.869906][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.871471][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.872837][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.873974][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.876340][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.879276][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.880759][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.881966][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.892219][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.894004][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.898710][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.900133][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.901548][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.903085][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.904174][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.906835][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.908501][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.916271][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.917532][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.918900][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.920534][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.924142][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.926259][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.927792][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.929530][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.931055][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.932553][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.934112][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.938644][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.940146][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.941809][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.943140][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.944265][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.946488][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.948233][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.949643][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.950985][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.960720][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.962542][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.964247][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.966613][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.967749][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.974435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.976212][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.977383][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.983695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.987984][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.003313][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.006466][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.008116][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.009727][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.011889][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.013383][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.021988][ T4337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.023620][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.026763][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.028596][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.030160][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.031682][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.033198][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.034749][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.036618][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.038055][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.039549][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.041063][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.047474][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.050575][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.051930][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.054962][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.057379][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.064071][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.066736][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.068236][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.069674][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.071155][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.072597][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.079041][ T4335] device veth0_vlan entered promiscuous mode [ 33.084913][ T4327] device veth0_vlan entered promiscuous mode [ 33.088897][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.090556][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.092046][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.093506][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.095105][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.097381][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.098688][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.099988][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.102568][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.104035][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.115076][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.120867][ T4335] device veth1_vlan entered promiscuous mode [ 33.135616][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.141828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.143264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.144786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.147921][ T4327] device veth1_vlan entered promiscuous mode [ 33.163656][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.165121][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.166768][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.168266][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.176921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.178321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.184871][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.187164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.188635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.189876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.191986][ T4326] device veth0_vlan entered promiscuous mode [ 33.202906][ T4326] device veth1_vlan entered promiscuous mode [ 33.209028][ T4335] device veth0_macvtap entered promiscuous mode [ 33.210942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.212404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.213771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.217100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.220699][ T4327] device veth0_macvtap entered promiscuous mode [ 33.223492][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.225301][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.227179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.229454][ T4335] device veth1_macvtap entered promiscuous mode [ 33.239686][ T4327] device veth1_macvtap entered promiscuous mode [ 33.252660][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.254215][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.258457][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.259902][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.261514][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.267441][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.274419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.276429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.279178][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.281358][ T4326] device veth0_macvtap entered promiscuous mode [ 33.283575][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.285031][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.289645][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.291238][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.292385][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.296552][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.298324][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.309837][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.312509][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.314158][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.318907][ T4335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.320298][ T4335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.321522][ T4335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.322832][ T4335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.326917][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.328418][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.330445][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.332249][ T4326] device veth1_macvtap entered promiscuous mode [ 33.334681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.336733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.338285][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.344168][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.345670][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.348677][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.358584][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.360017][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.361323][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.362587][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.373776][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.376734][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.378199][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.379849][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.381938][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.389042][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.390624][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.392143][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.393595][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.396827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.398404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.400525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.402076][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.408190][ T4337] device veth0_vlan entered promiscuous mode [ 33.411363][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.413072][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.414459][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.416849][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.418888][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.423982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.425740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.431462][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.432803][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.434153][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.437116][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.440426][ T4337] device veth1_vlan entered promiscuous mode [ 33.447467][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.448954][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.450450][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.452526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.453888][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.463873][ T4328] device veth0_vlan entered promiscuous mode [ 33.473679][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.475012][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.477489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.478897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.490143][ T4328] device veth1_vlan entered promiscuous mode [ 33.497712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.499347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.500795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.502330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.508124][ T4337] device veth0_macvtap entered promiscuous mode [ 33.517146][ T4337] device veth1_macvtap entered promiscuous mode [ 33.524192][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.526018][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.528828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.530361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.531645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.539944][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.541478][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.545799][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.547412][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.548888][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.550393][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.551748][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.553422][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.559314][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.561963][ T4328] device veth0_macvtap entered promiscuous mode [ 33.564407][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.566017][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.567030][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.568662][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.570096][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.571587][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.573971][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.576556][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.577955][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.582004][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.583622][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.585084][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.586836][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.588178][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.589732][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.591750][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.602194][ T4337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.603575][ T4337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.604891][ T4337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.606663][ T4337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.610270][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.611808][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.614637][ T4328] device veth1_macvtap entered promiscuous mode [ 33.620425][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.621661][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.622359][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.624333][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.626999][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.627064][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.628799][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.629827][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.631328][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.633963][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.640535][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.642148][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.644483][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.647990][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.649535][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.651020][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.652441][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.653960][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.674301][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.675808][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.677605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.691496][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.692762][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.694082][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.707834][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.709473][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.710924][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.712776][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.714255][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.716965][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.718350][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.719908][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.722477][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.724980][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.726845][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.728254][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.729611][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.755074][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.756565][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.774364][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.776025][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.777553][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.812397][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.813758][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.814937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.124229][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.126071][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.127374][ T4411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.128779][ T4411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.164820][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.168709][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.212230][ T27] audit: type=1326 audit(34.200:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577b68 code=0x7ffc0000 [ 34.218492][ T27] audit: type=1326 audit(34.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577b68 code=0x7ffc0000 [ 34.221989][ T27] audit: type=1326 audit(34.200:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577b68 code=0x7ffc0000 [ 34.248279][ T27] audit: type=1326 audit(34.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffab55aa2c code=0x7ffc0000 [ 34.254028][ T27] audit: type=1326 audit(34.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffab57920c code=0x7ffc0000 [ 34.262044][ T27] audit: type=1326 audit(34.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab577b68 code=0x7ffc0000 [ 34.267790][ T27] audit: type=1326 audit(34.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffab57920c code=0x7ffc0000 [ 34.274736][ T27] audit: type=1326 audit(34.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffab55aa2c code=0x7ffc0000 [ 34.283900][ T27] audit: type=1326 audit(34.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577b68 code=0x7ffc0000 [ 34.289703][ T27] audit: type=1326 audit(34.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.3" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577b68 code=0x7ffc0000 [ 34.650536][ T4339] Bluetooth: hci0: command 0x041b tx timeout [ 34.650585][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 34.651747][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 34.652749][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 34.735173][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 35.786687][ T4444] Zero length message leads to an empty skb [ 36.496630][ T4460] netlink: 'syz.4.15': attribute type 10 has an invalid length. [ 36.526216][ T4460] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.528587][ T4460] bond0: (slave team0): Enslaving as an active interface with an up link [ 36.591050][ T4463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.592692][ T4463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.715360][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 36.717119][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 36.718317][ T4333] Bluetooth: hci1: command 0x040f tx timeout [ 36.719361][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 36.795700][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 37.230040][ T4471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19'. [ 37.506434][ T4479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 38.883821][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 38.895748][ T4502] device batadv0 entered promiscuous mode [ 38.896946][ T4502] device macsec1 entered promiscuous mode [ 38.901080][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 38.901100][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 38.903024][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 38.903947][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 38.904991][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 38.920464][ T4502] device batadv0 left promiscuous mode [ 39.328439][ T4511] binder: 4506:4511 tried to acquire reference to desc 0, got 1 instead [ 39.333199][ T4511] binder: 4506:4511 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.335370][ T4511] binder: 4511 RLIMIT_NICE not set [ 39.336317][ T4511] binder: 4511 RLIMIT_NICE not set [ 39.346292][ T4511] binder: 4506:4511 ioctl c0306201 0 returned -14 [ 39.669387][ T4514] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 39.715670][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.718473][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.917024][ T4523] binder: 4515:4523 tried to acquire reference to desc 0, got 1 instead [ 40.184879][ T4524] xt_hashlimit: size too large, truncated to 1048576 [ 40.207208][ T4379] binder: release 4506:4511 transaction 5 in, still active [ 40.235338][ T4379] binder: send failed reply for transaction 5 to 4506:4511 [ 40.250321][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 40.252859][ T4379] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.560728][ T4378] binder: send failed reply for transaction 10 to 4515:4523 [ 40.561953][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 40.562837][ T4378] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.687038][ T4537] netlink: 64 bytes leftover after parsing attributes in process `syz.2.34'. [ 41.675133][ C1] sched: RT throttling activated [ 41.683534][ T4555] input: syz1 as /devices/virtual/input/input2 [ 44.348837][ T4576] ======================================================= [ 44.348837][ T4576] WARNING: The mand mount option has been deprecated and [ 44.348837][ T4576] and is ignored by this kernel. Remove the mand [ 44.348837][ T4576] option from the mount to silence this warning. [ 44.348837][ T4576] ======================================================= [ 44.524692][ T4579] binder: 4574:4579 tried to acquire reference to desc 0, got 1 instead [ 44.745891][ T4589] hub 8-0:1.0: USB hub found [ 44.747381][ T4589] hub 8-0:1.0: 8 ports detected [ 45.145713][ T7] binder: send failed reply for transaction 15 to 4574:4579 [ 45.146996][ T7] binder: undelivered TRANSACTION_COMPLETE [ 45.147880][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.624919][ T4602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.54'. [ 45.629574][ T4604] netlink: 'syz.1.52': attribute type 9 has an invalid length. [ 45.630921][ T4604] netlink: 7 bytes leftover after parsing attributes in process `syz.1.52'. [ 47.757154][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 47.759935][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 47.765944][ T4667] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.767448][ T4667] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.768693][ T4667] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.770002][ T4667] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.774203][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 47.776388][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 49.110874][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 49.112487][ T4683] netlink: 48 bytes leftover after parsing attributes in process `syz.3.80'. [ 49.346407][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 49.351170][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 49.359500][ T4703] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.360981][ T4703] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.362361][ T4703] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.363855][ T4703] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.462817][ T4708] netlink: 'syz.0.90': attribute type 3 has an invalid length. [ 50.112025][ T4737] device xfrm0 entered promiscuous mode [ 52.083506][ T4780] syz.2.115 uses obsolete (PF_INET,SOCK_PACKET) [ 52.094301][ T4782] netlink: 'syz.4.116': attribute type 3 has an invalid length. [ 52.096872][ T4782] __nla_validate_parse: 4 callbacks suppressed [ 52.096893][ T4782] netlink: 132 bytes leftover after parsing attributes in process `syz.4.116'. [ 53.057433][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.059188][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.453183][ T4817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.454815][ T4817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.494994][ T4821] capability: warning: `syz.4.130' uses deprecated v2 capabilities in a way that may be insecure [ 53.624904][ T4831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.135'. [ 53.766037][ T4336] Bluetooth: hci1: command 0x0406 tx timeout [ 54.117009][ T4846] Bluetooth: MGMT ver 1.22 [ 54.141241][ T4848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.142897][ T4848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.117811][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 55.126862][ T4875] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.128423][ T4875] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.129747][ T4875] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.131147][ T4875] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.135086][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 55.216917][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.218700][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.777585][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 55.899053][ T4909] CUSE: info not properly terminated [ 55.920616][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 55.923755][ T4911] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.925393][ T4911] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.926765][ T4911] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.928018][ T4911] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.932724][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 56.165213][ T4924] netlink: 'syz.1.168': attribute type 3 has an invalid length. [ 56.166563][ T4924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.168'. [ 56.215486][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 56.216934][ T4939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 58.076484][ T4968] process 'syz.3.181' launched './file0' with NULL argv: empty string added [ 59.502454][ T5014] __nla_validate_parse: 2 callbacks suppressed [ 59.502463][ T5014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 59.614677][ T5012] tipc: Enabling of bearer rejected, failed to enable media [ 59.713624][ T5034] netlink: 64 bytes leftover after parsing attributes in process `syz.4.204'. [ 59.782840][ T5038] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 59.784059][ T5038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.798425][ T5038] vhci_hcd vhci_hcd.0: Device attached [ 59.810087][ T5039] vhci_hcd: connection closed [ 59.811269][ T4530] vhci_hcd: stop threads [ 59.813190][ T4530] vhci_hcd: release socket [ 59.813919][ T4530] vhci_hcd: disconnect device [ 59.821576][ T5044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.829323][ T5044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.799850][ T5063] device syzkaller1 entered promiscuous mode [ 60.818658][ T5065] device syzkaller0 entered promiscuous mode [ 60.821944][ T5070] netlink: 64 bytes leftover after parsing attributes in process `syz.0.217'. [ 60.841709][ T5065] tipc: Started in network mode [ 60.842463][ T5065] tipc: Node identity ee3502e1ed2b, cluster identity 4711 [ 60.843741][ T5065] tipc: Enabled bearer , priority 0 [ 60.909538][ T5058] tipc: Resetting bearer [ 60.956237][ T5058] tipc: Disabling bearer [ 61.000179][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.001603][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.671419][ T5109] netlink: 64 bytes leftover after parsing attributes in process `syz.2.230'. [ 61.811041][ T5117] vxcan0: tx address claim with different name [ 62.208111][ T5124] device syzkaller0 entered promiscuous mode [ 62.219721][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.233829][ T5124] tipc: Started in network mode [ 62.234628][ T5124] tipc: Node identity a2da85d2b828, cluster identity 4711 [ 62.236882][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.241336][ T5124] tipc: Enabled bearer , priority 0 [ 62.243775][ T5122] tipc: Resetting bearer [ 62.287977][ T5122] tipc: Disabling bearer [ 62.427881][ T5142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.243'. [ 62.592297][ T5152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.593794][ T5152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.834550][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 62.859260][ T5161] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 62.861459][ T5161] bond1: (slave gre1): Error -95 calling set_mac_address [ 62.885195][ T4482] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.978466][ T5174] netlink: 64 bytes leftover after parsing attributes in process `syz.3.255'. [ 63.018540][ T5176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.256'. [ 63.069299][ T4482] usb 1-1: config 127 has an invalid interface number: 138 but max is 0 [ 63.070797][ T4482] usb 1-1: config 127 has no interface number 0 [ 63.072035][ T4482] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 63.073553][ T4482] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 63.093692][ T4482] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 63.095082][ T4482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.096724][ T4482] usb 1-1: Product: syz [ 63.097389][ T4482] usb 1-1: Manufacturer: syz [ 63.098322][ T4482] usb 1-1: SerialNumber: syz [ 63.469722][ T5153] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.471099][ T5153] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.920983][ T4482] usb 1-1: probing VID:PID(0424:012C) [ 63.923378][ T4482] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0F [ 63.924487][ T4482] usb 1-1: vub300 testing BULK OUT EndPoint(1) 09 [ 63.926533][ T4482] usb 1-1: vub300 testing BULK OUT EndPoint(2) 0C [ 63.927728][ T4482] usb 1-1: ignoring unexpected bulk_out endpoint [ 63.928688][ T4482] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 63.930516][ T4482] vub300: probe of 1-1:127.138 failed with error -22 [ 63.939134][ T4482] usb 1-1: USB disconnect, device number 2 [ 64.171967][ T5213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.173694][ T5213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.426209][ T5218] netlink: 64 bytes leftover after parsing attributes in process `syz.4.268'. [ 64.487388][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488481][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.571038][ T5235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 64.787970][ T5245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.277'. [ 65.126572][ T5248] netlink: 64 bytes leftover after parsing attributes in process `syz.0.280'. [ 65.140901][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 65.160872][ T5250] bridge1: port 1(veth3) entered blocking state [ 65.162140][ T5250] bridge1: port 1(veth3) entered disabled state [ 65.163656][ T5250] device veth3 entered promiscuous mode [ 65.179148][ T5250] bridge1: port 2(veth0_to_bond) entered blocking state [ 65.180614][ T5250] bridge1: port 2(veth0_to_bond) entered disabled state [ 65.182273][ T5250] device veth0_to_bond entered promiscuous mode [ 65.183817][ T5250] bridge1: port 2(veth0_to_bond) entered blocking state [ 65.185199][ T5250] bridge1: port 2(veth0_to_bond) entered forwarding state [ 65.248720][ T5263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.251010][ T5263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.876978][ T5281] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.920665][ T5285] device syzkaller1 entered promiscuous mode [ 66.090668][ T5294] device syzkaller0 entered promiscuous mode [ 66.093749][ T5294] tipc: Started in network mode [ 66.094745][ T5294] tipc: Node identity 66b0a224e55e, cluster identity 4711 [ 66.096722][ T5294] tipc: Enabled bearer , priority 0 [ 66.098603][ T5293] tipc: Resetting bearer [ 66.497175][ T5293] tipc: Disabling bearer [ 66.570860][ T5303] netlink: 'syz.4.304': attribute type 3 has an invalid length. [ 66.572200][ T5303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.304'. [ 66.605458][ T5306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.607109][ T5306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.838617][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.841237][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.125182][ T14] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 68.308800][ T14] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 68.310303][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.311479][ T14] usb 1-1: Product: syz [ 68.312136][ T14] usb 1-1: Manufacturer: syz [ 68.313151][ T14] usb 1-1: SerialNumber: syz [ 68.460881][ T5378] netlink: 'syz.3.335': attribute type 3 has an invalid length. [ 68.462690][ T5378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.335'. [ 68.556733][ T14] usb 1-1: MIDIStreaming interface descriptor not found [ 68.566264][ T14] usb 1-1: USB disconnect, device number 3 [ 69.027291][ T5385] udevd[5385]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.128844][ T5391] netlink: 64 bytes leftover after parsing attributes in process `syz.1.338'. [ 69.597199][ T1516] cfg80211: failed to load regulatory.db [ 69.630501][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.632078][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.072669][ T5412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.093401][ T5412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.150234][ T5414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.154949][ T5414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.659297][ T5426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.669192][ T5426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.677224][ T5428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.678671][ T5428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.803635][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.805104][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.872041][ T5426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.873629][ T5426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.887314][ T5441] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 108, id = 0 [ 70.953257][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 70.954855][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 71.004872][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 71.006770][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 71.575646][ T5473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.370'. [ 71.714307][ T5480] device syzkaller0 entered promiscuous mode [ 71.967832][ T5495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.969455][ T5495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.088694][ T5492] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 72.171791][ T5501] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 72.238674][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 72.525518][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 72.528645][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 72.533259][ T5537] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.534747][ T5537] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.536156][ T5537] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.537392][ T5537] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.541974][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 72.545800][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 73.090235][ T1619] block nbd0: Attempted send on invalid socket [ 73.377730][ T1619] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.385726][ T51] block nbd0: Attempted send on invalid socket [ 73.386930][ T51] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.388744][ T5572] Mount JFS Failure: -5 [ 73.462096][ T4334] Bluetooth: hci3: Malformed Event: 0x02 [ 75.521941][ T5632] netlink: 'syz.2.431': attribute type 3 has an invalid length. [ 76.003989][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.009487][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.407917][ T5662] __nla_validate_parse: 3 callbacks suppressed [ 76.407930][ T5662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.439'. [ 76.546417][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.547851][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.755273][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.916069][ T5680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.918496][ T5680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.006332][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.008191][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.011300][ T22] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.012793][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.014086][ T22] usb 1-1: SerialNumber: syz [ 77.225992][ T22] usb 1-1: 0:2 : does not exist [ 77.226833][ T22] usb 1-1: unit 48 not found! [ 77.244042][ T22] usb 1-1: USB disconnect, device number 4 [ 77.490059][ T5688] binder: 5684:5688 tried to acquire reference to desc 0, got 1 instead [ 77.493338][ T5688] binder: 5684:5688 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 77.495452][ T5688] binder: 5688 RLIMIT_NICE not set [ 77.496272][ T5688] binder: 5688 RLIMIT_NICE not set [ 77.497996][ T5688] binder: 5688 RLIMIT_NICE not set [ 77.499007][ T5688] binder_alloc: 5684: binder_alloc_buf, no vma [ 77.500117][ T5688] binder: cannot allocate buffer: vma cleared, target dead or dying [ 77.500208][ T5688] binder: 5684:5688 transaction reply to 5684:5688 failed 27/29189/-3, size 0-0 line 3230 [ 77.502882][ T5688] binder: send failed reply for transaction 26 to 5684:5688 [ 77.703557][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.761014][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.762544][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.112639][ T5700] netlink: 'syz.1.452': attribute type 3 has an invalid length. [ 78.113945][ T5700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.452'. [ 78.149924][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 78.150888][ T4374] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.174975][ T22] binder: undelivered TRANSACTION_ERROR: 29190 [ 78.325186][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.867805][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.869710][ T14] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.871147][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.873837][ T14] usb 1-1: config 0 descriptor?? [ 78.899088][ T5716] netlink: 'syz.3.457': attribute type 12 has an invalid length. [ 78.900391][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 78.901779][ T5716] bond0: option primary_reselect: invalid value (4) [ 78.929438][ T5718] device syzkaller0 entered promiscuous mode [ 78.933093][ T5718] tipc: Enabled bearer , priority 0 [ 78.936118][ T5717] tipc: Resetting bearer [ 78.966745][ T5717] tipc: Disabling bearer [ 79.082479][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 79.083674][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 79.086433][ T14] usb 1-1: USB disconnect, device number 5 [ 79.138709][ T5734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.141068][ T5734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.279631][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.280915][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.925242][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 79.972678][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.991942][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.359202][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.361152][ T14] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 80.363279][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.366287][ T14] usb 1-1: config 0 descriptor?? [ 80.574913][ T5731] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.576675][ T5731] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.578170][ T5731] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.579744][ T5731] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.905186][ T5731] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.906865][ T5731] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.908276][ T5731] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.909603][ T5731] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.964054][ T5755] device syzkaller0 entered promiscuous mode [ 81.242077][ T5754] tipc: Started in network mode [ 81.242947][ T5754] tipc: Node identity 2ab6adf3b52b, cluster identity 4711 [ 81.244196][ T5754] tipc: Enabled bearer , priority 0 [ 81.244332][ T14] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 81.247170][ T14] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input3 [ 81.252914][ T5698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.255901][ T5698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.265487][ T5752] tipc: Resetting bearer [ 81.288971][ C0] ================================================================================ [ 81.290478][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 81.291796][ C0] index 261 is out of range for type 'const int[34]' [ 81.292871][ C0] CPU: 0 PID: 3937 Comm: udevd Not tainted syzkaller #0 [ 81.293942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 81.295483][ C0] Call trace: [ 81.295980][ C0] dump_backtrace+0x1c4/0x1f0 [ 81.296667][ C0] show_stack+0x2c/0x3c [ 81.297283][ C0] __dump_stack+0x30/0x40 [ 81.297963][ C0] dump_stack_lvl+0xf4/0x15c [ 81.298626][ C0] dump_stack+0x1c/0x5c [ 81.299288][ C0] ubsan_epilogue+0x14/0x48 [ 81.300026][ C0] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 81.300954][ C0] aiptek_irq+0x19a0/0x2360 [ 81.301614][ C0] __usb_hcd_giveback_urb+0x2ec/0x50c [ 81.302458][ C0] usb_hcd_giveback_urb+0x100/0x3a4 [ 81.303245][ C0] dummy_timer+0x7c8/0x2840 [ 81.303997][ C0] __hrtimer_run_queues+0x444/0xc58 [ 81.304847][ C0] hrtimer_run_softirq+0x164/0x408 [ 81.305636][ C0] handle_softirqs+0x318/0xc90 [ 81.306404][ C0] __do_softirq+0x14/0x20 [ 81.307066][ C0] ____do_softirq+0x14/0x20 [ 81.307747][ C0] call_on_irq_stack+0x30/0x48 [ 81.308508][ C0] do_softirq_own_stack+0x20/0x2c [ 81.309284][ C0] __irq_exit_rcu+0x23c/0x430 [ 81.310110][ C0] irq_exit_rcu+0x14/0x84 [ 81.310814][ C0] el1_interrupt+0x38/0x54 [ 81.311477][ C0] el1h_64_irq_handler+0x18/0x24 [ 81.312309][ C0] el1h_64_irq+0x64/0x68 [ 81.313034][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 81.313911][ C0] debug_check_no_obj_freed+0x39c/0x454 [ 81.314810][ C0] slab_free_freelist_hook+0x104/0x1e8 [ 81.315686][ C0] kmem_cache_free+0x118/0x318 [ 81.316445][ C0] putname+0x114/0x174 [ 81.317106][ C0] __arm64_sys_newfstatat+0x158/0x1f4 [ 81.317917][ C0] invoke_syscall+0x98/0x290 [ 81.318685][ C0] el0_svc_common+0x13c/0x258 [ 81.319410][ C0] do_el0_svc+0x5c/0x134 [ 81.320063][ C0] el0_svc+0x58/0x128 [ 81.320649][ C0] el0t_64_sync_handler+0x84/0xf0 [ 81.321379][ C0] el0t_64_sync+0x18c/0x190 [ 81.322083][ C0] ================================================================================ [ 81.323442][ C0] ================================================================== [ 81.324709][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x19bc/0x2360 [ 81.325876][ C0] Read of size 4 at addr ffff800013128f54 by task udevd/3937 [ 81.326988][ C0] [ 81.327358][ C0] CPU: 0 PID: 3937 Comm: udevd Not tainted syzkaller #0 [ 81.328421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 81.329972][ C0] Call trace: [ 81.330453][ C0] dump_backtrace+0x1c4/0x1f0 [ 81.331230][ C0] show_stack+0x2c/0x3c [ 81.331897][ C0] __dump_stack+0x30/0x40 [ 81.332595][ C0] dump_stack_lvl+0xf4/0x15c [ 81.333324][ C0] print_address_description+0x88/0x218 [ 81.334210][ C0] print_report+0x50/0x68 [ 81.334858][ C0] kasan_report+0xa8/0xfc [ 81.335545][ C0] __asan_report_load4_noabort+0x2c/0x38 [ 81.336431][ C0] aiptek_irq+0x19bc/0x2360 [ 81.337124][ C0] __usb_hcd_giveback_urb+0x2ec/0x50c [ 81.337963][ C0] usb_hcd_giveback_urb+0x100/0x3a4 [ 81.338734][ C0] dummy_timer+0x7c8/0x2840 [ 81.339506][ C0] __hrtimer_run_queues+0x444/0xc58 [ 81.340309][ C0] hrtimer_run_softirq+0x164/0x408 [ 81.341185][ C0] handle_softirqs+0x318/0xc90 [ 81.341904][ C0] __do_softirq+0x14/0x20 [ 81.342542][ C0] ____do_softirq+0x14/0x20 [ 81.343230][ C0] call_on_irq_stack+0x30/0x48 [ 81.343982][ C0] do_softirq_own_stack+0x20/0x2c [ 81.344817][ C0] __irq_exit_rcu+0x23c/0x430 [ 81.345555][ C0] irq_exit_rcu+0x14/0x84 [ 81.346239][ C0] el1_interrupt+0x38/0x54 [ 81.346947][ C0] el1h_64_irq_handler+0x18/0x24 [ 81.347729][ C0] el1h_64_irq+0x64/0x68 [ 81.348388][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 81.349241][ C0] debug_check_no_obj_freed+0x39c/0x454 [ 81.350094][ C0] slab_free_freelist_hook+0x104/0x1e8 [ 81.350959][ C0] kmem_cache_free+0x118/0x318 [ 81.351720][ C0] putname+0x114/0x174 [ 81.352332][ C0] __arm64_sys_newfstatat+0x158/0x1f4 [ 81.353209][ C0] invoke_syscall+0x98/0x290 [ 81.353933][ C0] el0_svc_common+0x13c/0x258 [ 81.354672][ C0] do_el0_svc+0x5c/0x134 [ 81.355352][ C0] el0_svc+0x58/0x128 [ 81.355979][ C0] el0t_64_sync_handler+0x84/0xf0 [ 81.356788][ C0] el0t_64_sync+0x18c/0x190 [ 81.357511][ C0] [ 81.357886][ C0] The buggy address belongs to the variable: [ 81.358753][ C0] .str.20+0x14/0x20 [ 81.359367][ C0] [ 81.359694][ C0] The buggy address belongs to a 0-page vmalloc region starting at 0xffff800011c40000 allocated at map_kernel+0x110/0x360 [ 81.361683][ C0] The buggy address belongs to the physical page: [ 81.362632][ C0] page:0000000038c8a7c2 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20bf28 [ 81.364394][ C0] flags: 0x5ffc00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 81.365656][ C0] raw: 05ffc00000001000 fffffc00072fca08 fffffc00072fca08 0000000000000000 [ 81.366923][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 81.368175][ C0] page dumped because: kasan: bad access detected [ 81.369215][ C0] [ 81.369561][ C0] Memory state around the buggy address: [ 81.370429][ C0] ffff800013128e00: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 06 f9 f9 f9 [ 81.371667][ C0] ffff800013128e80: f9 f9 f9 f9 00 00 03 f9 f9 f9 f9 f9 00 00 00 00 [ 81.372915][ C0] >ffff800013128f00: 00 03 f9 f9 f9 f9 f9 f9 00 07 f9 f9 00 00 00 00 [ 81.374185][ C0] ^ [ 81.375243][ C0] ffff800013128f80: 00 00 06 f9 f9 f9 f9 f9 00 05 f9 f9 00 00 00 00 [ 81.376504][ C0] ffff800013129000: 00 00 04 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 81.377735][ C0] ================================================================== [ 81.378912][ C0] Disabling lock debugging due to kernel taint [ 81.379920][ C0] ================================================================================ [ 81.381343][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 81.382708][ C0] index 262 is out of range for type 'const int[34]' [ 81.383717][ C0] CPU: 0 PID: 3937 Comm: udevd Tainted: G B syzkaller #0 [ 81.385076][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 81.386529][ C0] Call trace: [ 81.386996][ C0] dump_backtrace+0x1c4/0x1f0 [ 81.387747][ C0] show_stack+0x2c/0x3c [ 81.388355][ C0] __dump_stack+0x30/0x40 [ 81.389068][ C0] dump_stack_lvl+0xf4/0x15c [ 81.389857][ C0] dump_stack+0x1c/0x5c [ 81.390541][ C0] ubsan_epilogue+0x14/0x48 [ 81.391205][ C0] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 81.392060][ C0] aiptek_irq+0x186c/0x2360 [ 81.392781][ C0] __usb_hcd_giveback_urb+0x2ec/0x50c [ 81.393619][ C0] usb_hcd_giveback_urb+0x100/0x3a4 [ 81.394453][ C0] dummy_timer+0x7c8/0x2840 [ 81.395172][ C0] __hrtimer_run_queues+0x444/0xc58 [ 81.396052][ C0] hrtimer_run_softirq+0x164/0x408 [ 81.396837][ C0] handle_softirqs+0x318/0xc90 [ 81.397599][ C0] __do_softirq+0x14/0x20 [ 81.398268][ C0] ____do_softirq+0x14/0x20 [ 81.398911][ C0] call_on_irq_stack+0x30/0x48 [ 81.399649][ C0] do_softirq_own_stack+0x20/0x2c [ 81.400455][ C0] __irq_exit_rcu+0x23c/0x430 [ 81.401223][ C0] irq_exit_rcu+0x14/0x84 [ 81.401919][ C0] el1_interrupt+0x38/0x54 [ 81.402624][ C0] el1h_64_irq_handler+0x18/0x24 [ 81.403426][ C0] el1h_64_irq+0x64/0x68 [ 81.404094][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 81.404990][ C0] debug_check_no_obj_freed+0x39c/0x454 [ 81.405898][ C0] slab_free_freelist_hook+0x104/0x1e8 [ 81.406735][ C0] kmem_cache_free+0x118/0x318 [ 81.407481][ C0] putname+0x114/0x174 [ 81.408156][ C0] __arm64_sys_newfstatat+0x158/0x1f4 [ 81.408988][ C0] invoke_syscall+0x98/0x290 [ 81.409742][ C0] el0_svc_common+0x13c/0x258 [ 81.410507][ C0] do_el0_svc+0x5c/0x134 [ 81.411183][ C0] el0_svc+0x58/0x128 [ 81.411766][ C0] el0t_64_sync_handler+0x84/0xf0 [ 81.412638][ C0] el0t_64_sync+0x18c/0x190 [ 81.413314][ C0] ================================================================================ [ 81.426538][ T5752] tipc: Disabling bearer [ 81.667212][ T22] usb 1-1: USB disconnect, device number 6 [ 81.667327][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19