last executing test programs: 8.828197638s ago: executing program 1 (id=36): r0 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)=ANY=[@ANYBLOB="03040000", @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250c00000008000300", @ANYRES32=r6, @ANYBLOB="04006e8004002800"], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) 7.785836808s ago: executing program 1 (id=38): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) socket$inet6(0xa, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 7.312769586s ago: executing program 0 (id=41): r0 = socket$inet6(0xa, 0x80001, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x9) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400fe80000000000000000000000000002f0c000280e0fe01009800feff05000340000200003c0003800c0002"], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@delchain={0x24, 0x65, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x5, 0x5}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) 6.342883042s ago: executing program 1 (id=43): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x6, "43cc15050000"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 6.330311353s ago: executing program 2 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5.662730031s ago: executing program 0 (id=45): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1ab981c81b6f58aa2c00d789", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf2511000000180001801400020076657468305f746f5f626f6e64000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561"], 0x1508}}, 0x0) writev(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x5, 0xd, 0x0, &(0x7f0000000100)="4655ac45b1ba52fd850ae2b700", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.043083998s ago: executing program 2 (id=46): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 5.029319148s ago: executing program 3 (id=47): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x191c) 4.889383277s ago: executing program 1 (id=48): r0 = fsopen(&(0x7f0000000280)='virtiofs\x00', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) bind$alg(r2, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000240)) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) 4.131675051s ago: executing program 3 (id=49): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80080) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 4.012862607s ago: executing program 0 (id=50): socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x28100) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000200), &(0x7f00000000c0)=[0x0], 0x0}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) read(r3, &(0x7f0000000380)=""/41, 0x29) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 4.012681547s ago: executing program 4 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 3.111880529s ago: executing program 3 (id=52): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.11032592s ago: executing program 4 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x62048800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) 2.651819087s ago: executing program 1 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75'], 0xa) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) socketpair$unix(0x1, 0xcdfb1e3e5376233e, 0x0, &(0x7f00000002c0)) write$cgroup_devices(r4, &(0x7f0000000340)={'c', ' *:* ', 'rwm\x00'}, 0xa) r5 = syz_open_procfs(r0, &(0x7f0000000080)='net/rt_acct\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r6 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xcc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) socket$nl_generic(0x10, 0x3, 0x10) 2.614520159s ago: executing program 0 (id=54): syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 2.528759894s ago: executing program 3 (id=55): r0 = socket$inet6(0xa, 0x80001, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x9) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400fe80000000000000000000000000002f0c000280e0fe01009800feff05000340000200003c0003800c0002"], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@delchain={0x24, 0x65, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x5, 0x5}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) 1.903349199s ago: executing program 2 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="aa", 0x1}, {0x0}, {0x0}, {&(0x7f0000000180)="88", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {0x0}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {0x0}, {&(0x7f0000000280)="87", 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000640)="11", 0x1}], 0x2}}], 0x4, 0x4000000) sendmmsg$sock(r3, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x10b, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x47f9, 0x4db, 0x0, 0x0, 0x0) 1.872582491s ago: executing program 4 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a000000", @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x400040c0) 1.871626481s ago: executing program 4 (id=59): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x6, "43cc15050000"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 1.061369989s ago: executing program 1 (id=60): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a000000", @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x400040c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r6, &(0x7f0000001240), 0x0, 0x0, 0x3) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 987.667623ms ago: executing program 3 (id=61): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x892, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 986.774143ms ago: executing program 4 (id=62): socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') setuid(0xee01) open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r3], 0x0) 971.044284ms ago: executing program 2 (id=64): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 970.736154ms ago: executing program 0 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 915.831927ms ago: executing program 2 (id=66): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 853.252491ms ago: executing program 3 (id=67): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.105799ms ago: executing program 4 (id=68): sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01032cbd7000fedbdf250000000014"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 178.99µs ago: executing program 0 (id=69): socket$inet_tcp(0x2, 0x1, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) open(0x0, 0x141142, 0xc) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) close(0x3) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x404c0c0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80000) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) sendmsg$nl_route(r0, 0x0, 0x400040c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 85.223137][ T4275] cgroup: Unknown subsys name 'net' [ 85.430968][ T4275] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.757927][ T4275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 86.521091][ T4299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.522627][ T4299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.523863][ T4299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.525755][ T4302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.527349][ T4303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.528552][ T4300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.529173][ T4303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.530352][ T4300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.531277][ T4302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.532098][ T4300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.533428][ T4303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.534341][ T4300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.535366][ T4302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.536440][ T4300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.539559][ T4300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.540986][ T4304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.542565][ T4304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.544112][ T4304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.544394][ T4300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.545456][ T4304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.546496][ T4300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.547651][ T4304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.549577][ T4300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.549705][ T4300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.551645][ T4304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.553289][ T4304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.555208][ T4300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.555302][ T4304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.557602][ T4304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.568593][ T4297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.673982][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 86.681940][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 86.721710][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 86.734731][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.735812][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.737580][ T4289] device bridge_slave_0 entered promiscuous mode [ 86.745787][ T4288] chnl_net:caif_netlink_parms(): no params data found [ 86.747738][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.749192][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.750641][ T4286] device bridge_slave_0 entered promiscuous mode [ 86.752176][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.753360][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.754697][ T4289] device bridge_slave_1 entered promiscuous mode [ 86.763800][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.765014][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.766418][ T4286] device bridge_slave_1 entered promiscuous mode [ 86.793438][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.794881][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.796129][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.797567][ T4288] device bridge_slave_0 entered promiscuous mode [ 86.801990][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.803385][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.804541][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.805950][ T4298] device bridge_slave_0 entered promiscuous mode [ 86.809408][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.810827][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.812077][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.813558][ T4288] device bridge_slave_1 entered promiscuous mode [ 86.815680][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.817159][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 86.825885][ T4286] team0: Port device team_slave_0 added [ 86.826996][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.828128][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.829717][ T4298] device bridge_slave_1 entered promiscuous mode [ 86.839224][ T4286] team0: Port device team_slave_1 added [ 86.846588][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.854714][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.855828][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.859852][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.862929][ T4289] team0: Port device team_slave_0 added [ 86.873318][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.875633][ T4289] team0: Port device team_slave_1 added [ 86.880642][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.881626][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.885364][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.887365][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.888637][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.892532][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.895653][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.905517][ T4288] team0: Port device team_slave_0 added [ 86.908268][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.909596][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.913428][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.916036][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.920012][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.921172][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.922578][ T4287] device bridge_slave_0 entered promiscuous mode [ 86.924641][ T4288] team0: Port device team_slave_1 added [ 86.936315][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.937375][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.939155][ T4287] device bridge_slave_1 entered promiscuous mode [ 86.945741][ T4298] team0: Port device team_slave_0 added [ 86.946890][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.947961][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.952305][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.001788][ T4286] device hsr_slave_0 entered promiscuous mode [ 87.039209][ T4286] device hsr_slave_1 entered promiscuous mode [ 87.081266][ T4298] team0: Port device team_slave_1 added [ 87.083039][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.086866][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.091779][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.092776][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.096415][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.149489][ T4289] device hsr_slave_0 entered promiscuous mode [ 87.198654][ T4289] device hsr_slave_1 entered promiscuous mode [ 87.238398][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.239587][ T4289] Cannot create hsr debugfs directory [ 87.242800][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.243935][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.247997][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.250587][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.251604][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.255451][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.266884][ T4287] team0: Port device team_slave_0 added [ 87.269079][ T4287] team0: Port device team_slave_1 added [ 87.278874][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.280074][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.283884][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.296815][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.297906][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.301928][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.349319][ T4288] device hsr_slave_0 entered promiscuous mode [ 87.388656][ T4288] device hsr_slave_1 entered promiscuous mode [ 87.428411][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.429576][ T4288] Cannot create hsr debugfs directory [ 87.459408][ T4298] device hsr_slave_0 entered promiscuous mode [ 87.508607][ T4298] device hsr_slave_1 entered promiscuous mode [ 87.548499][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.549555][ T4298] Cannot create hsr debugfs directory [ 87.630210][ T4287] device hsr_slave_0 entered promiscuous mode [ 87.668557][ T4287] device hsr_slave_1 entered promiscuous mode [ 87.708468][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.709703][ T4287] Cannot create hsr debugfs directory [ 87.801794][ T4286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.849908][ T4286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.886112][ T4286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.929497][ T4286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.976003][ T4289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.010474][ T4289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.059464][ T4289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.101493][ T4298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.149331][ T4289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.180644][ T4298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.223635][ T4298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.253904][ T4298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.326696][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.331683][ T4288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.366086][ T4288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.413583][ T4288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.459528][ T4288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.501316][ T4287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.549688][ T4287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.558822][ T4304] Bluetooth: hci1: command 0x0409 tx timeout [ 88.559850][ T4304] Bluetooth: hci2: command 0x0409 tx timeout [ 88.592584][ T4287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.635436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.637472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.638704][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 88.639905][ T4299] Bluetooth: hci4: command 0x0409 tx timeout [ 88.640129][ T4304] Bluetooth: hci3: command 0x0409 tx timeout [ 88.641585][ T4287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.682437][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.698870][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.700358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.701868][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.702960][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.704899][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.713116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.714711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.716631][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.717704][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.719921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.736004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.737700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.740144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.741639][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.743135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.744717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.746161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.747579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.751840][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.753504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.774736][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.777549][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.782396][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.791868][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.793290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.796482][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.801131][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.805081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.806545][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.807987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.810018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.811433][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.812638][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.813995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.815551][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.817348][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.818541][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.820199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.821559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.827630][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.836899][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.839439][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.840853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.842229][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.843293][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.853593][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.855037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.856361][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.857477][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.860520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.862435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.864730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.866380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.867988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.870809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.872493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.874060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.875700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.882144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.883458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.884650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.886065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.893095][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.894630][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.899944][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.902481][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.904097][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.905603][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.906981][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.908998][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.910498][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.912033][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.913436][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.916121][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.925392][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.931561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.933216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.934673][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.935765][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.937044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.939487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.940845][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.941906][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.943134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.944734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.946161][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.947219][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.949078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.950469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.953408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.954887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.959218][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.960805][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.962278][ T1600] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.963423][ T1600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.964704][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.967918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.969720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.975804][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.977505][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.987587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.989509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.990864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.992387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.993907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.995405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.996933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.008797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.010989][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.012774][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.014394][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.017481][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.020120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.021679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.037687][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.040749][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.042187][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.043744][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.045638][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.047455][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.055441][ T4286] device veth0_vlan entered promiscuous mode [ 89.062856][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.064645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.066150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.078227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.079680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.082201][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.083609][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.092054][ T4286] device veth1_vlan entered promiscuous mode [ 89.098131][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.100397][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.101868][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.106308][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.107511][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.112927][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.115833][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.146515][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.147978][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.150547][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.152132][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.153719][ T663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.156921][ T4286] device veth0_macvtap entered promiscuous mode [ 89.162705][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.164268][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.166026][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.176256][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.184171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.185787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.187598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.192514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.194589][ T4286] device veth1_macvtap entered promiscuous mode [ 89.202296][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.204705][ T4298] device veth0_vlan entered promiscuous mode [ 89.206781][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.208386][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.209820][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.216146][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.219930][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.221525][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.226199][ T4298] device veth1_vlan entered promiscuous mode [ 89.231552][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.233054][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.234321][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.235474][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.236935][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.240240][ T4286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.241886][ T4286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.243192][ T4286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.244522][ T4286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.253279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.254816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.256202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.259070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.260514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.265045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.266353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.275507][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.277276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.279517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.282228][ T4298] device veth0_macvtap entered promiscuous mode [ 89.284947][ T4298] device veth1_macvtap entered promiscuous mode [ 89.291615][ T4289] device veth0_vlan entered promiscuous mode [ 89.297517][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.302261][ T4289] device veth1_vlan entered promiscuous mode [ 89.314275][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.315953][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.318157][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.326864][ T4289] device veth0_macvtap entered promiscuous mode [ 89.331987][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.333554][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.334969][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.336462][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.337819][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.339793][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.341380][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.343228][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.344845][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.357057][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.359198][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.361235][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.364059][ T4298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.365538][ T4298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.366780][ T4298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.368097][ T4298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.379866][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.381395][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.387567][ T4289] device veth1_macvtap entered promiscuous mode [ 89.400570][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.401774][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.407377][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.412483][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.425122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.426809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.428194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.430476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.442113][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.443805][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.445449][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.447103][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.451271][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.457542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.459600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.461137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.462579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.466691][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.468271][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.469873][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.470485][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.472637][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.473751][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.475811][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.477181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.478635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.480630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.481923][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.483469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.496766][ T4288] device veth0_vlan entered promiscuous mode [ 89.507434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.509770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.511253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.512552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.515097][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.516368][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.517724][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.526035][ T4287] device veth0_vlan entered promiscuous mode [ 89.536191][ T4289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.537637][ T4289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.546085][ T4289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.547552][ T4289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.550418][ T4288] device veth1_vlan entered promiscuous mode [ 89.553677][ T4287] device veth1_vlan entered promiscuous mode [ 89.568652][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.569904][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.590761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.592351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.593740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.595285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.596719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.596960][ T4399] loop1: detected capacity change from 0 to 128 [ 89.600625][ T4399] ext4: Unknown parameter 'hash' [ 89.614281][ T4287] device veth0_macvtap entered promiscuous mode [ 89.616544][ T4287] device veth1_macvtap entered promiscuous mode [ 89.662494][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.665900][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.667465][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.671298][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.672813][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.674392][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.676828][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.681773][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.683409][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.684879][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.686457][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.687974][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.691411][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.693453][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.695724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.697435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.699481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.700771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.702257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.703697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.705539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.709356][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.710589][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.732141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.733717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.735374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.736894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.739722][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.741107][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.742587][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.743825][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.760803][ T4288] device veth0_macvtap entered promiscuous mode [ 89.765439][ T4297] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 89.766921][ T4297] CPU: 1 PID: 4297 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 89.768019][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 89.769418][ T4297] Workqueue: hci4 hci_rx_work [ 89.770124][ T4297] Call trace: [ 89.770652][ T4297] dump_backtrace+0x1c0/0x1ec [ 89.771338][ T4297] show_stack+0x2c/0x3c [ 89.771925][ T4297] __dump_stack+0x30/0x40 [ 89.772540][ T4297] dump_stack_lvl+0xf4/0x15c [ 89.773179][ T4297] dump_stack+0x1c/0x5c [ 89.773790][ T4297] sysfs_create_dir_ns+0x244/0x264 [ 89.774568][ T4297] kobject_add_internal+0x598/0xb08 [ 89.775365][ T4297] kobject_add+0x140/0x20c [ 89.776091][ T4297] device_add+0x3f0/0xf90 [ 89.776752][ T4297] hci_conn_add_sysfs+0xbc/0x1c8 [ 89.777451][ T4297] le_conn_complete_evt+0xcc8/0x1244 [ 89.778223][ T4297] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 89.779066][ T4297] hci_le_meta_evt+0x2c0/0x4a0 [ 89.779728][ T4297] hci_event_packet+0x6b8/0xf18 [ 89.780445][ T4297] hci_rx_work+0x324/0xa80 [ 89.781059][ T4297] process_one_work+0x7f8/0x13a4 [ 89.781750][ T4297] worker_thread+0x8c4/0xfec [ 89.782436][ T4297] kthread+0x250/0x2d8 [ 89.783085][ T4297] ret_from_fork+0x10/0x20 [ 89.789100][ T4297] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.791081][ T4297] Bluetooth: hci4: failed to register connection device [ 89.799427][ T4288] device veth1_macvtap entered promiscuous mode [ 89.803844][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.805330][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.806807][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.808784][ T1600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.810087][ T1600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.818306][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.820997][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.821173][ T4407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.822590][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.825077][ T4407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.825386][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.832533][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.836501][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.844598][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.846243][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.847753][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.851822][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.867750][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.871910][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.873325][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.874907][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.876371][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.877986][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.879956][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.881530][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.883944][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.887125][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.893606][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.903750][ T4288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.905806][ T4288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.907346][ T4288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.911883][ T4288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.916693][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.917359][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.920842][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.922746][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.924223][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.942655][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.943958][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.986752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.011213][ T1600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.012494][ T1600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.013855][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.024460][ T1600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.025611][ T1600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.027187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.262673][ T4421] Zero length message leads to an empty skb [ 90.413719][ T4423] device syzkaller0 entered promiscuous mode [ 90.648618][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 90.649571][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 90.719173][ T4304] Bluetooth: hci3: command 0x041b tx timeout [ 90.728535][ T4304] Bluetooth: hci4: command 0x041b tx timeout [ 90.729504][ T4304] Bluetooth: hci0: command 0x041b tx timeout [ 92.241066][ T4452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 92.718654][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 92.718769][ T4304] Bluetooth: hci2: command 0x040f tx timeout [ 92.862000][ T4297] Bluetooth: hci3: command 0x040f tx timeout [ 92.862022][ T4299] Bluetooth: hci4: command 0x040f tx timeout [ 92.865216][ T4304] Bluetooth: hci0: command 0x040f tx timeout [ 94.448415][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.629888][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.631792][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 94.633709][ T24] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 94.634970][ T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 94.636628][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.637975][ T24] usb 1-1: config 1 has no interface number 1 [ 94.639691][ T24] usb 1-1: too many endpoints for config 1 interface 4 altsetting 81: 231, using maximum allowed: 30 [ 94.641394][ T24] usb 1-1: config 1 interface 4 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 94.643410][ T24] usb 1-1: config 1 interface 4 has no altsetting 0 [ 94.646665][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.647973][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.649218][ T24] usb 1-1: Product: syz [ 94.650176][ T24] usb 1-1: Manufacturer: syz [ 94.650935][ T24] usb 1-1: SerialNumber: syz [ 94.798704][ T4300] Bluetooth: hci2: command 0x0419 tx timeout [ 94.799666][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 94.869379][ T24] usb 1-1: 0:2 : does not exist [ 94.873503][ T24] hub 1-1:1.4: Invalid hub with more than one config or interface [ 94.874663][ T24] hub: probe of 1-1:1.4 failed with error -22 [ 94.877650][ T24] usb 1-1: USB disconnect, device number 2 [ 94.888956][ T4304] Bluetooth: hci0: command 0x0419 tx timeout [ 94.889472][ T4300] Bluetooth: hci3: command 0x0419 tx timeout [ 94.889885][ T4304] Bluetooth: hci4: command 0x0419 tx timeout [ 95.091115][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.638968][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 103.646826][ T4475] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 103.706489][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.713127][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.574701][ T4502] ip6t_srh: unknown srh match flags FF3F [ 104.583800][ T4502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.25'. [ 105.118368][ T3429] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.308393][ T3429] usb 1-1: Using ep0 maxpacket: 16 [ 105.310601][ T3429] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 105.313973][ T3429] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.315516][ T3429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.316802][ T3429] usb 1-1: Product: syz [ 105.317415][ T3429] usb 1-1: Manufacturer: syz [ 105.318149][ T3429] usb 1-1: SerialNumber: syz [ 105.323867][ T3429] usb 1-1: config 0 descriptor?? [ 105.807869][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.825541][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.851276][ T4538] infiniband syz2: set active [ 106.852287][ T4538] infiniband syz2: added veth1_to_team [ 106.874827][ T4538] RDS/IB: syz2: added [ 106.876093][ T4538] smc: adding ib device syz2 with port count 1 [ 106.877215][ T4538] smc: ib device syz2 port 1 has pnetid [ 107.959242][ T111] usb 1-1: USB disconnect, device number 3 [ 108.507855][ T4561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.41'. [ 109.245751][ T4572] netlink: 'syz.2.44': attribute type 4 has an invalid length. [ 109.762329][ T4300] Bluetooth: hci3: command 0x0406 tx timeout [ 111.093077][ T4581] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.45'. [ 111.172872][ T4581] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.45'. [ 111.496685][ T4600] netlink: 'syz.4.51': attribute type 4 has an invalid length. [ 112.188460][ T4610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.191458][ T4610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.319545][ T4300] Bluetooth: hci0: command 0x0406 tx timeout [ 113.091028][ T4626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 114.579539][ T4654] netlink: 'syz.0.65': attribute type 4 has an invalid length. [ 115.284414][ T4651] ================================================================== [ 115.285663][ T4651] BUG: KASAN: use-after-free in dvb_device_open+0xd4/0x388 [ 115.286729][ T4651] Read of size 8 at addr ffff0000ca087818 by task syz.3.67/4651 [ 115.287879][ T4651] [ 115.288234][ T4651] CPU: 1 PID: 4651 Comm: syz.3.67 Not tainted syzkaller #0 [ 115.289347][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 115.290863][ T4651] Call trace: [ 115.291337][ T4651] dump_backtrace+0x1c0/0x1ec [ 115.292028][ T4651] show_stack+0x2c/0x3c [ 115.292593][ T4651] __dump_stack+0x30/0x40 [ 115.293221][ T4651] dump_stack_lvl+0xf4/0x15c [ 115.293887][ T4651] print_address_description+0x88/0x218 [ 115.294763][ T4651] print_report+0x50/0x68 [ 115.295393][ T4651] kasan_report+0xa8/0xfc [ 115.296051][ T4651] __asan_report_load8_noabort+0x2c/0x38 [ 115.296927][ T4651] dvb_device_open+0xd4/0x388 [ 115.297669][ T4651] chrdev_open+0x3d4/0x518 [ 115.298297][ T4651] do_dentry_open+0x72c/0xf98 [ 115.298960][ T4651] vfs_open+0x7c/0x90 [ 115.299528][ T4651] path_openat+0x1f8c/0x26bc [ 115.300271][ T4651] do_filp_open+0x194/0x384 [ 115.300921][ T4651] do_sys_openat2+0x134/0x3f4 [ 115.301607][ T4651] __arm64_sys_openat+0x118/0x14c [ 115.302377][ T4651] invoke_syscall+0x98/0x2b4 [ 115.303067][ T4651] el0_svc_common+0x138/0x258 [ 115.303753][ T4651] do_el0_svc+0x58/0x130 [ 115.304356][ T4651] el0_svc+0x58/0x128 [ 115.304944][ T4651] el0t_64_sync_handler+0x84/0xf0 [ 115.305652][ T4651] el0t_64_sync+0x18c/0x190 [ 115.306366][ T4651] [ 115.306700][ T4651] Allocated by task 1: [ 115.307327][ T4651] kasan_set_track+0x4c/0x80 [ 115.308029][ T4651] kasan_save_alloc_info+0x24/0x30 [ 115.308783][ T4651] __kasan_kmalloc+0xa0/0xb8 [ 115.309494][ T4651] kmalloc_trace+0x7c/0x94 [ 115.310212][ T4651] dvb_register_device+0x1a0/0x17a8 [ 115.310996][ T4651] dvb_register_frontend+0x4c0/0x720 [ 115.311792][ T4651] vidtv_bridge_probe+0x9ac/0xe34 [ 115.312473][ T4651] platform_probe+0x13c/0x1b4 [ 115.313131][ T4651] really_probe+0x39c/0xacc [ 115.313793][ T4651] __driver_probe_device+0x180/0x310 [ 115.314567][ T4651] driver_probe_device+0x78/0x324 [ 115.315279][ T4651] __driver_attach+0x3bc/0x60c [ 115.315988][ T4651] bus_for_each_dev+0x148/0x1d0 [ 115.316677][ T4651] driver_attach+0x4c/0x5c [ 115.317317][ T4651] bus_add_driver+0x2d8/0x554 [ 115.317990][ T4651] driver_register+0x200/0x378 [ 115.318675][ T4651] __platform_driver_register+0x6c/0x80 [ 115.319480][ T4651] vidtv_bridge_init+0x4c/0x8c [ 115.320183][ T4651] do_one_initcall+0x278/0x9e0 [ 115.320867][ T4651] do_initcall_level+0x154/0x214 [ 115.321581][ T4651] do_initcalls+0x58/0xac [ 115.322243][ T4651] do_basic_setup+0x8c/0xa0 [ 115.322896][ T4651] kernel_init_freeable+0x35c/0x4f0 [ 115.323678][ T4651] kernel_init+0x24/0x1d8 [ 115.324319][ T4651] ret_from_fork+0x10/0x20 [ 115.325044][ T4651] [ 115.325379][ T4651] Freed by task 4580: [ 115.325984][ T4651] kasan_set_track+0x4c/0x80 [ 115.326690][ T4651] kasan_save_free_info+0x38/0x5c [ 115.327490][ T4651] ____kasan_slab_free+0x148/0x1b0 [ 115.328236][ T4651] __kasan_slab_free+0x18/0x28 [ 115.328968][ T4651] slab_free_freelist_hook+0x16c/0x1e8 [ 115.329817][ T4651] __kmem_cache_free+0xbc/0x218 [ 115.330594][ T4651] kfree+0xd0/0x1a8 [ 115.331168][ T4651] dvb_device_open+0x2dc/0x388 [ 115.331933][ T4651] chrdev_open+0x3d4/0x518 [ 115.332560][ T4651] do_dentry_open+0x72c/0xf98 [ 115.333262][ T4651] vfs_open+0x7c/0x90 [ 115.333844][ T4651] path_openat+0x1f8c/0x26bc [ 115.334531][ T4651] do_filp_open+0x194/0x384 [ 115.335190][ T4651] do_sys_openat2+0x134/0x3f4 [ 115.335914][ T4651] __arm64_sys_openat+0x118/0x14c [ 115.336687][ T4651] invoke_syscall+0x98/0x2b4 [ 115.337309][ T4651] el0_svc_common+0x138/0x258 [ 115.338029][ T4651] do_el0_svc+0x58/0x130 [ 115.338724][ T4651] el0_svc+0x58/0x128 [ 115.339310][ T4651] el0t_64_sync_handler+0x84/0xf0 [ 115.340148][ T4651] el0t_64_sync+0x18c/0x190 [ 115.340827][ T4651] [ 115.341165][ T4651] The buggy address belongs to the object at ffff0000ca087800 [ 115.341165][ T4651] which belongs to the cache kmalloc-256 of size 256 [ 115.343147][ T4651] The buggy address is located 24 bytes inside of [ 115.343147][ T4651] 256-byte region [ffff0000ca087800, ffff0000ca087900) [ 115.344980][ T4651] [ 115.345343][ T4651] The buggy address belongs to the physical page: [ 115.346359][ T4651] page:00000000fffa661f refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000ca087600 pfn:0x10a086 [ 115.348083][ T4651] head:00000000fffa661f order:1 compound_mapcount:0 compound_pincount:0 [ 115.349337][ T4651] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 115.350462][ T4651] raw: 05ffc00000010200 fffffc00034aca08 fffffc00034ac488 ffff0000c0002480 [ 115.351648][ T4651] raw: ffff0000ca087600 0000000000100007 00000001ffffffff 0000000000000000 [ 115.352899][ T4651] page dumped because: kasan: bad access detected [ 115.353901][ T4651] [ 115.354267][ T4651] Memory state around the buggy address: [ 115.355109][ T4651] ffff0000ca087700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.356208][ T4651] ffff0000ca087780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.357405][ T4651] >ffff0000ca087800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.358605][ T4651] ^ [ 115.359265][ T4651] ffff0000ca087880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.360385][ T4651] ffff0000ca087900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.361533][ T4651] ================================================================== [ 115.503806][ T4651] Disabling lock debugging due to kernel taint [ 115.504909][ T4651] ------------[ cut here ]------------ [ 115.505687][ T4651] refcount_t: addition on 0; use-after-free. [ 115.506817][ T4651] WARNING: CPU: 1 PID: 4651 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 115.508085][ T4651] Modules linked in: [ 115.508672][ T4651] CPU: 1 PID: 4651 Comm: syz.3.67 Tainted: G B syzkaller #0 [ 115.509918][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 115.511354][ T4651] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 115.512484][ T4651] pc : refcount_warn_saturate+0x134/0x1f8 [ 115.513353][ T4651] lr : refcount_warn_saturate+0x134/0x1f8 [ 115.514142][ T4651] sp : ffff8000219075c0 [ 115.514726][ T4651] x29: ffff8000219075c0 x28: ffff0000ccb06a28 x27: dfff800000000000 [ 115.515912][ T4651] x26: ffff0000d3122c00 x25: dfff800000000000 x24: 1fffe00019410f03 [ 115.517093][ T4651] x23: 0000000000000000 x22: ffff0000ca087810 x21: ffff0000d2a84060 [ 115.518164][ T4651] x20: ffff0000ca087810 x19: ffff800017bd9000 x18: ffff800011b8bf60 [ 115.519332][ T4651] x17: 1fffe00033eac97e x16: ffff80000804309c x15: 0000000040000000 [ 115.520521][ T4651] x14: 0000000000000001 x13: 1fffe00033eaf030 x12: 0000000000ff0100 [ 115.521636][ T4651] x11: ff00800008048348 x10: 0000000040000002 x9 : e990bdc4ee3ffe00 [ 115.522807][ T4651] x8 : e990bdc4ee3ffe00 x7 : 0000000000000004 x6 : ffff80000825796c [ 115.523987][ T4651] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 115.525231][ T4651] x2 : ffff800021907160 x1 : 0000000000000000 x0 : ffff800008257a00 [ 115.526364][ T4651] Call trace: [ 115.526870][ T4651] refcount_warn_saturate+0x134/0x1f8 [ 115.527809][ T4651] dvb_device_open+0x328/0x388 [ 115.528544][ T4651] chrdev_open+0x3d4/0x518 [ 115.529161][ T4651] do_dentry_open+0x72c/0xf98 [ 115.529835][ T4651] vfs_open+0x7c/0x90 [ 115.530430][ T4651] path_openat+0x1f8c/0x26bc [ 115.531093][ T4651] do_filp_open+0x194/0x384 [ 115.531717][ T4651] do_sys_openat2+0x134/0x3f4 [ 115.532346][ T4651] __arm64_sys_openat+0x118/0x14c [ 115.533110][ T4651] invoke_syscall+0x98/0x2b4 [ 115.533814][ T4651] el0_svc_common+0x138/0x258 [ 115.534576][ T4651] do_el0_svc+0x58/0x130 [ 115.535201][ T4651] el0_svc+0x58/0x128 [ 115.535775][ T4651] el0t_64_sync_handler+0x84/0xf0 [ 115.536514][ T4651] el0t_64_sync+0x18c/0x190 [ 115.537176][ T4651] irq event stamp: 677 [ 115.537767][ T4651] hardirqs last enabled at (677): [] finish_lock_switch+0xb0/0x1c4 [ 115.539298][ T4651] hardirqs last disabled at (676): [] __schedule+0x298/0x1b0c [ 115.540574][ T4651] softirqs last enabled at (478): [] local_bh_enable+0x10/0x34 [ 115.541918][ T4651] softirqs last disabled at (476): [] local_bh_disable+0x10/0x34 [ 115.543260][ T4651] ---[ end trace 0000000000000000 ]--- [ 115.703327][ T4650] ------------[ cut here ]------------ [ 115.704275][ T4650] refcount_t: underflow; use-after-free. [ 115.708201][ T4650] WARNING: CPU: 1 PID: 4650 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 115.709668][ T4650] Modules linked in: [ 115.710286][ T4650] CPU: 1 PID: 4650 Comm: syz.3.67 Tainted: G B W syzkaller #0 [ 115.711599][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 115.713091][ T4650] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 115.714279][ T4650] pc : refcount_warn_saturate+0x154/0x1f8 [ 115.715115][ T4650] lr : refcount_warn_saturate+0x154/0x1f8 [ 115.715942][ T4650] sp : ffff800021c979b0 [ 115.716593][ T4650] x29: ffff800021c979b0 x28: ffff0000cfdf7318 x27: 1fffe00019960d45 [ 115.717826][ T4650] x26: 00000000ffffb802 x25: ffff0000d2c69800 x24: ffff0000ca087800 [ 115.719060][ T4650] x23: dfff800000000000 x22: ffff0000d2c69b20 x21: 00000000c0000000 [ 115.720238][ T4650] x20: ffff0000ca087810 x19: ffff800017bd9000 x18: ffff800011b8bf60 [ 115.721446][ T4650] x17: 1fffe00033eac97e x16: ffff80000804309c x15: ffff80001520d000 [ 115.722653][ T4650] x14: 0000000000000001 x13: 1fffe0001a411e50 x12: 0000000000000000 [ 115.723755][ T4650] x11: 0000000000000000 x10: ffff60001a411e51 x9 : 7b4fcc6bc7014a00 [ 115.724930][ T4650] x8 : 7b4fcc6bc7014a00 x7 : 0000000000000004 x6 : ffff80000825796c [ 115.726161][ T4650] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008246798 [ 115.727511][ T4650] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 115.728832][ T4650] Call trace: [ 115.729347][ T4650] refcount_warn_saturate+0x154/0x1f8 [ 115.730137][ T4650] dvb_generic_release+0x16c/0x1e0 [ 115.730900][ T4650] dvb_frontend_release+0x114/0x400 [ 115.731679][ T4650] __fput+0x1bc/0x7b8 [ 115.732320][ T4650] ____fput+0x20/0x30 [ 115.732940][ T4650] task_work_run+0x1ec/0x278 [ 115.733585][ T4650] do_notify_resume+0x1fa0/0x2aa4 [ 115.734320][ T4650] el0_svc+0x98/0x128 [ 115.734925][ T4650] el0t_64_sync_handler+0x84/0xf0 [ 115.735676][ T4650] el0t_64_sync+0x18c/0x190 [ 115.736335][ T4650] irq event stamp: 3582 [ 115.736951][ T4650] hardirqs last enabled at (3581): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 115.738498][ T4650] hardirqs last disabled at (3582): [] __schedule+0x298/0x1b0c [ 115.739856][ T4650] softirqs last enabled at (3568): [] local_bh_enable+0x10/0x34 [ 115.741251][ T4650] softirqs last disabled at (3566): [] local_bh_disable+0x10/0x34 [ 115.742672][ T4650] ---[ end trace 0000000000000000 ]---