last executing test programs: 13.622534959s ago: executing program 4 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket(0x25, 0x5, 0x0) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 11.706045986s ago: executing program 4 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='rcu_utilization\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 11.568998138s ago: executing program 2 (id=283): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x28000000, 0x20000) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca249435, 0x0) 11.42893063s ago: executing program 2 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x901f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0xa1ffffff, {0x7, 0x0, 0x0, r6, 0x0, 0xe2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x800) 4.913601051s ago: executing program 4 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x901f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0xe2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x800) 4.912791792s ago: executing program 2 (id=310): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004200), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002100)={0x10, 0x0, r1}, 0x10) 4.857044732s ago: executing program 0 (id=311): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000a00)="b9", 0x1}], 0x1}}], 0x2, 0x0) 4.707321254s ago: executing program 0 (id=313): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="7eeb99b6f78ca44054798fa8d0e99fd50aec", 0x12, 0x85, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) 4.644890755s ago: executing program 2 (id=314): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r9, r8, 0x0, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002aae7000ffdbdf25020000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 4.644515375s ago: executing program 1 (id=315): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000a40)="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", 0x2a1}], 0x1) 4.629392595s ago: executing program 1 (id=316): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 3.807586837s ago: executing program 4 (id=318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000004}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x51, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4048085) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000380)={0x8, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0x6e) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) connect$unix(r7, &(0x7f0000000640)=@file={0x1}, 0x6e) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 3.788266317s ago: executing program 3 (id=319): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.749005008s ago: executing program 0 (id=320): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x41, 0x4) 3.55658827s ago: executing program 0 (id=321): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x130, 0x30, 0x1, 0x0, 0x0, {}, [{0x11c, 0x1, [@m_ct={0xd0, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x8f, 0x6, "1e212409ba9817254b087d8811c7e5a8a227e601bde66b8607e22a1fc8d82691ccd7ff9c3c8fa82dfb97e1a0839ff58f2001c2d8a7bff02dfd8494e7340b3758a532ff5502cccf3f7a5ec2ea351a1f88defa3f8ab4c24b21ed0011f11b3bcb7605dfc139cab8687e182d482f2a9f2e9e499cd808f52873dd6f1045585bb1342f29dd1912404b9cb3b5f595"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000340), 0xff, 0x102) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000700)={0x80000000, 0x0, &(0x7f0000000780)}) socket$kcm(0x10, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008841}, 0x10) tkill(0x0, 0xb) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180298bd29d00000000080b2c00095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) 2.554990854s ago: executing program 1 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002fd00000000000000000000850000007b0000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ed9c739050d0c1445ef879b37299", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.482160125s ago: executing program 0 (id=323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, &(0x7f0000000040), 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x50}}, 0x20040054) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r7], 0x64}}, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r14 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r14, 0x0) accept4(r14, 0x0, 0x0, 0x0) 2.388918007s ago: executing program 1 (id=324): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 2.248145539s ago: executing program 4 (id=325): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="000088a8", 0x4, 0x20044880, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x6, 0x6, @random="2d6e5dcf48e6"}, 0x14) 2.16935303s ago: executing program 4 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x0, 0x0, 0x0) 1.765008875s ago: executing program 3 (id=327): shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) 1.637351847s ago: executing program 3 (id=328): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xf8, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @filter_kind_options=@f_route={{0xa}, {0xb8, 0x2, [@TCA_ROUTE4_ACT={0xb4, 0x6, [@m_mirred={0xb0, 0x9, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x20000000, 0x8}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x2c028814) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.520753059s ago: executing program 2 (id=329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x10020) 1.416769531s ago: executing program 1 (id=330): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000340), 0xff, 0x102) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008841}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) io_submit(0x0, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340), 0x41}]) socket$alg(0x26, 0x5, 0x0) 1.41617647s ago: executing program 3 (id=331): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$6lowpan_enable(r1, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) io_destroy(r2) 1.398652931s ago: executing program 0 (id=332): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x100) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0xf, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x0, 0x0]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0xffffffff, 0x0]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r6, 0x6e2, 0x600, 0x1, 0x0, 0x0) 1.066906465s ago: executing program 2 (id=333): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 168.551278ms ago: executing program 1 (id=334): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x130, 0x30, 0x1, 0x0, 0x0, {}, [{0x11c, 0x1, [@m_ct={0xd0, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x8f, 0x6, "1e212409ba9817254b087d8811c7e5a8a227e601bde66b8607e22a1fc8d82691ccd7ff9c3c8fa82dfb97e1a0839ff58f2001c2d8a7bff02dfd8494e7340b3758a532ff5502cccf3f7a5ec2ea351a1f88defa3f8ab4c24b21ed0011f11b3bcb7605dfc139cab8687e182d482f2a9f2e9e499cd808f52873dd6f1045585bb1342f29dd1912404b9cb3b5f595"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000340), 0xff, 0x102) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000700)={0x80000000, 0x0, &(0x7f0000000780)}) socket$kcm(0x10, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008841}, 0x10) tkill(0x0, 0xb) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) 115.525299ms ago: executing program 3 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20010018}, 0x0) 0s ago: executing program 3 (id=336): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. syzkaller login: [ 34.292004][ T4287] cgroup: Unknown subsys name 'net' [ 34.502145][ T4287] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.815159][ T4287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 35.853297][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.856046][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.858747][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.861163][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.863292][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.865322][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.945351][ T4298] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.948514][ T4298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.950789][ T4298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.953289][ T4298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.955448][ T4298] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.957978][ T4298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.011205][ T4298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.021083][ T4308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.023427][ T4308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.025999][ T4308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.029349][ T4308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.031385][ T4308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.034292][ T4308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.041597][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.044116][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.046550][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.049614][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.051614][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.053395][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 36.080873][ T4312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.087100][ T4312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.089409][ T4312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.091922][ T4312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.094186][ T4312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.096414][ T4312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.121411][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 36.193889][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.195792][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.199771][ T4297] device bridge_slave_0 entered promiscuous mode [ 36.211970][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.213639][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.216821][ T4297] device bridge_slave_1 entered promiscuous mode [ 36.219676][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.221457][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.223750][ T4302] device bridge_slave_0 entered promiscuous mode [ 36.238034][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.239716][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.241894][ T4302] device bridge_slave_1 entered promiscuous mode [ 36.273444][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.286654][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.292842][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.299985][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.354648][ T4297] team0: Port device team_slave_0 added [ 36.360875][ T4302] team0: Port device team_slave_0 added [ 36.364563][ T4302] team0: Port device team_slave_1 added [ 36.367811][ T4297] team0: Port device team_slave_1 added [ 36.371628][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 36.403763][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.405615][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.412444][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.416127][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 36.430627][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.432315][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.438593][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.443934][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.445622][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.451972][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.464397][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.466122][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.472290][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.523518][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.525421][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.527995][ T4305] device bridge_slave_0 entered promiscuous mode [ 36.552837][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.554718][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.557635][ T4305] device bridge_slave_1 entered promiscuous mode [ 36.598612][ T4302] device hsr_slave_0 entered promiscuous mode [ 36.647095][ T4302] device hsr_slave_1 entered promiscuous mode [ 36.738353][ T4297] device hsr_slave_0 entered promiscuous mode [ 36.777177][ T4297] device hsr_slave_1 entered promiscuous mode [ 36.817011][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.819028][ T4297] Cannot create hsr debugfs directory [ 36.871022][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.872797][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.875060][ T4304] device bridge_slave_0 entered promiscuous mode [ 36.880299][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.891326][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.893808][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.895853][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.898724][ T4304] device bridge_slave_1 entered promiscuous mode [ 36.930091][ T4311] chnl_net:caif_netlink_parms(): no params data found [ 36.935142][ T4305] team0: Port device team_slave_0 added [ 36.958273][ T4305] team0: Port device team_slave_1 added [ 36.961906][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.966186][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.017659][ T4304] team0: Port device team_slave_0 added [ 37.034140][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.036075][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.042994][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.047520][ T4304] team0: Port device team_slave_1 added [ 37.049532][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.051235][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.061518][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.078877][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.080807][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.083337][ T4311] device bridge_slave_0 entered promiscuous mode [ 37.108417][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.110242][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.112481][ T4311] device bridge_slave_1 entered promiscuous mode [ 37.136124][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.138155][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.144445][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.148791][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.150646][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.156934][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.179412][ T4311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.218654][ T4305] device hsr_slave_0 entered promiscuous mode [ 37.257140][ T4305] device hsr_slave_1 entered promiscuous mode [ 37.297056][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.299064][ T4305] Cannot create hsr debugfs directory [ 37.309296][ T4311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.378520][ T4304] device hsr_slave_0 entered promiscuous mode [ 37.417128][ T4304] device hsr_slave_1 entered promiscuous mode [ 37.456909][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.458854][ T4304] Cannot create hsr debugfs directory [ 37.462566][ T4311] team0: Port device team_slave_0 added [ 37.479896][ T4311] team0: Port device team_slave_1 added [ 37.518305][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.520239][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.526540][ T4311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.538102][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.539830][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.545806][ T4311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.550161][ T4302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.580295][ T4302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.632144][ T4302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.668550][ T4302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.799549][ T4311] device hsr_slave_0 entered promiscuous mode [ 37.837237][ T4311] device hsr_slave_1 entered promiscuous mode [ 37.896886][ T4311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.898855][ T4311] Cannot create hsr debugfs directory [ 37.922014][ T4297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.947370][ T4308] Bluetooth: hci0: command 0x0409 tx timeout [ 37.972713][ T4297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.010926][ T4297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.036826][ T4308] Bluetooth: hci1: command 0x0409 tx timeout [ 38.070142][ T4297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.106944][ T4312] Bluetooth: hci4: command 0x0409 tx timeout [ 38.107088][ T4308] Bluetooth: hci3: command 0x0409 tx timeout [ 38.108785][ T4312] Bluetooth: hci2: command 0x0409 tx timeout [ 38.185131][ T4305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.218944][ T4305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.284095][ T4305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.328774][ T4305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.404268][ T4304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.429244][ T4304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.470060][ T4304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.538113][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.545542][ T4304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.613638][ T4311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.676497][ T4311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.726564][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.730423][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.732968][ T4311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.774679][ T4311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.822770][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.828979][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.848503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.851134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.853851][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.855708][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.859609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.861908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.864172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.871197][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.881856][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.884555][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.888222][ T1685] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.889882][ T1685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.904674][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.907543][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.909988][ T1685] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.911760][ T1685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.913916][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.916510][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.934815][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.938392][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.940628][ T1685] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.942430][ T1685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.944544][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.959684][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.962566][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.965259][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.968304][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.991917][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.994737][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.997913][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.006490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.010335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.013098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.016041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.019249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.026258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.029017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.047239][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.054827][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.058054][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.069544][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.074034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.076474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.086347][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.094801][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.101674][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.105586][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.120236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.122970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.140684][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.143081][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.146684][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.160990][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.177917][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.180339][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.182714][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.184858][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.200653][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.203072][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.205576][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.210775][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.212582][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.214788][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.222001][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.224556][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.237610][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.239465][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.242008][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.253678][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.259682][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.261546][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.275994][ T4311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.283893][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.286637][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.294457][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.297642][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.317969][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.321042][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.323651][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.326151][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.330507][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.333111][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.335579][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.338499][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.341016][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.343368][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.345739][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.349776][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.354443][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.358792][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.361181][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.363680][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.372486][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.378916][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.382642][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.384776][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.387663][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.389580][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.407691][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.410280][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.412726][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.415136][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.422023][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.434815][ T4311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.439247][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.448772][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.451267][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.462221][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.465914][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.484778][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.493750][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.514766][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.517574][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.519905][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.532423][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.543768][ T4297] device veth0_vlan entered promiscuous mode [ 39.553796][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.556168][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.559102][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.562445][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.564842][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.566647][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.569758][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.572277][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.574863][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.576657][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.580238][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.582914][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.603087][ T4302] device veth0_vlan entered promiscuous mode [ 39.605422][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.609244][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.612419][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.615730][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.623882][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.626429][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.631395][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.633825][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.636282][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.645634][ T4297] device veth1_vlan entered promiscuous mode [ 39.654728][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.658598][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.665979][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.671367][ T4302] device veth1_vlan entered promiscuous mode [ 39.674132][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.678056][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.679908][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.694651][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.697688][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.700783][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.702634][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.709474][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.716227][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.748428][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.750993][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.767628][ T4297] device veth0_macvtap entered promiscuous mode [ 39.771566][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.773944][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.776437][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.780527][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.783037][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.789154][ T4302] device veth0_macvtap entered promiscuous mode [ 39.799399][ T4297] device veth1_macvtap entered promiscuous mode [ 39.806154][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.814336][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.819099][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.821720][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.825880][ T4302] device veth1_macvtap entered promiscuous mode [ 39.853250][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.855347][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.863027][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.865499][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.871582][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.874309][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.877956][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.883654][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.888436][ T4297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.890687][ T4297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.892818][ T4297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.895040][ T4297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.900839][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.903655][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.906162][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.909048][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.912719][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.915240][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.919740][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.921956][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.933255][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.935891][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.941487][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.943698][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.946269][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.951470][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.953485][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.955436][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.958734][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.961310][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.963674][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.970269][ T4311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.973436][ T4305] device veth0_vlan entered promiscuous mode [ 39.985607][ T4304] device veth0_vlan entered promiscuous mode [ 39.993322][ T4302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.995555][ T4302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.001347][ T4302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.003511][ T4302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.015897][ T4305] device veth1_vlan entered promiscuous mode [ 40.028215][ T4312] Bluetooth: hci0: command 0x041b tx timeout [ 40.034042][ T4304] device veth1_vlan entered promiscuous mode [ 40.083642][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.086021][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.089045][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.094793][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.107654][ T4312] Bluetooth: hci1: command 0x041b tx timeout [ 40.124347][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.127719][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.131959][ T4305] device veth0_macvtap entered promiscuous mode [ 40.152857][ T4304] device veth0_macvtap entered promiscuous mode [ 40.167482][ T4305] device veth1_macvtap entered promiscuous mode [ 40.172697][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.175166][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.178147][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.180762][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.187135][ T4312] Bluetooth: hci3: command 0x041b tx timeout [ 40.188689][ T4312] Bluetooth: hci4: command 0x041b tx timeout [ 40.190130][ T4312] Bluetooth: hci2: command 0x041b tx timeout [ 40.201643][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.210309][ T4304] device veth1_macvtap entered promiscuous mode [ 40.217582][ T1685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.219975][ T1685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.222629][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.225200][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.228765][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.231329][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.234932][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.251862][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.254282][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.262026][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.264840][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.289657][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.292329][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.294564][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.297179][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.299679][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.302181][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.305606][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.312422][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.314923][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.317546][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.320077][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.323528][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.325502][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.328981][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.331546][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.334181][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.337155][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.339707][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.358430][ T1685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.360844][ T1685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.369949][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.372678][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.374936][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.378237][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.380696][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.383371][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.387145][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.391444][ T4304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.393834][ T4304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.395889][ T4304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.399666][ T4304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.405001][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.407578][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.410114][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.412703][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.415166][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.423301][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.425729][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.429388][ T4311] device veth0_vlan entered promiscuous mode [ 40.443151][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.445229][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.450606][ T4305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.452742][ T4305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.454884][ T4305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.458274][ T4305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.465830][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.472902][ T4311] device veth1_vlan entered promiscuous mode [ 40.481459][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.483916][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.492342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.494785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.498762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.534810][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.538507][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.554280][ T4311] device veth0_macvtap entered promiscuous mode [ 40.574327][ T4311] device veth1_macvtap entered promiscuous mode [ 40.608607][ T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.610651][ T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.613294][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.615673][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.621853][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.687549][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.690191][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.692537][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.694934][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.707464][ T4376] Injecting memory failure for pfn 0x1210eb at process virtual address 0x20000000 [ 40.711444][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.714004][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.716303][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.719712][ T4376] Memory failure: 0x1210eb: recovery action for dirty LRU page: Recovered [ 40.721976][ T4376] Injecting memory failure for pfn 0x1210ec at process virtual address 0x20001000 [ 40.724121][ T4376] Memory failure: 0x1210ec: recovery action for dirty LRU page: Recovered [ 40.726153][ T4376] Injecting memory failure for pfn 0x1210ed at process virtual address 0x20002000 [ 40.728984][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.732967][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.734925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.738220][ T4376] Memory failure: 0x1210ed: recovery action for dirty LRU page: Recovered [ 40.740313][ T4376] Injecting memory failure for pfn 0x1210ee at process virtual address 0x20003000 [ 40.743068][ T4376] Memory failure: 0x1210ee: recovery action for dirty LRU page: Recovered [ 40.743672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.745125][ T4376] Injecting memory failure for pfn 0x1210ef at process virtual address 0x20004000 [ 40.753028][ T4376] Memory failure: 0x1210ef: recovery action for dirty LRU page: Recovered [ 40.755189][ T4376] Injecting memory failure for pfn 0x1210f0 at process virtual address 0x20005000 [ 40.764875][ T256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.766800][ T256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.777700][ T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.779644][ T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.785623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.788619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.792891][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.795454][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.798982][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.801912][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.804459][ T4376] Memory failure: 0x1210f0: recovery action for dirty LRU page: Recovered [ 40.806599][ T4376] Injecting memory failure for pfn 0x1210f1 at process virtual address 0x20006000 [ 40.809979][ T4376] Memory failure: 0x1210f1: recovery action for dirty LRU page: Recovered [ 40.812244][ T4376] Injecting memory failure for pfn 0x1210f2 at process virtual address 0x20007000 [ 40.814678][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.817814][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.820260][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.822705][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.826136][ T4376] Memory failure: 0x1210f2: recovery action for dirty LRU page: Recovered [ 40.830188][ T4376] Injecting memory failure for pfn 0x1210f3 at process virtual address 0x20008000 [ 40.833689][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.835345][ T4376] Memory failure: 0x1210f3: recovery action for dirty LRU page: Recovered [ 40.847322][ T4376] Injecting memory failure for pfn 0x1210f4 at process virtual address 0x20009000 [ 40.853054][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.855613][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.859062][ T4376] Memory failure: 0x1210f4: recovery action for dirty LRU page: Recovered [ 40.861850][ T4311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.864049][ T4311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.866098][ T4311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.868629][ T4376] Injecting memory failure for pfn 0x1210f5 at process virtual address 0x2000a000 [ 40.871189][ T4376] Memory failure: 0x1210f5: recovery action for dirty LRU page: Recovered [ 40.872404][ T4311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.873495][ T4376] Injecting memory failure for pfn 0x1210f6 at process virtual address 0x2000b000 [ 40.885669][ T4376] Memory failure: 0x1210f6: recovery action for dirty LRU page: Recovered [ 40.891579][ T4376] Injecting memory failure for pfn 0x1210f7 at process virtual address 0x2000c000 [ 40.894049][ T4376] Memory failure: 0x1210f7: recovery action for dirty LRU page: Recovered [ 40.897901][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.899889][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.903055][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.905054][ T4376] Injecting memory failure for pfn 0x1210f8 at process virtual address 0x2000d000 [ 40.915942][ T4376] Memory failure: 0x1210f8: recovery action for dirty LRU page: Recovered [ 40.922451][ T4376] Injecting memory failure for pfn 0x1210f9 at process virtual address 0x2000e000 [ 40.924917][ T4376] Memory failure: 0x1210f9: recovery action for dirty LRU page: Recovered [ 40.947627][ T4376] Injecting memory failure for pfn 0x1210fa at process virtual address 0x2000f000 [ 40.950280][ T4376] Memory failure: 0x1210fa: recovery action for dirty LRU page: Recovered [ 40.973687][ T4376] Injecting memory failure for pfn 0x1210fb at process virtual address 0x20010000 [ 40.984956][ T4376] Memory failure: 0x1210fb: recovery action for dirty LRU page: Recovered [ 41.051720][ T4383] block nbd2: shutting down sockets [ 41.052761][ T1619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.055195][ T1619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.065487][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.143454][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.145517][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.153217][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.179939][ T4391] process 'syz.1.8' launched './file1' with NULL argv: empty string added [ 41.197888][ T4300] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 41.994603][ T4405] loop0: detected capacity change from 0 to 4096 [ 42.002364][ T4405] ntfs3: Unknown parameter './file0' [ 42.206890][ T4300] Bluetooth: hci0: command 0x040f tx timeout [ 42.208598][ T4300] Bluetooth: hci1: command 0x040f tx timeout [ 42.266904][ T4312] Bluetooth: hci2: command 0x040f tx timeout [ 42.267106][ T4300] Bluetooth: hci4: command 0x040f tx timeout [ 42.268699][ T4308] Bluetooth: hci3: command 0x040f tx timeout [ 42.357480][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 42.566255][ T4425] bridge0: port 3(netdevsim0) entered blocking state [ 42.594261][ T4425] bridge0: port 3(netdevsim0) entered disabled state [ 42.602207][ T4416] loop4: detected capacity change from 0 to 4096 [ 42.612370][ T4425] device netdevsim0 entered promiscuous mode [ 42.648177][ T4425] bridge0: port 3(netdevsim0) entered blocking state [ 42.650060][ T4425] bridge0: port 3(netdevsim0) entered forwarding state [ 42.667103][ T4428] overlayfs: unrecognized mount option "verity=require" or missing value [ 42.673183][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 42.785568][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.786039][ T4432] Illegal XDP return value 4294966772 on prog (id 2) dev syz_tun, expect packet loss! [ 42.795574][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.810134][ T4432] Zero length message leads to an empty skb [ 42.811437][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.855391][ T4436] device bridge_slave_0 left promiscuous mode [ 42.876295][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.944710][ T4436] device bridge_slave_1 left promiscuous mode [ 42.946877][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.990415][ T4436] bond0: (slave bond_slave_0): Releasing backup interface [ 43.026355][ T4436] bond0: (slave bond_slave_1): Releasing backup interface [ 43.054966][ T4441] syz.1.25 uses obsolete (PF_INET,SOCK_PACKET) [ 43.104787][ T4436] team0: Port device team_slave_0 removed [ 43.130266][ T4436] team0: Port device team_slave_1 removed [ 43.132353][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.134478][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.142716][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.144877][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.353452][ T4441] device syzkaller1 entered promiscuous mode [ 43.668132][ T4455] device veth1_to_bond entered promiscuous mode [ 43.671314][ T4455] device veth1_to_bond left promiscuous mode [ 44.190459][ T4465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.267287][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 44.347433][ T4300] Bluetooth: hci2: command 0x0419 tx timeout [ 44.349212][ T4300] Bluetooth: hci3: command 0x0419 tx timeout [ 44.350772][ T4300] Bluetooth: hci4: command 0x0419 tx timeout [ 44.708039][ T4465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.743738][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 44.852996][ T4465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.983790][ T4464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 44.985887][ T4464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 44.998662][ T4464] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 45.000931][ T4464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 45.005526][ T4464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 45.012676][ T4464] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 45.046813][ T4464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 45.051940][ T4464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.053731][ T4464] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 45.078684][ T4464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 45.084439][ T4464] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.086088][ T4464] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 45.105749][ T4465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.112653][ T4464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 45.119556][ T4464] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 45.121143][ T4464] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 45.234981][ T4465] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.263646][ T4465] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.294385][ T4465] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.364734][ T4465] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.469778][ T4499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.488871][ T4499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.745413][ T4501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.058015][ T4507] can0: slcan on ttyprintk. [ 46.197164][ T4300] Bluetooth: hci0: command 0x0c1a tx timeout [ 46.797690][ T4505] can0 (unregistered): slcan off ttyprintk. [ 46.835111][ T4518] loop2: detected capacity change from 0 to 32768 [ 46.859151][ T4518] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.51 (4518) [ 46.898816][ T4518] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 46.908523][ T4518] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 46.914278][ T4518] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 46.943797][ T4518] BTRFS info (device loop2): use zstd compression, level 3 [ 46.945661][ T4518] BTRFS info (device loop2): using free space tree [ 46.998081][ T4544] loop3: detected capacity change from 0 to 512 [ 47.066895][ T4312] Bluetooth: hci2: command 0x0c1a tx timeout [ 47.068478][ T4312] Bluetooth: hci1: command 0x0c1a tx timeout [ 47.074232][ T4544] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 47.186922][ T4300] Bluetooth: hci4: command 0x0c1a tx timeout [ 47.188522][ T4300] Bluetooth: hci3: command 0x0c1a tx timeout [ 47.502777][ T4575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.57'. [ 47.512483][ T4518] BTRFS info (device loop2): enabling ssd optimizations [ 48.216404][ T4544] syz.3.55: attempt to access beyond end of device [ 48.216404][ T4544] loop3: rw=524288, sector=3606377190, nr_sectors = 2 limit=512 [ 48.231730][ T4544] syz.3.55: attempt to access beyond end of device [ 48.231730][ T4544] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.248930][ T4544] syz.3.55: attempt to access beyond end of device [ 48.248930][ T4544] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.255929][ T4544] syz.3.55: attempt to access beyond end of device [ 48.255929][ T4544] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.276808][ T4312] Bluetooth: hci0: command 0x0406 tx timeout [ 48.277128][ T4544] syz.3.55: attempt to access beyond end of device [ 48.277128][ T4544] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.281609][ T4544] syz.3.55: attempt to access beyond end of device [ 48.281609][ T4544] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.285031][ T4544] syz.3.55: attempt to access beyond end of device [ 48.285031][ T4544] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.337315][ T4541] syz.3.55: attempt to access beyond end of device [ 48.337315][ T4541] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.351887][ T4541] syz.3.55: attempt to access beyond end of device [ 48.351887][ T4541] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.355985][ T4544] syz.3.55: attempt to access beyond end of device [ 48.355985][ T4544] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 48.451557][ T4566] EXT2-fs (loop3): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1701604449, count = 1 [ 48.490090][ T4566] EXT2-fs (loop3): error: ext2_free_blocks: Freeing blocks not in datazone - block = 29554, count = 1 [ 48.874807][ T4594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.962141][ T4304] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 49.149223][ T4312] Bluetooth: hci1: command 0x0406 tx timeout [ 49.150808][ T4312] Bluetooth: hci2: command 0x0406 tx timeout [ 49.233624][ T4300] Bluetooth: hci3: command 0x0406 tx timeout [ 49.235199][ T4300] Bluetooth: hci4: command 0x0406 tx timeout [ 50.607879][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.610250][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.622801][ T4614] 9pnet_virtio: no channels available for device syz [ 50.830950][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.841126][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.067440][ T4629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 53.256383][ T4658] 9pnet_virtio: no channels available for device syz [ 54.245837][ T4665] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 55.207756][ T4681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.86'. [ 56.676018][ T4599] libceph: connect (1)[c::]:6789 error -101 [ 56.780808][ T4701] ceph: No mds server is up or the cluster is laggy [ 56.790786][ T4599] libceph: mon0 (1)[c::]:6789 connect error [ 59.589256][ T27] audit: type=1326 audit(59.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.106" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75b728 code=0x0 [ 60.343604][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 60.473968][ T4774] loop0: detected capacity change from 0 to 164 [ 61.041438][ T4796] input: syz0 as /devices/virtual/input/input3 [ 61.088371][ T4794] loop2: detected capacity change from 0 to 128 [ 61.136594][ T4794] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 61.153702][ T4794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.866523][ T4801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.356603][ T4812] netlink: 32 bytes leftover after parsing attributes in process `syz.0.134'. [ 63.162413][ T4827] binder: 4826:4827 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 63.268949][ T4832] ax25_connect(): syz.3.143 uses autobind, please contact jreuter@yaina.de [ 63.878641][ T4842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.027301][ T4312] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.029771][ T4807] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 64.038312][ T4846] netlink: 'syz.4.147': attribute type 4 has an invalid length. [ 64.217001][ T4847] netlink: 'syz.4.147': attribute type 4 has an invalid length. [ 64.525494][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.527588][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.990919][ T4861] ALSA: mixer_oss: invalid index 40000 [ 65.088696][ T4808] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 65.745581][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 66.131570][ T4871] netlink: 156 bytes leftover after parsing attributes in process `syz.2.152'. [ 66.216283][ T4300] Bluetooth: hci0: command 0x080f tx timeout [ 68.618464][ T4890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.157'. [ 69.101684][ T4895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.645832][ T22] cfg80211: failed to load regulatory.db [ 70.820632][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 70.844414][ T4940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 71.089477][ T4944] netlink: 216 bytes leftover after parsing attributes in process `syz.1.178'. [ 71.091773][ T4944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.178'. [ 71.097129][ T4599] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.124597][ T4944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 71.282037][ T4300] Bluetooth: hci4: command 0x2021 tx timeout [ 71.386843][ T4599] usb 1-1: Using ep0 maxpacket: 8 [ 71.396929][ T4599] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.399527][ T4599] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.402512][ T4599] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.404920][ T4599] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.427728][ T4599] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.430127][ T4599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.449833][ T4949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.650947][ T4599] usb 1-1: GET_CAPABILITIES returned 0 [ 71.652688][ T4599] usbtmc 1-1:16.0: can't read capabilities [ 71.874532][ T4942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.895086][ T4942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.929517][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.938447][ T4340] usb 1-1: USB disconnect, device number 2 [ 73.794828][ T4978] tipc: Started in network mode [ 73.796445][ T4978] tipc: Node identity e0000001, cluster identity 4711 [ 73.803182][ T4978] tipc: Enabling of bearer rejected, failed to enable media [ 73.933576][ T4981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.952928][ T4981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.012603][ T4982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.772953][ T4996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.781089][ T4996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.441047][ T4997] netlink: 'syz.2.193': attribute type 10 has an invalid length. [ 75.470551][ T4997] device veth0_vlan left promiscuous mode [ 75.475436][ T4997] device veth0_vlan entered promiscuous mode [ 75.480654][ T4997] team0: Device veth0_vlan failed to register rx_handler [ 75.786833][ T4312] Bluetooth: hci4: command 0x0405 tx timeout [ 76.221205][ T5046] device lo entered promiscuous mode [ 76.226523][ T5046] device tunl0 entered promiscuous mode [ 76.230283][ T5046] device gre0 entered promiscuous mode [ 76.240745][ T5046] device gretap0 entered promiscuous mode [ 76.242949][ T5046] device erspan0 entered promiscuous mode [ 76.247004][ T4340] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.251673][ T5046] device ip_vti0 entered promiscuous mode [ 76.256471][ T5046] device ip6_vti0 entered promiscuous mode [ 76.262491][ T5046] device sit0 entered promiscuous mode [ 76.288081][ T5046] device ip6tnl0 entered promiscuous mode [ 76.301330][ T5046] device ip6gre0 entered promiscuous mode [ 76.318091][ T5046] device syz_tun entered promiscuous mode [ 76.319923][ T5046] device ip6gretap0 entered promiscuous mode [ 76.413482][ T5046] device bridge0 entered promiscuous mode [ 76.424614][ T5046] device vcan0 entered promiscuous mode [ 76.429557][ T4340] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 76.432273][ T4340] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.437135][ T4340] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.438235][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.442877][ T4340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.451772][ T4340] usb 1-1: config 0 descriptor?? [ 76.454284][ T5040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.455978][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.465422][ T4340] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 76.494146][ T5046] device bond0 entered promiscuous mode [ 76.503339][ T5046] device bond_slave_0 entered promiscuous mode [ 76.524254][ T5046] device bond_slave_1 entered promiscuous mode [ 76.543662][ T5046] device team0 entered promiscuous mode [ 76.555658][ T5046] device team_slave_0 entered promiscuous mode [ 76.557812][ T5046] device team_slave_1 entered promiscuous mode [ 76.560512][ T5046] device dummy0 entered promiscuous mode [ 76.563058][ T5046] device nlmon0 entered promiscuous mode [ 76.677109][ T5046] device caif0 entered promiscuous mode [ 76.681151][ T5046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.083417][ T5081] tipc: Started in network mode [ 79.089885][ T5081] tipc: Node identity e0000001, cluster identity 4711 [ 79.094112][ T5081] tipc: Enabling of bearer rejected, failed to enable media [ 80.563391][ T5096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.573971][ T5096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.580637][ T22] usb 1-1: USB disconnect, device number 3 [ 80.600567][ T5096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.609995][ T5096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.687323][ T5100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.230'. [ 83.521496][ T5147] netlink: 'syz.1.244': attribute type 10 has an invalid length. [ 83.684996][ T5150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.717533][ T5150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.728898][ T5147] device veth0_vlan left promiscuous mode [ 83.770443][ T5147] device veth0_vlan entered promiscuous mode [ 83.773421][ T5150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.777246][ T5150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.794827][ T5147] team0: Device veth0_vlan failed to register rx_handler [ 83.994438][ T5151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.464384][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.466474][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.469748][ T5158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.472100][ T5158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.487475][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.489439][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.491147][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.492841][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.502356][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.525087][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.527096][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.528780][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.530528][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.532297][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.533924][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.535711][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.576018][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.578570][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.580492][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.582441][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.584222][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.586045][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.748345][ C1] Unknown status report in ack skb [ 86.820883][ T27] audit: type=1326 audit(86.790:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.3.255" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955b728 code=0x0 [ 87.519165][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.521149][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.522962][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.524802][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.526806][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.528792][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.530609][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.532309][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.534017][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.535911][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.537819][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.539542][ T4408] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 87.546546][ T4408] hid-generic 0001:0000:0000.0001: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 87.717855][ T5181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.721110][ T5181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.005262][ T5177] fido_id[5177]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.002566][ T5188] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 89.070059][ T5188] device veth0_vlan left promiscuous mode [ 89.092679][ T5188] device veth0_vlan entered promiscuous mode [ 89.112875][ T5188] team0: Device veth0_vlan failed to register rx_handler [ 91.058312][ T27] audit: type=1326 audit(90.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.065453][ T27] audit: type=1326 audit(90.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.518280][ T27] audit: type=1326 audit(90.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.523387][ T27] audit: type=1326 audit(90.820:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.538975][ T27] audit: type=1326 audit(90.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.544044][ T27] audit: type=1326 audit(90.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.656940][ T27] audit: type=1326 audit(90.850:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.666959][ T27] audit: type=1326 audit(90.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.686383][ T27] audit: type=1326 audit(90.870:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.837668][ T27] audit: type=1326 audit(90.870:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 91.842867][ T27] audit: type=1326 audit(90.870:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.390266][ T27] audit: type=1326 audit(90.880:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.626975][ T27] audit: type=1326 audit(90.890:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.632257][ T27] audit: type=1326 audit(90.890:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.637573][ T27] audit: type=1326 audit(90.900:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.642773][ T27] audit: type=1326 audit(90.900:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.647945][ T27] audit: type=1326 audit(90.900:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.653058][ T27] audit: type=1326 audit(90.920:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.659269][ T27] audit: type=1326 audit(90.920:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9015b728 code=0x7ffc0000 [ 92.782232][ T5219] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 92.784411][ T5219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'. [ 92.834497][ T5219] team0: Port device geneve0 added [ 96.376865][ T5295] batman_adv: batadv0: Adding interface: dummy0 [ 96.378652][ T5295] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.547182][ T5295] batman_adv: batadv0: Interface activated: dummy0 [ 97.666571][ T5292] batadv0: mtu less than device minimum [ 97.720814][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.726499][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.732014][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.737438][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.742811][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.748185][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.753703][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.759113][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.764430][ T5292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.805223][ T5301] Bluetooth: MGMT ver 1.22 [ 99.650874][ T5296] netlink: 'syz.3.295': attribute type 10 has an invalid length. [ 99.652870][ T5296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.295'. [ 99.775787][ T5296] team0: Port device geneve0 added [ 99.886258][ T5312] device syzkaller1 entered promiscuous mode [ 100.007426][ T5320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.438357][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 102.518085][ T5354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.542867][ T5359] usb usb3: usbfs: interface 0 claimed by hub while 'syz.3.317' sets config #4096 [ 103.028701][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.031924][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.059128][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 104.095436][ T5379] device hsr0 entered promiscuous mode [ 104.154327][ T5379] device macvlan2 entered promiscuous mode [ 105.507728][ T5410] netlink: 11 bytes leftover after parsing attributes in process `syz.0.332'. [ 106.355654][ T5412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.625804][ C0] ------------[ cut here ]------------ [ 106.627173][ C0] WARNING: CPU: 0 PID: 5416 at net/mac80211/tx.c:4934 __ieee80211_beacon_get+0x148c/0x19cc [ 106.629583][ C0] Modules linked in: [ 106.630529][ C0] CPU: 0 PID: 5416 Comm: syz.1.334 Not tainted 6.1.138-syzkaller #0 [ 106.632534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.635072][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 106.637075][ C0] pc : __ieee80211_beacon_get+0x148c/0x19cc [ 106.638531][ C0] lr : __ieee80211_beacon_get+0x148c/0x19cc [ 106.639947][ C0] sp : ffff800008007920 [ 106.640979][ C0] x29: ffff800008007ad0 x28: ffff800008007b3c x27: ffff0000cca3e258 [ 106.643057][ C0] x26: ffff0000ca1d0ea0 x25: ffff0000cae03600 x24: ffff0000f5010c80 [ 106.645014][ C0] x23: 0000000000000000 x22: 0000000000000001 x21: ffff700001000f34 [ 106.647023][ C0] x20: ffff0000f5012790 x19: dfff800000000000 x18: ffff800011a7bd00 [ 106.649089][ C0] x17: ffff80018a752000 x16: ffff8000082cff58 x15: 0000000000000000 [ 106.651025][ C0] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 106.653099][ C0] x11: ff0080001120c498 x10: 0000000000000000 x9 : ffff80001120c498 [ 106.655125][ C0] x8 : ffff0000dc869bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 106.657211][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001120b2b4 [ 106.659234][ C0] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 106.661257][ C0] Call trace: [ 106.662150][ C0] __ieee80211_beacon_get+0x148c/0x19cc [ 106.663503][ C0] ieee80211_beacon_get_tim+0x68/0x444 [ 106.664935][ C0] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 106.666373][ C0] __iterate_interfaces+0x204/0x484 [ 106.667725][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 106.669514][ C0] mac80211_hwsim_beacon+0xc8/0x1b8 [ 106.670833][ C0] __hrtimer_run_queues+0x44c/0xc64 [ 106.672200][ C0] hrtimer_run_softirq+0x160/0x400 [ 106.673596][ C0] handle_softirqs+0x318/0xc6c [ 106.674772][ C0] __do_softirq+0x14/0x20 [ 106.675916][ C0] ____do_softirq+0x14/0x20 [ 106.677013][ C0] call_on_irq_stack+0x24/0x4c [ 106.678238][ C0] do_softirq_own_stack+0x20/0x2c [ 106.679522][ C0] __irq_exit_rcu+0x23c/0x43c [ 106.680776][ C0] irq_exit_rcu+0x14/0x84 [ 106.681830][ C0] el1_interrupt+0x38/0x54 [ 106.682973][ C0] el1h_64_irq_handler+0x18/0x24 [ 106.684193][ C0] el1h_64_irq+0x64/0x68 [ 106.685305][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 106.686703][ C0] __skb_try_recv_datagram+0x134/0x410 [ 106.688073][ C0] __unix_dgram_recvmsg+0x22c/0xb00 [ 106.689409][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 106.690645][ C0] ____sys_recvmsg+0x62c/0x71c [ 106.691998][ C0] do_recvmmsg+0x364/0x96c [ 106.693145][ C0] __arm64_sys_recvmmsg+0x17c/0x238 [ 106.694478][ C0] invoke_syscall+0x98/0x2bc [ 106.695623][ C0] el0_svc_common+0x138/0x258 [ 106.696874][ C0] do_el0_svc+0x58/0x13c [ 106.698038][ C0] el0_svc+0x58/0x138 [ 106.699080][ C0] el0t_64_sync_handler+0x84/0xf0 [ 106.700311][ C0] el0t_64_sync+0x18c/0x190 [ 106.701477][ C0] irq event stamp: 61277 [ 106.702574][ C0] hardirqs last enabled at (61276): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 106.705337][ C0] hardirqs last disabled at (61277): [] el1_dbg+0x24/0x80 [ 106.707497][ C0] softirqs last enabled at (58828): [] handle_softirqs+0xaf8/0xc6c [ 106.709877][ C0] softirqs last disabled at (61273): [] __do_softirq+0x14/0x20 [ 106.712258][ C0] ---[ end trace 0000000000000000 ]---